{"report_id":"444c06e5-796d-4d0b-96f6-0c6dbc9def4d","version":6,"status":"done","tags":[],"date":"2026-03-26T21:25:34Z","url":{"schema":"https","addr":"hey-mint.app/","fqdn":"hey-mint.app","domain":"hey-mint.app","tld":"app"},"ip":{"addr":"104.21.17.133","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hey-mint.app/cgi-sys/defaultwebpage.cgi","fqdn":"hey-mint.app","domain":"hey-mint.app","tld":"app"},"title":"Default Web Site Page","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"34e9d5b9ea6baa6aa2c0700f704e8303","sha1":"8188ca54a0810451f2127600e07edd77f67d3482","sha256":"0ebb6da3ea62b5a28fd316bf1ff1428f2fea8e6c6e32c05e55c389d7ae824af9","sha512":"ab92c1ad6c6d9932fb4bd0ff07e6f3a9f12d5bb248c8a32b4dd8f64da0814e0df114ef32e8a60d67aac0fd631ecd659a5ac5209715d6729a794ec08eea4db7d0","ssdeep":"","tlshash":"c3e020e95e75c83464f4028510f9e39c152061a07712e70442e8d87a5e10fd74c92948","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"hey-mint.app/","fqdn":"hey-mint.app","domain":"hey-mint.app","tld":"app"},"ip":{"addr":"104.21.17.133","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-30T21:25:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"hey-mint.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hey-mint.app","ip":{"addr":"104.21.17.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-06","domain_rank":0,"first_seen":"2026-03-26T21:25:34.521338Z","last_seen":"2026-03-26T21:25:34.521338Z","alert_count":12,"request_count":12,"received_data":106615,"sent_data":6122,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"96ed059ae13eb8f2f3bd806f6ebfab2c","sha1":"35e67e8eb71844c4638d9af7656ca12917cb5daa","sha256":"04f77e2e83e993ff7ee640fff8c301dbf6d91502b0613351315c2d18b1394304","sha512":"38d9dae4ca620f7962547609a672d419d7987e1f693033b1af3a1d7f6561a69ae54a8a86dfbbff5e9cd19d54f0ac9aae90e70e3adfca4f89390d2d2b9e094aee","ssdeep":"","tlshash":"08d023e51b75853071d9014660f5e3d8256020907713760485dccc3f6e21ed795f295c","size":217,"data":"","first_seen":"2026-03-26T21:25:36.873323Z","last_seen":"2026-03-26T21:25:36.873323Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hey-mint.app/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"hey-mint.app","domain":"hey-mint.app","tld":"app"},"ip":{"addr":"104.21.17.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T13:32:36.283438Z","times_seen":363946,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hey-mint.app/cgi-sys/defaultwebpage.cgi","fqdn":"hey-mint.app","domain":"hey-mint.app","tld":"app"},"ip":{"addr":"104.21.17.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9963918b1526c4d9bc7ce001960907e6","sha1":"c691b9959279e2f468b036acc92339e1855fa38f","sha256":"c133f2d86d6f0b5a79eea2300993e6016d83a743f805d3d297bf7446b0fd3c40","sha512":"dd19fbfc7fc6db38f9e4d9e4de1b091cb1dd46dd7b0cde747ab4e8ad7a31b3fa52924ef7bfd6458c9a2b754bff56e3f2c5d36a32f80eac12feb1283d09fabddc","ssdeep":"","tlshash":"e311c0b53b2a5534c9d5418b31bee7a93d3260717a02a144c36cdc295d58e8714efcbe","size":902,"data":"","first_seen":"2026-03-26T21:25:36.874953Z","last_seen":"2026-03-26T21:25:36.874953Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"122f51f2329dc0be0e16662dd29d65e3","sha1":"7b2ea3d72cf09f200a3110ecaa0b050e2b42d298","sha256":"323b77618f4db87b2b574fa8f94010a22e9b8bb6fb151e216f8b2e8f1b61181a","sha512":"3cb1e5f6547d0a749fc425b346b9a7000c5c4b1c9f7130d12a49b18193155072e5ad3f9ccfebd02556fee240feca28dbf715914d8c390aec13434df57fff8491","ssdeep":"","tlshash":"dfd023e51bb5893065d9014a11fde399256121e07713b70082eccc2f6e11ed349f5958","size":217,"data":"","first_seen":"2026-03-26T21:25:36.876528Z","last_seen":"2026-03-26T21:25:36.876528Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hey-mint.app/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"hey-mint.app","domain":"hey-mint.app","tld":"app"},"ip":{"addr":"104.21.17.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"715438a936900d1516cca0f87b6ae399","sha1":"de50c4edb62a309c1df14528fb1471deb7b3c327","sha256":"17603fa41e1e2d07039f0b83879a49a2b2b144aa20affc4cc491aa02f8355b76","sha512":"33eb3d7b25b57d645afb59f659666cc9420f23b9c1abc2b5b600298f473c5908b8b1aede1b59fe7e2558a9173b781782e62aa64c4e69c3a9ab4812c8614b96cc","ssdeep":"384:u1zPyTTIaItJpQaPywHzmR6vsJIPIYgwt4Y4sOrLD8VpfxVJxPhoERu3KXkODMj5:u1DyIaIrpQaRSIaI4Y4l8/xrx2H3KX9S","tlshash":"12c2b4cb7acb7c3bd3766478407778cbe2addc50a0889504d1109de9b97238ca697e9c","size":27283,"data":"","first_seen":"2026-03-25T07:50:24.028468Z","last_seen":"2026-04-12T22:47:37.628499Z","times_seen":553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hey-mint.app/","fqdn":"hey-mint.app","domain":"hey-mint.app","tld":"app"},"ip":{"addr":"104.21.17.