{"report_id":"6c347c5b-da06-4144-aae4-db17616303e6","version":6,"status":"done","tags":[],"date":"2026-01-07T08:11:40Z","url":{"schema":"https","addr":"helioschain.net","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"172.67.192.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"helioschain.net/","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"title":"Helios Staking | Pre-Sale $HLS Tokens \u0026 Early Access","dom":{"size":171425,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (400)","md5":"ca4163c870a693c2cdee81a5c1b370cc","sha1":"eae9b47bc9a5d88dec7cc79e869b5ebe8739a69f","sha256":"3a536b48f0923dd4da9bac8a24e56ed0a6ea0d9c2589cb943a57a957e372fdc0","sha512":"5340c6f57692de7cf7078cd79e57024877de4417ff4c65c4aaa39c274f4a7df4cb879ec22a3812a5a1aa3c7f8c8ea3b02f71f2c25e9f384465e3f6919670051b","ssdeep":"1536:jcL8YApwxluWyXcLo+TVhR2iJ/0pxDt2cZVBZVolhG+TCjU5jCjulBlQ4w5bXMpT:jcLYp6BR+pxfVHVspjLl4GN","tlshash":"27f33b40b271463b7e0359ad97d9aa1ea730b0439c25da84fbdd01928f52bf6bd73e04","dom_hash":"domhashd62fb180a830168b6a21137e8cdab3d9","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"helioschain.net","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"172.67.192.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-11T08:11:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"helioschain.net","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-09","domain_rank":0,"first_seen":"2025-12-16T18:55:41.818495Z","last_seen":"2025-12-16T18:55:41.818495Z","alert_count":48,"request_count":24,"received_data":476871,"sent_data":10862,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"helioschain.net/","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"38e3afae2c196377895ac472c991a80c","sha1":"b407af8385e79478575f6bca8446fe74498dddeb","sha256":"5c6b41d2b14257a1e31a8a371daca51b3982a19595711849cfc14c9c11721599","sha512":"113fac127dd2b9008d506466c48fe3b1cbed913d0b28cffaa2acbd9dff70fc0508836304cd22a7b179b69a13337f3a57e8301f40c3d159f9f8319ef18b2dee56","ssdeep":"","tlshash":"0fd0125d7064a96628cf697e5ccf088e7e369812a2080dc999ecd4547fb1e6d42e488c","size":198,"data":"","first_seen":"2025-09-20T14:46:13.54982Z","last_seen":"2026-05-06T23:01:23.457591Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"67599da412ef7b5f349df0d1e6c719b0","sha1":"cd8e418a12f0d906d4affaeb2027294eb5db6444","sha256":"ce797ffa779eb779c3bb0c9477e1239f46f69995196b8765ae0e2b8953df12c5","sha512":"d9a42bd6ea479081cb5fe050089b0cd403a1c9b56d980d6a336fe857eba5bfdd1ff2c33017ccf9642fde9bf4ee8fbc6730643a671627c7247b1f01c86bdf2943","ssdeep":"768:T03xwc1QD2iaBfflpJpUb/wyGlwUWlxK+mTclYCl3cycfEKqdV0cpcfc+cRcacqr:OLeNXwIJ5apkrlIsAEs0j","tlshash":"0573b5d8180ad0d88e5522eed873e545e4204e23cdacf1a7d63edcc071aefa6948757b","size":80536,"data":"","first_seen":"2026-01-07T08:11:42.093679Z","last_seen":"2026-01-07T08:11:57.745933Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/axios-1.4.0.min.js","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19155011322594422ea22e70826d1d06","sha1":"1ace89ba06dfc96bd9da2360675eb7c7eee2f008","sha256":"b3c8e1765929a095f8a238f659e59bc30e92a536f66b63f450ee5c8c9219a60b","sha512":"d59b20ed9a40a3dda234fa75d04e69fc578a6e13c24a1ec9be002bc1147ec858fd750cf85a559f6b90992ec3c1ce5933d5afec6ab8d4328a231775aa2070fefc","ssdeep":"768:Uo/xMcnkD2impfPBpJpQbfr374uRy2CgV6vxAlDEG73cYcjW4uL9QctcfcecRcap:pLmr374ul6vxAhEK5apOd9IDye01","tlshash":"2883b8ca1806d0d98e1912eed873f448e0644a53cdacf197d72edcc0b1aef66948767b","size":83742,"data":"","first_seen":"2026-01-07T08:11:42.089811Z","last_seen":"2026-01-07T08:11:57.742061Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-06-07T00:08:21.701832Z","times_seen":1322,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"helioschain.net/bdcf5b014c31a691.css","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:18.