{"report_id":"616fcdd8-33bd-42f0-984a-9535715d0ef8","version":6,"status":"done","tags":[],"date":"2025-12-31T19:39:33Z","url":{"schema":"http","addr":"heroadblocker.pro/ext.php?ah=dyso1Pld317\u0026ao=10073468\u0026ak=3c6f8qe8pmy3y09d\u0026aj=so\u0026an=12\u0026am=","fqdn":"heroadblocker.pro","domain":"heroadblocker.pro","tld":"pro"},"ip":{"addr":"104.21.0.120","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"heroadblocker.pro/ext.php?ah=dyso1Pld317\u0026ao=10073468\u0026ak=3c6f8qe8pmy3y09d\u0026aj=so\u0026an=12\u0026am=","fqdn":"heroadblocker.pro","domain":"heroadblocker.pro","tld":"pro"},"title":"Hero Ad Blocker","dom":{"size":4168,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"83c775f5de3ff657cea0b39075ba357e","sha1":"798f25899b32f12d67038eb76693d9b533a25f29","sha256":"ccc16918075a3bd20d57bdabd7c7ec07ae046183f781954e5f81216132b6f1d2","sha512":"44f5b0488e993b3eff00eb847c47902b62381d2c28f97fbb9192daf4c92f7a41a0705ea7c5b71e4600a36a6e425340bc6f3df03d99cee8ad11e596213257ffc7","ssdeep":"48:nwDfcV6v9ZBtDSzuHI4RYkgiXQbuFXBNWS1MhFO6q0fCf8Vm:nwDUAv9ZBFSzT4uviA6FXWQwPmKm","tlshash":"5c81203854f6213321839171aba66b48afb5c033c31fd940b9fe43a95f86f86c853589","dom_hash":"domhash27301309af1bb55c4a28d96c48913a72","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"heroadblocker.pro/ext.php?ah=dyso1Pld317\u0026ao=10073468\u0026ak=3c6f8qe8pmy3y09d\u0026aj=so\u0026an=12\u0026am=","fqdn":"heroadblocker.pro","domain":"heroadblocker.pro","tld":"pro"},"ip":{"addr":"104.21.0.120","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-04T19:39:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"heroadblocker.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"heroadblocker.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-12-28T22:26:34.892336Z","alert_count":0,"request_count":1,"received_data":208414,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"heroadblocker.pro","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-08","domain_rank":400160,"first_seen":"2025-05-31T07:57:02.325598Z","last_seen":"2025-12-27T07:40:47.948886Z","alert_count":2,"request_count":1,"received_data":4983,"sent_data":556,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"heroadblocker.com","ip":{"addr":"104.21.81.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-05","domain_rank":355580,"first_seen":"2025-06-19T18:06:55.445825Z","last_seen":"2025-12-27T07:40:47.927137Z","alert_count":0,"request_count":3,"received_data":13654,"sent_data":1342,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"heroadblocker.pro/ext.php?ah=dyso1Pld317\u0026ao=10073468\u0026ak=3c6f8qe8pmy3y09d\u0026aj=so\u0026an=12\u0026am=","fqdn":"heroadblocker.pro","domain":"heroadblocker.pro","tld":"pro"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bc3c5c5ffc6ecfb75e25a1f555caa3e8","sha1":"810bcb84c5bd7b8cd36033b96a9d24eb66d916a8","sha256":"2c349ef6d9440e336ec020f241331ab022eef1e61338e1c3e24c282543bc3990","sha512":"bf39edcbe0f0c45b8032276fdbdbabafcf132e739853cc003cb3705b9ae5e62991ecdba38b397c5dd1a8f1e5d21e2a039b09857e97b6f44ad7d6dfbe26f18084","ssdeep":"","tlshash":"02f061690557567517b7502d474f790032b600932014e800bd4cde5a4fd0f1654f91c3","size":458,"data":"","first_seen":"2025-07-24T17:22:15.446889Z","last_seen":"2026-03-02T15:35:41.665272Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"heroadblocker.pro/ext.php?ah=dyso1Pld317\u0026ao=10073468\u0026ak=3c6f8qe8pmy3y09d\u0026aj=so\u0026an=12\u0026am=","fqdn":"heroadblocker.pro","domain":"heroadblocker.pro","tld":"pro"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-31T19:39:11.