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"821f913929f97a9976b5f0304d1e4c79","sha1":"c65576c7f064cd889e0e682b92f3f184f5a84dd6","sha256":"5b331b795fac59a936984a56b99925d91d9e335b39b81b627dab05bb45bd1962","sha512":"2d2a44abbdb07bc1bc496f0a3dd42e143574913ff0a6f48fec05db48b69029ed6ff111fb7224c50100a6e74cefe5f68935339aa9bb420c10605a5b95ce1ae3ac","ssdeep":"","tlshash":"621100b53b2a1534c5c6408b31bee7a93d3260617b03a044c2accc395d18e8714efcbe","size":902,"data":"","first_seen":"2026-03-26T21:25:36.878021Z","last_seen":"2026-03-26T21:25:36.878021Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hey-mint.app/img-sys/powered_by_cpanel.svg","fqdn":"hey-mint.app","domain":"hey-mint.app","tld":"app"},"ip":{"addr":"104.21.17.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hey-mint.app/cgi-sys/defaultwebpage.cgi","date":"2026-03-26T21:25:13.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hey-mint.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 15:27:11 GMT","end":"Tue, 02 Jun 2026 16:24:56 GMT"},"fingerprint":{"sha1":"E3:9D:B4:B9:CF:42:04:A7:BC:93:54:91:A5:94:7D:0F:F6:35:45:79","sha256":"B8:E2:EB:CA:92:B4:B0:C8:33:1D:1C:EF:9B:1F:93:A5:EA:FB:97:C5:45:53:6B:30:26:EF:24:2B:57:C0:81:9D"}}},"request":{"raw":"GET /img-sys/powered_by_cpanel.svg HTTP/1.1\r\nHost: hey-mint.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hey-mint.app/cgi-sys/defaultwebpage.cgi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 21:25:13 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2506\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 21:25:13 GMT\r\nlast-modified: Mon, 29 Nov 2021 15:37:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ysY1bf61azSL4%2Frq73pfFd6oKjfF%2FC0RpHEe%2BXSU7kc6VD26qSkQnKDdnMtkyKWa%2BJsA4hLdyBNlCoUBgjwUqvU9pqOucCuJ21Vv%2BwsRvpz%2FNXapX9jBfvRQvF%2BLmXs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e293a072d738be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5617,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c47b4b5200566a2a496a11ba472ec5da","sha1":"3bd0da9a6ffd62217d3e781fa1356f40d9f91d4c","sha256":"179a9aa9fff4c52850d9ce34a4c435404ddfd4fefa8aab9a6eb4f47b83f922d9","sha512":"b67659bfb2f94cc1124eb88f7582ae2ee1c983210577edc9aaf6fdb65f6b0e2b9fd786169a91fc72a1ac0e8556bc09c7cf35395c7a038a6f6419660b7b64545f","ssdeep":"96:BDol4IVL19t2mY5Ib0Va4FALs/k2eerILEKQhnEIsFGFB/aStUY0NuhHkzTUgCgM:BGjR19tU5Ib0tCY8jeSEptRPFESt70NW","tlshash":"77c174f9c7a053f47ac38f5deb2966d0b0ebf8bd1ea082c451759368c4c0ad9e948874","first_seen":"2023-04-05T04:59:52Z","last_seen":"2026-06-08T12:43:27.636523Z","times_seen":43204,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"hey-mint.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hey-mint.app/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"hey-mint.app","domain":"hey-mint.app","tld":"app"},"ip":{"addr":"104.21.17.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hey-mint.app/cgi-sys/defaultwebpage.cgi","date":"2026-03-26T21:25:13.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hey-mint.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 15:27:11 GMT","end":"Tue, 02 Jun 2026 16:24:56 GMT"},"fingerprint":{"sha1":"E3:9D:B4:B9:CF:42:04:A7:BC:93:54:91:A5:94:7D:0F:F6:35:45:79","sha256":"B8:E2:EB:CA:92:B4:B0:C8:33:1D:1C:EF:9B:1F:93:A5:EA:FB:97:C5:45:53:6B:30:26:EF:24:2B:57:C0:81:9D"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: hey-mint.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hey-mint.app/cgi-sys/defaultwebpage.cgi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Thu, 26 Mar 2026 22:13:13 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OxJ5hhuJgQd800UTKtHgtrfqVdhYc8OMA4nyamgTb08QMmPNsKjHsfJuoGUlyyMFkuj%2F4pw4DRs1JAUfycka8iZWyABQV8IKo9Lu7YAwyllylnlO%2B1smZjz7Iy1CeT0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 21:25:13 GMT\r\ncf-ray: 9e293a073d748be6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T13:32:36.283438Z","times_seen":363946,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"hey-mint.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hey-mint.app/img-sys/error-bg-left.png","fqdn":"hey-mint.app","domain":"hey-mint.app","tld":"app"},"ip":{"addr":"104.21.17.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hey-mint.app/cgi-sys/defaultwebpage.cgi","date":"2026-03-26T21:25:13.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hey-mint.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 15:27:11 GMT","end":"Tue, 02 Jun 2026 16:24:56 GMT"},"fingerprint":{"sha1":"E3:9D:B4:B9:CF:42:04:A7:BC:93:54:91:A5:94:7D:0F:F6:35:45:79","sha256":"B8:E2:EB:CA:92:B4:B0:C8:33:1D:1C:EF:9B:1F:93:A5:EA:FB:97:C5:45:53:6B:30:26:EF:24:2B:57:C0:81:9D"}}},"request":{"raw":"GET /img-sys/error-bg-left.png HTTP/1.1\r\nHost: hey-mint.