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /bdcf5b014c31a691.css HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:19 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\netag: W/\"694bf7c3-16f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eGbwn%2FlieOAR5LBa4C1G9GsLbumbQ2h1OtMOuXmFJXw1inYNtMwnwGAhCmfcaVtzZzrc2NOjOXovlFrrCU9IPWqX4%2BiGIPduYkP%2BY8k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1fbd25af15691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5874,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5874), with no line terminators","md5":"a938600ab0256f7c0fc821b743462fca","sha1":"6e651bdb4c9e759797acc059eac1e564afb37d68","sha256":"a18a5de1f273dee52e006d87fc10201d68d06dd3bb3e564c4c65ba87bbb4175f","sha512":"0f845e082e7a0a910440d6809b1dccfde9f21ed3942c996823a07db01ff5072a7b6d348e51428182653da1a7ad0a82bf9c12e9e7da48786f292ec646c442ff1c","ssdeep":"96:Ld/FI0Qiga3sOxmAWpLblzvYSV7eiAy/kXI1+kXWz5P:LdvDg8sOAxbhvYm79AdY1+7z5P","tlshash":"b1c15176bb90f13cfc37e9171f98455e65186841ee165bd9be3191200ee3bf20e62a48","first_seen":"2025-12-16T18:55:46.038962Z","last_seen":"2026-01-07T08:11:57.735935Z","times_seen":3,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/binance-coin-logo-1.png","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:19.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /binance-coin-logo-1.png HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 316\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\netag: \"694bf7c3-13c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cPRVY9p3VjZaMU%2F7Yfhih3rbEfvMHmQ3E9Lfo9GXBfHXgX9qHk5j3QzgTVzMx3jnlHyR%2B%2BqjnlTaaZAlETFecLD6tdTO3f8hgJl5VRI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1fbd71e875691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":316,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"13ddae41959f8b6e7df0648ebde3f70a","sha1":"482475f8841d516a3fdb72a929c767f553527935","sha256":"b56a2cca4796c06844d910cf356bd9896fa6cd497a882b1cac1350061b5280ee","sha512":"39f19f6624c4ddac25c1a103e5587d7c5d1392a5210c3f1aab6c1551de2958e9e5dfe14af896ab6b2188426db887437c945a5d700622a9e8f5a1873bd21c88b2","ssdeep":"","tlshash":"0be02dbc9e8046f1c01e0c32729204c48cb3663e02b3c00ad4a42ca02c0b5ea6b02210","first_seen":"2025-12-16T18:55:46.030479Z","last_seen":"2026-01-07T08:11:57.73235Z","times_seen":3,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/807ff0e6f9c51651b04710e61a15ded84be227d9afe812613b871a8d75ac0d4a-1.png","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:19.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /807ff0e6f9c51651b04710e61a15ded84be227d9afe812613b871a8d75ac0d4a-1.png HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 581\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\netag: \"694bf7c3-245\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bbJqMxWGayn%2B1xGKEq493ownkzw6UK9FW519K9B48qcU673IBtlkuU9AYcK8GTW1RGZ8XSFavu6zE17gZF0SSJdg%2FO441V3Gn1Ay894%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1fbd70e805691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":581,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"a0b6d549ec9a2ece4a785301201ee579","sha1":"43f4be9688eabb814d06de18ea154cbec4c0480d","sha256":"8c2cbce7a7bb9816813f68a705fb753373131e2759fe271746192da03a417d84","sha512":"01ac5416170e314b89198bc2f1c488cd352953c4bd2689862b1eb3edc5bd6c2d65c67e8fc872199c08a973b8a59c121fd9f408767752c4d09456f00a3dce7544","ssdeep":"","tlshash":"94f0ac6672c4db41b63a70a9694755511c5e3e7e6507e044e2519533737a01152b4387","first_seen":"2025-12-16T18:55:46.042654Z","last_seen":"2026-01-07T08:11:57.743601Z","times_seen":3,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/secureproxy?e=jscdn/getFile","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:19.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://helioschain.net/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://helioschain.