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heroadblocker.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 13:42:23 GMT","end":"Mon, 30 Mar 2026 14:39:56 GMT"},"fingerprint":{"sha1":"48:DC:46:9A:37:9B:08:44:1C:DD:41:2F:D9:3D:85:82:41:39:8A:06","sha256":"86:09:E4:93:86:42:6E:BF:72:1A:DF:07:F6:49:AA:CF:96:D4:24:4B:50:DC:BC:0C:7C:9B:C0:2D:72:24:96:53"}}},"request":{"raw":"GET /ext.php?ah=dyso1Pld317\u0026ao=10073468\u0026ak=3c6f8qe8pmy3y09d\u0026aj=so\u0026an=12\u0026am= HTTP/1.1\r\nHost: heroadblocker.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 19:39:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nset-cookie: _asd=17672099515721543; expires=Thu, 31-Dec-2026 19:39:11 GMT; Max-Age=31536000; path=/; samesite=none; domain=heroadblocker.pro; secure\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oUBsJpy7Pp%2B76egsuft0CR3isT78EyL6%2FCTrVdFuJwFUOrx8dPMXoux213IMfQPKoBCU7Iutm7tSHYBJCAFk402B70msBnhtRKnsiFzdxw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b6c3dd2fd1956c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4193,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"2bc560b8ea6baf3f70406135f446c9ee","sha1":"5f5524aeaaa181ed6cd2ced4a88840dbfb78cc6b","sha256":"d8f06e011282a2830d5343135abb065769dddf8109aeac122d9e1cdf8fd463de","sha512":"5caa07611ee5c96844dec66c2b473b65e01d0a9a95d470df0d1ca5692ad3cc559092431f05a897cabb6d348008ea103ad84a79ca62f5e34d02a82d7531b2c325","ssdeep":"48:ZDfcV6v9ZBtDSzuHIFRYkgiXQbuFXBNWS1MhFO6q0pf8V+:ZDUAv9ZBFSzTFuviA6FXWQw9K+","tlshash":"a8813f3814f6213321839171aba66b88bfa58033d31fd940b9fe43a95f87f86885358d","first_seen":"2025-11-03T21:22:47.81145Z","last_seen":"2026-02-01T04:45:37.884636Z","times_seen":8,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":34,"dns":14,"connect":1,"send":0,"wait":251,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"heroadblocker.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"heroadblocker.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heroadblocker.com/images/icon.png","fqdn":"heroadblocker.com","domain":"heroadblocker.com","tld":"com"},"ip":{"addr":"104.21.81.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heroadblocker.pro/ext.php?ah=dyso1Pld317\u0026ao=10073468\u0026ak=3c6f8qe8pmy3y09d\u0026aj=so\u0026an=12\u0026am=","date":"2025-12-31T19:39:11.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heroadblocker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 00:41:38 GMT","end":"Sat, 28 Mar 2026 01:40:19 GMT"},"fingerprint":{"sha1":"2D:DD:2F:74:4F:89:91:B0:21:F4:E1:E8:2E:3F:59:69:EC:D8:54:3A","sha256":"44:BE:A5:63:DA:49:DF:7E:D7:F4:44:9D:F6:13:CE:46:16:A4:05:29:17:9D:CD:51:21:95:B6:D8:94:E4:11:B8"}}},"request":{"raw":"GET /images/icon.png HTTP/1.1\r\nHost: heroadblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://heroadblocker.