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hey-mint.app/cgi-sys/defaultwebpage.cgi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 21:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 8072\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 21:25:13 GMT\r\nlast-modified: Mon, 29 Nov 2021 15:37:03 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0zze%2BIZjY595z%2ByFvqJqKoFtsBEgna4%2BbR4ENLafIK8zLezhJol6u%2FvHWOlLdbJ0xX90ivl6RhwpopKa6bn1iNNu1XH9Qjiq0bOOhB2WvF4Vc%2F79Casjeq1kg%2FSbTF8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e293a074d788be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8072,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 410 x 400, 8-bit/color RGBA, non-interlaced","md5":"cdbe46a0178886162bdedff35336154e","sha1":"f5acc131f7d3fdfbebfc4a55be73cf51c7638937","sha256":"862885b79bef22ad5716b2dbfa714d52f628a439f2921bb9520a4630bbea5d4e","sha512":"cd75baa25c17945a25381d08d30887ddcb4a42dda676f6189bd2e25c91e390197d2ebf68a86b74995a32483445aeeee3df7c0ff6bec9e8b69f1d84f3ee3423b4","ssdeep":"192:4FWzRDmuPuPjEAWYgZgwuJGaY8o84ntC6K0GrD7tSHzN:4FGRDmumPgAWLslY8o8yCjzr/tk","tlshash":"6bf1af71ca2b86519ebb4f95c1fa8397b851c92ecc03b3f68c2716376dd61b6452ac0c","first_seen":"2023-04-12T19:49:10Z","last_seen":"2026-06-08T12:43:27.637178Z","times_seen":27709,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"hey-mint.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hey-mint.app/cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.36707159097325237:1774424211:9_pSV23kWGmNtldQToc5YDBzJFUfKD8QS_h75YB-Zx0/9e293a053d0b8be6","fqdn":"hey-mint.app","domain":"hey-mint.app","tld":"app"},"ip":{"addr":"104.21.17.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hey-mint.app/cgi-sys/defaultwebpage.cgi","date":"2026-03-26T21:25:13.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hey-mint.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 15:27:11 GMT","end":"Tue, 02 Jun 2026 16:24:56 GMT"},"fingerprint":{"sha1":"E3:9D:B4:B9:CF:42:04:A7:BC:93:54:91:A5:94:7D:0F:F6:35:45:79","sha256":"B8:E2:EB:CA:92:B4:B0:C8:33:1D:1C:EF:9B:1F:93:A5:EA:FB:97:C5:45:53:6B:30:26:EF:24:2B:57:C0:81:9D"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.36707159097325237:1774424211:9_pSV23kWGmNtldQToc5YDBzJFUfKD8QS_h75YB-Zx0/9e293a053d0b8be6 HTTP/1.1\r\nHost: hey-mint.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12158\r\nOrigin: https://hey-mint.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hey-mint.app/cgi-sys/defaultwebpage.cgi\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12158,"data":"y6B0QdM7VrkNNMYVNuGukuSP$0yVuy0MYMtaBu$0fYkGuvPllq83AYkDBWhuk0lS3uc7Z0ktuacoM137eUh8hulbhghuVSn32+umjVY50Aro$4dU6NDY60ATW2sGYO9duV4mzk$VA$m4dLe16uMXPVHSdo3kJu0QdedMwuafuPPAsfKsC7DBlKDBmuklduiiwMKou+O47SZsmHxb5MP56uQxauU6usXxDurvyQBj0A4LzCBefU2GlFHA6uQQsuM61K3ZQ+brNuAnOgzDjsH3uVO3DYVB0uQX6jQH02PBuxvJKYgWE+GQ6ufvsrVE2$PyKbfREqMguVdwkfx3rYuuoi3Duso-kVOkUOVuA+TukR8+duMUH2k-dKHsdu+H6Fffjhnqv-Kv-++60ssbvzlf7pA3XmT2fsGh6uMr1cMufU+XaFOjufBj6TfjisZM0gPjwPfXsNOs7C5F3adbg60kdYXumV58GUoalCQlLH3-gnly5jHlFaU$NhcHL4jXLQXWQLcySbrhukfHHTV5fxt2v973f0bWADKsVK2YzV4xds-VLKRjJ$rF1NR9JDiYAx4izg-kwdcQ34cqLh4K$-m2z2uMc8g+Q99zca$i9$CPnFjfZi6RD-Rju41OQmHcjgdP6Y0XGvkkrkL80Gs0WdLHxA5nKXCQCb4juWhwkMbArxwjHOY6qzj5QbMY5+55eOqCu2u+ouJ-ko1ujwo9YkcnUu5U4KyrrAFVzHQAqaHJyxXU5tQU-nuHLw1ZlU8$1xHsT-B79cG3$JmBy3uA-PQfUfDfsD$dmPx1UMeyMC4-UERku2CpfExo4pUu7ccj74vkNMC4k49UAssUnCkgru21rungM6R6EVY9dcMguocmf2ofss20Duf9$dk2rBu12x0fP6Y$Q1V20nkunYCMff3r1p+3Wku9dCm$UhfnrsMX1$7$CUdw+cudrMw5wrnlVMMJrOJUfeeHr3LARrM5AVjSuntB+LU670cuRtQgP2R06NT3KEmPfnWfRr3GXR6QwvfQgRiPBBl8Kqu$vPmxCvo4+Kn+7$2AoSUgM+d4JNg8UXHDQvV0NY+kgVQv41V$+wHmRH8BsOfcUHx0LfM4dOHtU0LuKXJZOMD0eQg9BF$mcHgAG62uf-2mVNM81atfsDfqM+ABK3tudb1qi$CAs-nzmcmP2AYW5U$Wutq+DM1Y$JunrClUYkhEUlEiuDM+P2xX6x8mHY0om$e1WxrK0z+2v0zrHBmofg7PCAfwis8BmDf95pC75RV4dMWY3UxfSdyWNx9EkrYPY7D-6u1uU+rSu7Hp8Ru6BsT90outDXqkuY$1ddRYLVnU3vurpB4PNO3Y4dOU1HV0CvflwftXddtoV1$bYEL90nuaru41KCREfT2$u1L50cMlyRcUCuA+k4su+XEHocMMoCHnD-G3uU0lKkoupdMYY3tRUZMXar3CXsryRMRbz817iCZDudDWEMM0nvurkhUzvC3jTDkqOLpkW23TkqX46XnUTHDB26L074hXbg3MXK6xzewwyY0Gw5krnwj9q5wcuL1VAzbbqcuBuZwWuYogfMmu8wS$BmgkuV0Mu3VZhepzv49720aAhjEMvlMGV3ktjrVuFM6kVm6Qcdua6u3T1pCNAvy0JoGbS3Km9+GuuL90Y$DlPARBHyHyM1S6AHW3y0QVcka+G$i2grYQkVARPcMJ47rRWcH3ohW40nV6iBMXeum-SUsos8sY06$6muPrWBkDS$0HrLpfz+oq0WkTDWeSS6$z81Dt6X8r3b13KhDEW66gervVaQ90f$a3KA+B1r+6KHdCVd8U-Z0DfElH56Udqfss+7asBsHqTngmErPUARuHU0tKjs0V+qsE0h4+AzAYn2qHvf9Yhc$Qs$Bn4+$dMDmufwWO2slmJe0fRjX2uyDHff8f5y76lmVefClYM8u0Gl0Uml74V0sP7v5eKCMUukQrlamPQunVmn7i9eDvsEVimNmjktqaABl3g5TqH$uV1lCaDNclZu91beKWNPrZrGdFlufdTN+l2MH0mAOr3qCLvTDg3u24fBHM+n4U3XndPjdXonQHPMxOhY+zJKh9tN+7cRAoHdaAfUvm8n49uPdCS3w$5uQKUA8OjFPK7cuNoX8cmSS0sKwjnBLa3zLJuiKiZaCX8n09-MlBgK5uuvxSUTWxT4P7aRoBvnX4LM2G2UQJpPyGVNfiKqc6P9ahNVowPvPBifOx4M+TlVQrDX3+$hTNj4zkHr3k68lZmEB24JOR8LRRmfkYjcGU$kuXjwnNsTLMPRrHKU+smWT09+C$qeaR3ECiuiz7EVysK3iKJtK7RorYBTh4h7Pb5YMeYKeUDdSSryT56uOQ4r3V0Lkipv3Teugg2Ynu1W7K6NxcaxyJt+j3oQPDN85yD8+ZnkQ7vc-3moZrGM4BQ-TeTu+jK9KPnl-$o$DGoH$due653en0UfB7L0P-WYXH2xtN3QQV1NyNOjHMKvOsnHOAQMfg10T9gny7Ro9fvkTZbx9D0BOf2brEdV+hy3+H4Jh3tHySr+SdfDy32SO2EMbH7PumrWNqSdMeq0rz7+cuGABAUUh41dubHUnCruhowgao19o0n0n09bOBG12gag8szr6Jb-Pjx09TBuBHoLGWtsuNd6nEt1sVOf8cFjjo2HdYU0C95gk$Tea-sQdkENoC2qrl4EeAKEec31Ho8d0WJdU-P+jsdEfE8cuhLOwdWkbsBG8k4ECMDBMfA-o+yasdr0kVXA2f4-N6zTuk031++lYMlb1WMf9Bv3LUf34V+6r7EBV3WBQDJ93dtWRgv0TmEpZHNtTpnc$Ec1-44OQVH86NBVkf3RjaLkU64NN+UP3kt8gmoBHAJ7O5a2ORpdAoRyZOSWqKwsgmPTM+2oq48TWB8jat7YSs$UV7rVM5Nxn4zyY-S1Ou8n-DV5CAVGGmfx50dkYeXgG3lluudrQTzSb$LkK77Ja0HlowUH5W9LTURcqpXN7p+CaKlWBdUhiYfoTmYSe7DmPNuByLMnMYe0WwLJ9lpeSZ5G01J3OgHVFk$cgKRsyQCc1w4R$F6BcfVO-3ocuRDqclfv1P+P7lVHFYubw9-Lr4Re0fXocRpDUYjn1RUKX9hsTAVQRNvAYd7GCJ6UHcCiNXR29QWOyp0dVVxLyAQmuGhZm3RJhTkKDuNSPBx+y+5xsG1nBzJjd3x+80Ga1k54L5-BENoVKLpZcrKPwSCcTKkVjUqWwN4UmcVXSaucKPDDwDVJiOa0SnZ03Q-zDBS9BM78+kaClyHVRe0$3s-nooU0VATQ4xcS6hPVz1SpaX54A8aTLhNkh+G4uCVkFtx4Vyo2-vp8tDK0qsBnyo-8SJdXFNZrjmY$HeucgRbngaG4N5bZQg9mTvbZuRqbpHCnGBl4KrDk2CfVkQRDg1uPbut+aafRH1WYWnnVVmGnEppLdp24p$sn9Lvp$mDpq9sGNAZsR9M$$DHUY$1C55ZnUp24rUY1q4YM-$O3UTxMgJao9J6chTkJgapMscPpBVn0afHf$fsGVP9D3ogpRMgLQ5WAWUopojHBgK2Ghf0CuB71mcRLmsXDX4dsPUm0vPEDRfL1+Ji5uGRuwVqo25Wdr30D0tAp$U7UYVho194pS4nU5954YKHuC3sT-C7i-GDmBMOddkEf$V1LhsvcLKnaauffhPVd6Bi9spoGorfy5s0excHB3raCa4mJicjQ2fGDPkJ02or+w0ZKcpKjX$nVbcs3s5$pdKVdO$1pcfvD60OM1L$mmD6UKs7CZCX1ZGCoiTb4j1+anp5aFnr9SdnM5o95kGgDiG-JEr8pkC3tMaNeBl9PBfae$VaJ+91mdr4pkcgrwoDBODY0JMXP6fBUm+GKK+jJBLxVElErb9EluAY45man0J5nXmgyUCNlEspAWAHcd56nz3wkDoPeF5LG-5-$6kqGbG1KFot3hnD57K$DPMijNcic+P$MYkdCXPJckpdaTuST8Bi9RMafSColJpHuJjbCY59a-cDQ2V+j$toCkav0fDNfqGjs41TCVG$u-5mj7GDMrAdDMD3BiGJPkpSewK6K$VRj7cia+AUkwBFjrfMyPo2iBVE+V$V5mLkcipS5tmYfaACswLkcLK602sX$tQLKW4$Mt++4Qp9sUlDG+KpPskul600y51hGgdUyUtBfHuZ0wBUG$M+rsm5mMa69RGff6D6nh12j5r20+eafMkUPVJNCUucP6mYuwA2KYDMaUnpkjPB+bkQasC0JpG6MpCY1mJ5K$lhedD5VVVuQ$mkL6TpUJsBf$CrMm$fAY38VDGkeBARlQGHuEJMkbsXsvJ+a6DWmHAjLWQm$-+XlPj1emrM44rTl0LRm6AHAcl8Lh4frUrpnv1BjMmddtpWUtGMV1pS$MskQuuQ1aAZixBpa7+PTiclBssil7$1LTD6U4LS9Ruo4$uGJ1rGTdmXoqGsdb+4Tnrnr+VwkJPd0qt$3fLjeaoKtG32olGbc4BbLHGfTWTwkmpn9fAxB5+uNoQ$UmeurnuRjrVC+HaMfBMFc1agM3BYBBjuZKlcLu+uXXAYupUY$2rugqCqCH8d1Rrz08aveMCv+p1vl$j9BOUlsruZK5DtdNmY0OMjJ64rlgtOi8$Pi9+0vvC0OGQGajpZP-TSpGeRAsvHk6VrfyeDaSB95MjPPSiMefQL5W0iJR0siRyaHDMv0sBmdsry$v$itlnum5MHkh178uyLTYMqps8MogTPeHAirCBgnec-JC$PaZoxd907X3eRQ4tj3nfcPfCt+gjm0ctPKHeDa4r7LuJnUN56V7$cGgdnLRmWMDkrmvL7Jl9-DqjVMsybQ$jEPr8WPM3KJb3hJ9PZ42Z7CNnE0ueENt3+AHpoA1c03jZ$fAC$ya4rftyEt$fZ1J11aNtJa7cENc4OB19cMluVm6VYcak3BcT51mJm8bD5MDuc1ocddmeda+VHk3OMJ9lk3y0dViP-3-51yUoJJMyycoMJv+$pnlBq1wf+MdnKsBVRtc4mGJAgMYf6XK$2Nl4V52oKU6ZMQ2UZpTtdZDns8Drug+9xluoJNhQ6OX53ddmnB7Xv5AC-sJHSZdyD0mpSNL0t4Q4l9RlDdfumCVZqytN$fL5mlAfeJrU$g5KPVEpdvJD2L5yV$RBgaTM+kTDYg09k0gnlvfXSlEP2gBcn5WaA4ViMNV5JMEssuK$Wcxn-GBUeJCPEgzcDgdt-gEycByNH3MAm9bpA+U+8Xvd5TCaLiYXBg5adNGrOC1JtjafrM9+X8mBiJulscHAfVPuDAWN+VHdGXwHOUrGq3OuXtvdidyB0N7j+uJrYOgQn1YMPeDneQGa7cmUupuGBMfBveppkemtNVPt-G-nx0wmPO6KY5z0ZrDNNC-4CDSQHeRQmomnbsVcJr+fcnuGZaNlnO5CCg5QCB3XJG2JdUdZHkYCtkLJ1l51oOyeqasTA0$l-v-HwUKZkDbi59ForA5K-HR4+8YPlPVrHnD$TrvGvopdUjclkoKXgmWsLJrdPpzHKuzVzVhBneM4nu3yHm14v1WsrAZ5deajACK+rQ-+uyh$y8wV+e-+vnnlBgUBRonm-eDc1aqXOCsG2oxjl4GZktM4vZnPDkb0MOtOHW6sTf4vBX1J$QamHDV$E85fcPG3MAJsxPZ4wfDDJiqJi1ttZ32ex5bLRlCrX0zXsQrMCKs2y5Hmal282cieHU$NU4+PUnL1nlJ0njuZ4C$yM+iPRmRkwMajLsvjxHl$oD$iafV2TpOJu8$fXl$f7cLawNaV$4Wi2ntyuClkdn1VjWeXuUkgYPbcs7suciS0M4NBKUtk0GtJE+7WWknMUnOXMtEKiixeWBmmAeu-CNLNHK+3QOXvkeXglgSXSXD4Q8+VrMrVajN8hpkyfq0nHBgvm8wLqJbKqacjbDb9c+vB$Gf8$ocsi1mJnCnCr9+cLDMgqntBQlZQ+imWrUrfrZLthLJPYA$rYg+nXutNuHg59PHf80PuE+ivnsLsNQ0aMaNecvs2Qr+ffjyc9ablJeSsvjb8Z4ar6sreNAQ$xBY+HmY+MMcaBnaf5dAdVgJ0VL771+ztQ8NLpM6$WxNGEMMjugfeSAeNV$6mrrUNMnxZd9FLHXBNKvN+CdV$KPd1a2UVDQfOVLhsGQKoBWsW8xaU87PqA+CXff18NAEZ0NhglXUvD0Gi0HE8ZDbObNX5nxmcRrlaYgnC1VMY2cru37HM9g4PyeOQytYXgghqvX0Lh7Y8-KHxyHVv9n4$1$2x9asaxcRdrkmG-TQvHcAGLY8TLxUXBcagvNMo78ODRkmoL3DKD4fUmSK8YsJ594vegScLh1RLyK0ByySNQcHlD1WuwkYyf7gU6P-+LCyQ4Zd4+x2MVgOp7vbN1Q+tQXsYvvSvyQZQ2kBc+1Tl6CqT2lm-xn4DG2fg$pvlXfTJtDxr1ls8uYlZvS6rxc8yqHvC+pAsXiq8yn81fUrWNVzg3elvfudmLj7GTyHUxpEZTG$ubDXcR5YfLL6$H26$WVROojMUy8pgnujxcYwmw9kZXyQZXSTHg-YM7Ubyv7WKmVdMEsnkMHA9EmTZk7l97tdW7Hqork8Wo-o7zioqZ5fohnRJ4l5JNVDmNuMNvpY7l9cgYxpWy3m-aJhg4YGiUZ0FQgv1At-g5nUXfV4tXcjdMD4Da3V1GemoANUOEZHUW4QWat5fToV5Cly3WDZgTq82uvQyfeEZeGx9c292aob3NfvpnDBfs4xsDmrYf+S4yr-BMlBohTf7G9jE11F+4yxkojRMdGOrnMttSqN-YaeSZSowp$+HgDPWwQ-$O8EW22JNrvU359Kqa7D9By0br7NJ4vOl5OCGGKachH4WqgHHwGHDMkAjakp8RYKmSDz9n5JmZy8c+0r8acM-P-mHzVJWgVNU2zXrH4LtWdeyqG3ZmCAAzq0glClcU-p8Yb3HTlZQhnGOP9P9v4c-mSXU1yakpcrFVXK$1GPWM3Uqlnd5jv1Tl$tUhd$2HHcOwmKDQNkXUadOjJaNuNV8aRMxwGA3A3+x3QwfQ0KuMDr1fXsYsHZ9xQrufSO$noVdGiy-VlpAgZ59B+M7YgOHdVfxV5ExrpfmkLZx4qJyJkZqZHnn-1L9zWmGWT3Hg-NQ8wj4WAeYl62Tk+jlgDQHEjsMHqnX5KXWCkYz6wb1l6NEXFZ-MxnMOYwMY4vZakfgnm7djd5RvGcNP6KuWZaurtEjzyuXNqpCAUQ8DwlcerVCnKd7QnjQ$VaJQG6s3CGs57UVGPVanfAH4o6OxAUM7wgZCqtHJkmpbQ5PT+akTeSoTpZsTuVAauS0V1pXYhQ2jhwCjhVPggaarwtTp4-wHVElATR0a2axJ$aWMme2KHwkRGArZWfapKZlxQxQ9n-7vpxBrc+1$9+0RWdSpad-kqm422idmnm49DoXMwg5H+5eRllNbbb6-huAngmUTWEEFLEhR3HHiTdFrrTVE+i619ze3lDr+kR3URS29ghXlv4rfJTh$9Pwg4N6GqaV2Qfy+ZdKTNE5HQ5BdU4zwVQKTUmt1PtFNlifKmasPL0MM81MtQMMw0PzB1dUA+C9UkfsMM+B0r12mMW0JixGu4p7YBseKVlMiyYdy$PMVG6DxvNB0Nk9aWfsy2l$UcdozyLskusd1rsoS9uDgbQf5+bnvb4z3EWoy6l3A$QT3z0dgM1ka1b046c8Wo4+uxGw$Puz0nrl-NJG6Sy6EuWorYuM1uk9UvuLKM3xNAfMqnO22rmkBHlNRoCDg7nT335MsmhMnsWsDrsHmpBiSzMYEUnyYfsnRnbBwua$$Q9ambuvY5omfd04th0$rHuJf3ULVHgmuH2UB7B7Psdm+MH$ay9fejkdUdzn7d3zMVUUdf4$6$H8QgekuXMGCHE1PrfVaQp2Xkd$6lVKVorBXkHK+h3PHYyuhKT6P$hm-Rmjf2A0$P$muRyy0rzd6VYrYB7PfW42mbMLuy3rutrBgU1SG$xj3F$tugfbHXdEl7veryZQ4uCuELDWNmugmHy0BRknd$NQfVR7HjcXx3iNt2UiVqBUodZmsQJfSkGsd3pB7mfN1wTJ$ylVs+CkActl-0eo5GQEuwmbuPBB0mAO40Xk-l7HCa4R+fyGkfC-srBooNf+sfa0fnQ9kRBYa2HjE9B2B$4Md+RmmfX7WBCusd+w1zuS84RrgVKrnmYdZHDte6a5kL1dM8+joVsmrMY497J$6BnDrard$0as6VarffJBC3cB$n8oxXVbfvnMur2bBvHfFdS1Kdh73GV7l+B6o9ucr+eKfSBBf6NEpsYBpPtuQGANYEEks2PUOU1Y4$jnGa7N1N$XfLhEMZrfNsU1VmhuxnUiVs+VrlRiklufxVsfHy$1W1vMsBhyt2Q2VD10otaS6DmB1m81WsGpMhtsteQauT0btW3aNB70Jfou2YNr4rrcmG3E78YRl8aecUECKRnYXqPVulKb0FHf6A0kDQ$A4MAMR$30lVkakEng$A3FUkxPtfzVt$g38ZZ0M+RndvmPQYrl5f$b6SC$HBvHPGlp4ddQuL+YE1v4SUL18ukYG7TVAzU-H6JifTNT8Bik4uDHW6ONnKupMGU$sujYH3AuvcU1-0m7TE0dAmAbyoPwuernhu6$LVkjFs2MNalBCyXCn+020momW$JriBuxrffMlui7uH2WTk6Q60iuSo$tjocOAMQwAgMsmoxUoy8tefcBNly7rfuLkJvSoOd9+yrVVMqkdMEuu0ro+Gen6g-1BEiVBDYmcoSSaYaE9lAMPY$$Mvu2t3QtCQt0HC9a8s47dBuf56uzB037KKuVt+hT1fUKDK-vcb$7EcWONYSBdkYQ5ym+A+kT8KL5AJMGWb8romEUzQ6M1wnhWPB9cguvO2JWcM++CQ5o1S3Wh0-FkEkakJXRYUOqUi6frcmY0YxPMJyRyoQaVjVHBudX35YsBsAMma35NBfgMjKcuuu+9Ru7$tM1029vWPy3VMxn-2+nub40++yCuudTxHS9X0eBd6V0pBB61N4wk-ohtu+77ijmpBf32uF3xm9q2QdPX-MxUso3TC7BxMwouzHGpCSbMJ0-4BfQBAjU2nOEg0qfZ6BnVczQDX0pYyi1Yuk4RlLOV7lUybm1ksjWAYry-adbF-8$yuaEXRB7Ha$DYf37aqVmv1X10oba1zHMBNMvK+3S+7aShsE1d1i0HOk2rqoXVrCVuZr7aqD+P3qKkaveU$MzlNgrO8$3BMfV-4vmQXOWYBu+Ag+g5ZKKr6HdfUVubf40iBldSkX8Q$AruuHuJYP7aepUgMhCxjhJViJXsa$KSJBMPDPM1V232KSpWYVUmoRWuQup3yAUAPXAwVEV5u-N9MJi$00MuRja3VgtkM1u5naoVHlReNMLyv3Oun6+Eug33HqXljk3mPm2Xd32Cy7MJrEmms-ufKlNwQvcfavqSm+5N62-xyoRaoguuNjgMSfsUvrEuksrJUeu7dmn1BbNO2VNmPP$r3upN57n6MYMCTpSkr+tKgn1PNMAMd0foufAq2P7ABloxykAttoGorh9ovGT6s$3zltlr7PHequcsoCrhFGmtnq3Q5guPuB7ptTzVA48cGCYaDNDAtxiOcw2-7H-r5mW+zJr0V79GTprrkR70Ji7zNqXkvPE3rNT7hJTf0E$6Nc8aK-FVZr7duXwWbNdoyABQsDu1Yz0-GTysaujkF+ksYw3K1am-c1hcj-Gqv4ZPi7JHDE08qv4+$uYoJTNMwWHAAsluABA3AEgqe-iFcCudBYGKomuah3mrLaewxvGeUuQ-WgN48nu8Aio+qJOE082CU3XMYABV02ttbBauF5EUE708ai+ZJ-cZBd2mptbtfAccHUQuaZvFeHD0oRUmo+2u9yYT2hLhheqxlTMh1ASUuxo7bMxechdusmbNsM334Kg-JglqR-$ndTH9d+vYoMQ$DZ$-1dQg7kYzGqkQfke3OV-VskOn0nu++rU6gqE8BZofFccUOHzPrYNb5R3n6URAMngrLdCJPYwVhC-Yfuas+eU9Ny8f6N8upBf6bd0l2irYaEo35+VbCKfOua1co5SPq893X4gQBqUOdkeVFeE1l+35gKjT09QmMKJSn3oDC4uNRkh+SSDo5olpfksl18Bb8xM9pmgamMLhvuDbUldaQVQP5JhYhUxuisXNAjjkTC3uBQsj-1sjknXTH8+vNoZYSEc4AjNXdD+rUwMkP0jHbst3nSMM4LVjH7du19PrmTSYNHGD-Qh5i7OSKbmmaaUThRERolaHQisMK0L0xJQhuQiTC4s92W8Bo8WTgHBazE082VrBMUQd7EE2C$fAwDhay2-VjUDUV895YABLuDBB1rbstn6TtVN++G+9bBvvX3rG0W3XgkR-Q$ks2YfAsX0J6879VXJ93H$4fg63bYN3BKvOPo5d7Xp-GWefKClEABamA2fJXqh$or6zseHA5VUsAK1BZVZ6qdH7vk6pHOdNftAlWDqKlBeoAdl7+5Tzob5ldu1XhV$f+gF$efedBdVFbH0l$xVO6Yhm5sYLlT8oeGK2gmM3glShggt46OD5PvFUEKCMO2HXVSdKPZa0bm2gSPeykaxHJ07muVk6S0aTYiCK1CkDbMK5myVyqQt5P+Jkuf2$JU3fz5mgqSxg1W3ABiMlv2uo7itWPHw94u-hO7HLxA+4iXvKL+XUt93VEk5v8dBgbdAPgcayvFBz2p59+O-1lhJLS7EOS9QvazvzTlN$8YGgyTOJeRBRH-mrgxD1gY5R2j-3sOiTkXB56R1Bf7gTT4JG62RGWS4f-TDu5h9Vtfn7HUT+gJacEHLaDHATsCiEEduzWomnnW+1TUEg$aGXZsxvxTpJHL2FQk$k7eL1EO3tFyeT+vz2gRGLnuZZT+gBUrRXOnuZiT3xYU3KGk4wa3902fUo6hkD0OqDv+NUR2pMYgOOaf+cangNOaGOBTK+5TUVjWkoJxaj+wLTmwn$WOR$JfPLAVzynoNiTmv8Uc9e$48af9b5$$OgdnaWZ6jUMlUYRXT4BOGXrxhUymz1aHgXaNxTUURFvfHob5+vOU8dN7agHrTCY-LbfK4+ngfGG10yni2CnitsGgxfjs5WO9fX7DLQNyedNk9$XE9HQVyed8M7nXETBxAyfKLkThvrJ329yBKPka2gK9DxvuGKL74wHVd$xqaFBdQ7$X+DDvJ5tRZlY5HgV8gPLAK8WxSHJpQ+xLPDJPyNZG5+vEObrBc4rXm9xvNOngNh2rXaGGg2O5r+SWPH2G5x85URsh37HJCN25TADsvTNv2Dzdz55u-S9LgR9rnGOwJ5vn7Z49X2p$xU2oUweLa+MwBjo8E7Ovjc7dVa0dRiehdYMs+o3T0AXQOvhJdx-0m6S6uJBXkOv4VfuyrlafWV5Q6LF5ME9OPPkYaz0Qju3rqcZYRdMTHjo8u3986$kzMks9-PzyKjlvqO7BGyafVWjHdhydfFOiJHhTX$ZudJf3luuukjPtLhBHuuVjOJyfMre9meMvSAb2jtKMquHlLBtdn6yH0j$X$5jU0ubBEVSGmlMB2YmK1PHuuf+ou7V0ulMBlA0WoqJlBAiQD0o8v$lguCmlp7ua3coDBWXVgPGBzor8wNYvvoMBM-02uxi3uuX0046uul4VbS-bn-gPPkNuNurBl8CoDukl3KR80a8cATvXLGRbQ-yus3ycZCk7b4oG80uyc7bQ-KVueKNmkp7ROYrukuu0mLGmb8-um-my3fCpd0juX6UeKi8hGJlX0$sUYl18oknRUBBueYkwDBkkCHs2YWeDouH5RueOu3BcQO44umuE-yByB4Q8YMmu0TW6MZKoVxpzu7uTsTZYVg81D$sLzun0mpH6M33dVf63RYotjf+$v3R+tFUbprn3nbBA6o+um14ug0YoWtwdU$fc5LUyYnHEHTe9dV9KHhVhQCuLux$X$GLttXlA2kxawzNWLH9A34N8VJRb3LLu6MYmOk9MTzutv$y2foMlRauKW6KV0mhpd$Husu7af0f1LG0PSWmMgfhmXUX0Bactd2SWtXU3noKXhYsWnydMqRnH$0U0r07bL6u4lZuVqA2VHtWv+HMMZuA2fPAgv-HRr10DPuukfrwiu5MAtGiNRYgt0b$18CLZbV-YuD9S1NsVO6E-B0UUl1Xw5RNouBNEBmBAMVO6b3gr73Q6$8uuMq93juu"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: 0iNgaY2gbnF6pHJqeldeag==$WRVhvnmSD+YaBRoi2ksmyg==\r\nset-cookie: cf_clearance=8xCX8QNtfooN08UxYNf55gjoLovBG9fqQJ7Kj7s7sI8-1774560313-1.2.1.1-t_aKT2KcIW3JtuFHpas_aUYrtcylMQ2Pt7bQnJQB5hDsXOK6yBzM2iVJTPH23Tr3U9YWrhaVVj474hXt5J3entXosduP0HGWFBtgLxGZderCChQ1VyVcWNlv9sGQyymd9jD7nrCNgBgqQncpRRcSG95qMuWMohUK0RzVGCGNn2KXhQIkIAVtWh9Rdw4D4NCbBRLN0loOT2SQNh2K6qJc_lUmi5_7VvRVoq1iWoDEORE; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=hey-mint.app; Expires=Fri, 26 Mar 2027 21:25:13 GMT\r\ntiming-allow-origin: https://hey-mint.app\r\ndate: Thu, 26 Mar 2026 21:25:13 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9e293a085dab8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"hey-mint.