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 19:39:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 4176\r\nserver: cloudflare\r\nlast-modified: Mon, 05 May 2025 08:29:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68187700-1050\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fCTG9gQfNF8znJMw8TaBDU4YKvjhGm7b6t070Hkg9EKj5QUXyqPn24nqHCJPWhVHwodziagmHOZoi5Mp97iUGbcKE7s7RdQmsfTtUs2J9xQB\"}]}\r\ncf-ray: 9b6c3dd5d80049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"ddb10b9fac4a8cd069d4a396b0aed394","sha1":"21bfe8f34509fdec8e284e5a588f00a981cd1eab","sha256":"a98bfc4cafcf39e993d499de65941fcea80b601c71f9ad124c600c7c832e5076","sha512":"1fb1e6da67f751975e838aec940ccf1b1e519cf856106742cb632de0bfad37eb57a0dcccbfb585b835ba5980f38d2c36aaeed3250edf762cdc9c39c6f096a1d2","ssdeep":"96:WS1ZQxPceJAgFJMoFLREk/1achHUnVw5ORUH4QZtQ:WSEP3JAIhFdEKd6VZ25Ze","tlshash":"6c818e2b76422ed09a5861f73684c316ca148bceb374d209bd5014ba764abc4f6d363c","first_seen":"2025-07-24T17:22:15.427401Z","last_seen":"2026-03-02T15:35:41.660797Z","times_seen":30,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":42,"dns":22,"connect":1,"send":0,"wait":74,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bulma@0.9.4/css/bulma.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heroadblocker.pro/ext.php?ah=dyso1Pld317\u0026ao=10073468\u0026ak=3c6f8qe8pmy3y09d\u0026aj=so\u0026an=12\u0026am=","date":"2025-12-31T19:39:11.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bulma@0.9.4/css/bulma.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://heroadblocker.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 19:39:11 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 28353\r\ncf-ray: 9b6c3dd59d96783d-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.9.4\r\nx-jsd-version-type: version\r\netag: W/\"329c6-nL+P0n9QpqJ97JxmCBpSBWnGeaQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230081-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 3510749\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=A2bJ2cpkl%2BDB8LsNKMSUN%2FqaGrRlp%2Fzcsfiz9B%2Ba4owitksMU46g5zvLO0yxns4xrns3ZBcGjp1SBzChY4S0WF1%2BI0kmXC7gIeJ4tO5A5whVUUjKOuNP0pqcVSozWQb6xYs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207302,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"604205736eda4815fc08e1dcda46d3fc","sha1":"9cbf8fd27f50a6a27dec9c66081a520569c679a4","sha256":"ad3a5d3b41d7042369ade00772eead0763e9839d79568fb91ad612b2734bcfef","sha512":"1eac4752424cd1261c6efc54c393fad12cdd393cbf415c00d4926bbda5c9bf8abb9666c36429996aacf4d543ce690bdea317d846fd6d1e8cd618f31cb9306ebd","ssdeep":"768:tZHa2YfD0HK3E4QMMJNdz6CPry05DEJa09DKMzsRLcB73yMBgDFlWxG2A3UaQS+T:9lAe5hFC","tlshash":"f1149992ee503c4f7513882e54d0f7a4272e59c4da1627b7b537b2e0864a78f2937f0a","first_seen":"2023-04-26T18:39:59Z","last_seen":"2026-06-03T15:50:18.693328Z","times_seen":2597,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":4,"dns":1,"connect":1,"send":0,"wait":8,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heroadblocker.com/images/chromewebstore.png","fqdn":"heroadblocker.com","domain":"heroadblocker.com","tld":"com"},"ip":{"addr":"104.21.81.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heroadblocker.pro/ext.php?ah=dyso1Pld317\u0026ao=10073468\u0026ak=3c6f8qe8pmy3y09d\u0026aj=so\u0026an=12\u0026am=","date":"2025-12-31T19:39:11.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heroadblocker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 00:41:38 GMT","end":"Sat, 28 Mar 2026 01:40:19 GMT"},"fingerprint":{"sha1":"2D:DD:2F:74:4F:89:91:B0:21:F4:E1:E8:2E:3F:59:69:EC:D8:54:3A","sha256":"44:BE:A5:63:DA:49:DF:7E:D7:F4:44:9D:F6:13:CE:46:16:A4:05:29:17:9D:CD:51:21:95:B6:D8:94:E4:11:B8"}}},"request":{"raw":"GET /images/chromewebstore.png HTTP/1.1\r\nHost: heroadblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://heroadblocker.