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hey-mint.app/favicon.ico","fqdn":"hey-mint.app","domain":"hey-mint.app","tld":"app"},"ip":{"addr":"104.21.17.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hey-mint.app/cgi-sys/defaultwebpage.cgi","date":"2026-03-26T21:25:13.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hey-mint.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 15:27:11 GMT","end":"Tue, 02 Jun 2026 16:24:56 GMT"},"fingerprint":{"sha1":"E3:9D:B4:B9:CF:42:04:A7:BC:93:54:91:A5:94:7D:0F:F6:35:45:79","sha256":"B8:E2:EB:CA:92:B4:B0:C8:33:1D:1C:EF:9B:1F:93:A5:EA:FB:97:C5:45:53:6B:30:26:EF:24:2B:57:C0:81:9D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hey-mint.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hey-mint.app/cgi-sys/defaultwebpage.cgi\r\nCookie: cf_clearance=8xCX8QNtfooN08UxYNf55gjoLovBG9fqQJ7Kj7s7sI8-1774560313-1.2.1.1-t_aKT2KcIW3JtuFHpas_aUYrtcylMQ2Pt7bQnJQB5hDsXOK6yBzM2iVJTPH23Tr3U9YWrhaVVj474hXt5J3entXosduP0HGWFBtgLxGZderCChQ1VyVcWNlv9sGQyymd9jD7nrCNgBgqQncpRRcSG95qMuWMohUK0RzVGCGNn2KXhQIkIAVtWh9Rdw4D4NCbBRLN0loOT2SQNh2K6qJc_lUmi5_7VvRVoq1iWoDEORE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Thu, 26 Mar 2026 21:25:13 GMT\r\ncontent-type: text/html\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Y5wKkDmpbbcZh4cwPoyXNjB1%2BENq7%2F4x11bTo%2B9F7UEZqfuRCpW%2BFYH%2FD%2BmQh%2Bo%2FSnt6SDb14nWRKZgdrpx5%2BnXHhXxBD8cSeUmGlqAvKsm48NrDo%2Bs%2Bw8CIxCdPJI%3D\"}]}\r\ncf-ray: 9e293a08cdd28be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10601,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4070)","md5":"0d22fa69ef1ef1e39ac8a3df19517ef5","sha1":"9b474d5789d846a1c030a7895d04596d0d3b9221","sha256":"b3561682e60e5371238e398c5c8c0c1d588baca2d3fc7f381f12d561abf249e2","sha512":"4211dc6af35deeacd21a6d949d9877b804a653e958225e849cc936c72771ec81c1d092fc83965141579cb8e29edb8e9ee5de55cf7f0b77d90f219cde11a74ae0","ssdeep":"192:rlYHC0HNXGZkHQU7ydPJq5S2KqQVX/uTK3w3DK+tMy47R/Ga0kVhFuPwf8Pn93JM:FVGaRF8I8hDVCxGi","tlshash":"8722a5971ae3010b740760b96bbb3201ab69e553d11bcd607f0db3a9df865818ca3b4e","first_seen":"2026-03-26T21:25:36.864261Z","last_seen":"2026-03-26T21:25:36.864261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"hey-mint.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hey-mint.app/","fqdn":"hey-mint.app","domain":"hey-mint.app","tld":"app"},"ip":{"addr":"104.21.17.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T21:25:12.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hey-mint.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 15:27:11 GMT","end":"Tue, 02 Jun 2026 16:24:56 GMT"},"fingerprint":{"sha1":"E3:9D:B4:B9:CF:42:04:A7:BC:93:54:91:A5:94:7D:0F:F6:35:45:79","sha256":"B8:E2:EB:CA:92:B4:B0:C8:33:1D:1C:EF:9B:1F:93:A5:EA:FB:97:C5:45:53:6B:30:26:EF:24:2B:57:C0:81:9D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hey-mint.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 21:25:12 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 13 Jan 2026 17:15:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OsN689O3X30Eyr%2BsMxCCK11IK7EZGfWz7z6Gup%2BPdsOOmofxGQeBiNsZ9s7JuGonsTzAUVLWnYhfzAD%2FnfsBObRqf48IuZPWv%2Ft9Y4SIAFSknUCBagUJITddTTnF%2FCo%3D\"}]}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e293a026e37568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1081)","md5":"2fc42ecb1ddb764c7cd25c4cc11fef32","sha1":"7ac47e8eb93ba6db61bc128f6bd92e520877ba15","sha256":"1d344bfab25b0667de2883a1c9eee128688b5f92637930dba5814aa387968c7b","sha512":"c89c2d7e9e5bee88591fa46e32dcc1a07c760dde2de8657f7bb15658197569457bb5c6e77011b4b50876cfb36bfb4e1176491f2c31562c268f79d1ed2121f1a9","ssdeep":"","tlshash":"9a1123b52b19553495d5504a31bde3993d3210207a02a184c2acdc2c8928e8754dfdbd","first_seen":"2026-03-26T21:25:36.86693Z","last_seen":"2026-03-26T21:25:36.86693Z","times_seen":1,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":70,"dns":53,"connect":1,"send":0,"wait":251,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"hey-mint.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hey-mint.app/img-sys/server_misconfigured.png","fqdn":"hey-mint.app","domain":"hey-mint.app","tld":"app"},"ip":{"addr":"104.21.17.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hey-mint.app/cgi-sys/defaultwebpage.cgi","date":"2026-03-26T21:25:13.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hey-mint.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 15:27:11 GMT","end":"Tue, 02 Jun 2026 16:24:56 GMT"},"fingerprint":{"sha1":"E3:9D:B4:B9:CF:42:04:A7:BC:93:54:91:A5:94:7D:0F:F6:35:45:79","sha256":"B8:E2:EB:CA:92:B4:B0:C8:33:1D:1C:EF:9B:1F:93:A5:EA:FB:97:C5:45:53:6B:30:26:EF:24:2B:57:C0:81:9D"}}},"request":{"raw":"GET /img-sys/server_misconfigured.png HTTP/1.1\r\nHost: hey-mint.