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 19:39:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 3435\r\nserver: cloudflare\r\nlast-modified: Mon, 05 May 2025 08:29:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"68187700-d6b\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZmL0MTaDDTvRBHLeA55pgHNb3SbI5w8sCO2lDv%2BVMkAl5iNHRLhkCDV6%2F37ACOphLemJ5%2F6SRFz9IeCDgxa2%2BEFG1B61TpcgKubnIYvOUL7l\"}]}\r\ncf-ray: 9b6c3dd5dffe49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 206 x 58, 8-bit/color RGBA, non-interlaced","md5":"532cd53e793496222dcdcd6a9047a6fb","sha1":"507a9ca2df230c71265b1846505430bf5db31220","sha256":"2b74fcd6c38eb603d9c86cd1c8cb97ba423d200d7e3e555cbc5a704ac456e00f","sha512":"e272131d341b3c5b4f3d84aee55b370480494f07215a73ed2b40968e6c7bca64819850bd7401f4eb74cb31ba5a5208fed0e26b3189329061ceeb840f6a693de1","ssdeep":"","tlshash":"1a615bcd8624d39dcba545a5600dc4acfb3a066019078f4861f1f0570de522ebddadb6","first_seen":"2023-05-25T22:49:00Z","last_seen":"2026-04-02T06:42:10.926937Z","times_seen":140,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":39,"dns":21,"connect":1,"send":0,"wait":76,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heroadblocker.com/images/icon.png","fqdn":"heroadblocker.com","domain":"heroadblocker.com","tld":"com"},"ip":{"addr":"104.21.81.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heroadblocker.pro/ext.php?ah=dyso1Pld317\u0026ao=10073468\u0026ak=3c6f8qe8pmy3y09d\u0026aj=so\u0026an=12\u0026am=","date":"2025-12-31T19:39:11.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heroadblocker.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 00:41:38 GMT","end":"Sat, 28 Mar 2026 01:40:19 GMT"},"fingerprint":{"sha1":"2D:DD:2F:74:4F:89:91:B0:21:F4:E1:E8:2E:3F:59:69:EC:D8:54:3A","sha256":"44:BE:A5:63:DA:49:DF:7E:D7:F4:44:9D:F6:13:CE:46:16:A4:05:29:17:9D:CD:51:21:95:B6:D8:94:E4:11:B8"}}},"request":{"raw":"GET /images/icon.png HTTP/1.1\r\nHost: heroadblocker.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://heroadblocker.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 31 Dec 2025 19:39:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 4176\r\nlast-modified: Mon, 05 May 2025 08:29:52 GMT\r\npriority: u=6,i=?0\r\netag: \"68187700-1050\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nr5%2BjhGBzb7j2VCFzUc6pbN3xB1U5xiwWd5oVTeIo5QI2pU4IyFNnB4XcNEAPBX1w5%2FIrrGjNlscDu2ib4gCrl5G5sRYAGMYYD4MQV9NEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b6c3dd6c8e50b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"ddb10b9fac4a8cd069d4a396b0aed394","sha1":"21bfe8f34509fdec8e284e5a588f00a981cd1eab","sha256":"a98bfc4cafcf39e993d499de65941fcea80b601c71f9ad124c600c7c832e5076","sha512":"1fb1e6da67f751975e838aec940ccf1b1e519cf856106742cb632de0bfad37eb57a0dcccbfb585b835ba5980f38d2c36aaeed3250edf762cdc9c39c6f096a1d2","ssdeep":"96:WS1ZQxPceJAgFJMoFLREk/1achHUnVw5ORUH4QZtQ:WSEP3JAIhFdEKd6VZ25Ze","tlshash":"6c818e2b76422ed09a5861f73684c316ca148bceb374d209bd5014ba764abc4f6d363c","first_seen":"2025-07-24T17:22:15.427401Z","last_seen":"2026-03-02T15:35:41.660797Z","times_seen":30,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}