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hey-mint.app/cgi-sys/defaultwebpage.cgi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 21:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 3164\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 21:25:13 GMT\r\nlast-modified: Mon, 29 Nov 2021 15:37:03 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dLdYcIDYg6hfVE5r%2Bi1OXFPVeRaD7f2DeHgJ4pnqqfOmQugcbDwgZnSMvoy84PFfD0sH4VqJvDvf%2FeiNSS8HDuq42SDmJEcg5rnnFeNrYBwISkrFQumvXTagcvcKJSU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e293a072d718be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"f79adaf00f83dc9757086cdbe8645ff0","sha1":"82f37b8be7668eab8e1a06de828cb336799c8134","sha256":"944120fb6962c7484d769d645e6d830850eead9394f6a84090aed489cfc0c41f","sha512":"eb7db97a73d4fd8ff7acc027582a2564636ee9d92f19365da11ec4c80be62418450fd0b37ed1462d56489c52fa1ab69008b040fad7795151dc1d26ac59293f6a","ssdeep":"","tlshash":"54513b80a9156c08aed83aacb51d109b84003ce5a8372cc480728fffb61e8b36aa55dd","first_seen":"2023-04-05T04:59:52Z","last_seen":"2026-06-08T12:43:27.633281Z","times_seen":42898,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"hey-mint.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hey-mint.app/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"hey-mint.app","domain":"hey-mint.app","tld":"app"},"ip":{"addr":"104.21.17.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hey-mint.app/cgi-sys/defaultwebpage.cgi","date":"2026-03-26T21:25:13.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hey-mint.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 15:27:11 GMT","end":"Tue, 02 Jun 2026 16:24:56 GMT"},"fingerprint":{"sha1":"E3:9D:B4:B9:CF:42:04:A7:BC:93:54:91:A5:94:7D:0F:F6:35:45:79","sha256":"B8:E2:EB:CA:92:B4:B0:C8:33:1D:1C:EF:9B:1F:93:A5:EA:FB:97:C5:45:53:6B:30:26:EF:24:2B:57:C0:81:9D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: hey-mint.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Thu, 26 Mar 2026 21:25:13 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9e293a076d7f8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27283,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T13:34:10.574604Z","times_seen":16240797,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"hey-mint.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hey-mint.app/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?","fqdn":"hey-mint.app","domain":"hey-mint.app","tld":"app"},"ip":{"addr":"104.21.17.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hey-mint.app/cgi-sys/defaultwebpage.cgi","date":"2026-03-26T21:25:13.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hey-mint.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 15:27:11 GMT","end":"Tue, 02 Jun 2026 16:24:56 GMT"},"fingerprint":{"sha1":"E3:9D:B4:B9:CF:42:04:A7:BC:93:54:91:A5:94:7D:0F:F6:35:45:79","sha256":"B8:E2:EB:CA:92:B4:B0:C8:33:1D:1C:EF:9B:1F:93:A5:EA:FB:97:C5:45:53:6B:30:26:EF:24:2B:57:C0:81:9D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js? HTTP/1.1\r\nHost: hey-mint.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Thu, 26 Mar 2026 21:25:13 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9e293a078d838be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27283,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (27283), with no line terminators","md5":"715438a936900d1516cca0f87b6ae399","sha1":"de50c4edb62a309c1df14528fb1471deb7b3c327","sha256":"17603fa41e1e2d07039f0b83879a49a2b2b144aa20affc4cc491aa02f8355b76","sha512":"33eb3d7b25b57d645afb59f659666cc9420f23b9c1abc2b5b600298f473c5908b8b1aede1b59fe7e2558a9173b781782e62aa64c4e69c3a9ab4812c8614b96cc","ssdeep":"384:u1zPyTTIaItJpQaPywHzmR6vsJIPIYgwt4Y4sOrLD8VpfxVJxPhoERu3KXkODMj5:u1DyIaIrpQaRSIaI4Y4l8/xrx2H3KX9S","tlshash":"12c2b4cb7acb7c3bd3766478407778cbe2addc50a0889504d1109de9b97238ca697e9c","first_seen":"2026-03-25T07:50:24.028468Z","last_seen":"2026-04-12T22:47:37.628499Z","times_seen":553,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"hey-mint.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hey-mint.app/cgi-sys/defaultwebpage.cgi","fqdn":"hey-mint.app","domain":"hey-mint.app","tld":"app"},"ip":{"addr":"104.21.17.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T21:25:13.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hey-mint.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 15:27:11 GMT","end":"Tue, 02 Jun 2026 16:24:56 GMT"},"fingerprint":{"sha1":"E3:9D:B4:B9:CF:42:04:A7:BC:93:54:91:A5:94:7D:0F:F6:35:45:79","sha256":"B8:E2:EB:CA:92:B4:B0:C8:33:1D:1C:EF:9B:1F:93:A5:EA:FB:97:C5:45:53:6B:30:26:EF:24:2B:57:C0:81:9D"}}},"request":{"raw":"GET /cgi-sys/defaultwebpage.cgi HTTP/1.1\r\nHost: hey-mint.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 21:25:13 GMT\r\ncontent-type: text/html\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y0FCNTv%2FjXJwADEnlXBJQt1DtFdQVAry8BkBd6GLA4C8Uqp25lOF8gxkZFFwvq%2BgxNyeQeeJSe8k2SsEMkBiUdypyxgLw85wQNovjAr2rFqt3TSHX6qE4UJk8jmVeVc%3D\"}]}\r\ncf-ray: 9e293a053d0b8be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8110,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1038)","md5":"3064d7f7ed009daf76a9cb977d9e2d20","sha1":"9a1a25960d20fde680bce208f34d1add21b04a5a","sha256":"af8e1903d0771fbe0e7b21a8d9359aeca8ce417ef4726885c14da0b7a740ce53","sha512":"68bc08ee22baebd2b2e3536d6d2c7574cefa739bae8c70218c89a742bb5cf8186e16b6ad69b82820672cd9713ea33245549dc1b60f6064b5547c4cbbe8c1d300","ssdeep":"192:LlYHC+H1U7ydPJq5AtyhhuT9w3y4E9SyJ0QS296aS1+nx/k:/9Lj2rS1+nx/k","tlshash":"16f1515b2af20126604390b52bbba7157f30a053c61fcd447a5c96a8df86d92cce3f9d","first_seen":"2026-03-26T21:25:36.870183Z","last_seen":"2026-03-26T21:25:36.870183Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"hey-mint.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hey-mint.app/img-sys/IP_changed.png","fqdn":"hey-mint.app","domain":"hey-mint.app","tld":"app"},"ip":{"addr":"104.21.17.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hey-mint.app/cgi-sys/defaultwebpage.cgi","date":"2026-03-26T21:25:13.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hey-mint.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 15:27:11 GMT","end":"Tue, 02 Jun 2026 16:24:56 GMT"},"fingerprint":{"sha1":"E3:9D:B4:B9:CF:42:04:A7:BC:93:54:91:A5:94:7D:0F:F6:35:45:79","sha256":"B8:E2:EB:CA:92:B4:B0:C8:33:1D:1C:EF:9B:1F:93:A5:EA:FB:97:C5:45:53:6B:30:26:EF:24:2B:57:C0:81:9D"}}},"request":{"raw":"GET /img-sys/IP_changed.png HTTP/1.1\r\nHost: hey-mint.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hey-mint.app/cgi-sys/defaultwebpage.cgi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 21:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 2939\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 21:25:13 GMT\r\nlast-modified: Mon, 29 Nov 2021 15:37:03 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FLHJiPzZr323U7ZSsulk2bddiKZpYyu%2FCuInuClue8tdYcFEbihWdFHngh2abxQgYWKGz3VKYBtApRcqgNUSlWAd2%2B0n7v%2F9Mk1r9QFf1b7QlA95DFWIdtcqj4NwU4I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e293a072d708be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2939,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"ec081653bd4c836483e6d612588d18ec","sha1":"91c7e4cfa061808881575a875741773a949a9e0a","sha256":"b19da51b5e9c9b29cd8523d85d92e99e4812c891c394929c9bf67557f560672c","sha512":"b1cc98149afc9d9041bfc4e91a0990728f3f1a2c944e8819d4b131b60f8a2a03f831e855ce6efd478a651c2dce8fe715645bfe3d59699a442a4a6dc898bb406c","ssdeep":"","tlshash":"33513aaaf91e6c50834215dfa1e6402a2ed1e84e751430b326287afe53df8036a32f80","first_seen":"2023-04-13T09:27:24Z","last_seen":"2026-06-08T12:43:27.632505Z","times_seen":27704,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"hey-mint.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hey-mint.app/img-sys/server_moved.png","fqdn":"hey-mint.app","domain":"hey-mint.app","tld":"app"},"ip":{"addr":"104.21.17.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hey-mint.app/cgi-sys/defaultwebpage.cgi","date":"2026-03-26T21:25:13.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hey-mint.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Mar 2026 15:27:11 GMT","end":"Tue, 02 Jun 2026 16:24:56 GMT"},"fingerprint":{"sha1":"E3:9D:B4:B9:CF:42:04:A7:BC:93:54:91:A5:94:7D:0F:F6:35:45:79","sha256":"B8:E2:EB:CA:92:B4:B0:C8:33:1D:1C:EF:9B:1F:93:A5:EA:FB:97:C5:45:53:6B:30:26:EF:24:2B:57:C0:81:9D"}}},"request":{"raw":"GET /img-sys/server_moved.png HTTP/1.1\r\nHost: hey-mint.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hey-mint.app/cgi-sys/defaultwebpage.cgi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 21:25:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 3327\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 21:25:13 GMT\r\nlast-modified: Mon, 29 Nov 2021 15:37:03 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MOLN4wreDXVh9MzvCGRqHGlJwP16r96SVVIfQIp5MRm7dUUhvO4LkGDcNvefKiXcwYijBlZczwQfDZrbERtDqBZwo05fIJq%2Fj7a4ltB0EqxYWU3lc4s05Y4c1L7Q4l4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e293a072d728be6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3327,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"f6590a396da81a8e4cce7ca046874ffd","sha1":"7e68db322c32ca079b2c836812d3a25204ab93cc","sha256":"3a22057583d3e17bc94990d92a3425d5510dc5bdb60fe40fafeb405a38f8ed28","sha512":"cf4ae5e172feb6923bfd5ad4f302bf63250f4072774fb29efb0846167ea95d708299047cb18e4c72deffc5d24040a35049d778685f7cf96801ee8d4769a25fa1","ssdeep":"","tlshash":"486139d62986504a264a0c61eaf5ec963065301b28789a3e8527cbcc96c8a9e698c317","first_seen":"2023-04-07T07:55:56Z","last_seen":"2026-06-08T12:43:27.635763Z","times_seen":27696,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"hey-mint.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