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"xhjlpzoyf55b039en8tu\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 07 Jan 2026 08:11:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin, access-control-request-method, access-control-request-headers, accept-encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-security-policy: default-src 'self', frame-ancestors http: https:\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nDJfKpHtUJQcrCSX%2FYmlgEeVpwvV%2FeK4CEKBFJ1Rwz%2B7yH2eUwiFG4o1ViwfddLLAz5gUV27xVIbihMiuWqdmrrMi4L8uI%2Fy65U0zxE7lg%2BbZg%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9ba1fbd72ea15691-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5f2dcc314f77c834f8a1dc091e77a698","sha1":"02ddc9e3c5026f1aeafa9098cb1ee9420a53e0f6","sha256":"ce58bf87319ddd62d94026ba708b11b1acdae99d417ad71e78385c5c48baeffd","sha512":"e5ffa46481a71e28bd2f56255d4e66e025bdc281820203e1f2e2cf92c43df8d5bab7824acf0942b788c184e7fcba92bed561ce9c6b96a30c508c89a6a6665437","ssdeep":"","tlshash":"3980000e0282020f0022a8b08ae82c300a8a038008228e280008a0080e2b0828c000cc","first_seen":"2025-12-12T04:00:11.329317Z","last_seen":"2026-05-27T01:10:01.576742Z","times_seen":41,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T08:11:18.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:18 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s3I1di31Mf2CWTdWoolWKJU8uZzZQa5XnP3h%2FGp46nmiQGL4htDp3pseDqphuP1i%2BUzqOWu16Ohqu8YcE47K3DWuIlsz8iPKbau2K00%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9ba1fbceaec956b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":178972,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (437)","md5":"2111b17abf4a3911ba677aafb5265e67","sha1":"bfd1f325377f766ce4232375ab2975a8d731aaae","sha256":"b972114783d93edcd4116f42ab18fb2dea6f3e3329c1756c978ba07782701acf","sha512":"cd2f708ee55abd28a3970e758db577626ad7f3df54ab23aeb5fc6c1eb1599508b067d4ee405803f102d862b528da559428e95500e473ae6561f560793f194c2d","ssdeep":"1536:P3KkcLrYJpwxluWyXcLo+TVhR2kJ/0vxJt0UZV7ZVyJG+l4VU3jUj6JltU3bXMpm:vKkcLGp6BRgvxHVVV0ljbl2CFzM","tlshash":"f5044c40b271067b7e0759ad97d9ab0ea730b0439c25da44fbdd01928f92bf6ad73e04","first_seen":"2026-01-07T08:11:42.077087Z","last_seen":"2026-01-07T08:11:57.718289Z","times_seen":2,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":99,"dns":70,"connect":4,"send":0,"wait":257,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/e726a8c062c63457.css","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:18.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /e726a8c062c63457.css HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:19 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\netag: W/\"694bf7c3-c416\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c82PimvzWm4%2FgIIFlv1s2Bbtf2xZxJGJBbLJtmbewamhTMriESK24gP0qCaEY0%2BayRjeD%2Ba6DsaKYuYwops1gFqkRSih5WXki95w8n8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1fbd21aba5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50198,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (50198), with no line terminators","md5":"15d6c321fc285570b00a648076e95537","sha1":"14b6e1c11b254562198f201e8a0df4488d0b0f22","sha256":"a50dda30cf21bd70005d34712e072f3093d63278ff1833a0f99a4a35d7898eaa","sha512":"9b6932a4e0421d60a5df20cce64611d564921e67c7cda79b7acc74519195b166cd6b483010442eb6e83ca0a942c813da6c10f4f78ba5aac5bab0f3b3245c9afd","ssdeep":"1536:SroaT+E/te+DIlfVqmtRQiFqvYaGun7KsjZ9DiP2OSuPpmH+hDp4Kns+g9KW:3lfVVVo","tlshash":"fe336497b7e0ea3dbc2bb826579c959c6104b841cf025be7ed15e16009c3ff21ab254e","first_seen":"2025-12-16T18:55:46.026119Z","last_seen":"2026-01-07T08:11:57.739607Z","times_seen":3,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/7128da3f1e118c0b.css","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:18.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /7128da3f1e118c0b.css HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:18 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\netag: W/\"694bf7c3-775d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=imIiJt21lZ8g%2Fc76CTG5s84AhKLrOjVY0vHoX7RawrkDrS5aSyQey4MHiSwRdHvA3eVpJVPuMsFL2pmVzxft1gJ1C%2BY0rol2%2BZCbmVk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1fbd21abf5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30557,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30557), with no line terminators","md5":"fee80285ff52563878edd3c4a1351d8f","sha1":"8886b1c892945a898344e3ab33ca9e8e57102bf4","sha256":"8e9b203a674dc7e7270335da84b6aeafd15af8ede33a865cd922367b52e0226e","sha512":"813355fc5cd6a611945c328a4b6be04534999ac7b4f111416d4e40c825cd2273349a2949ecf892ab6d289903708401f1ddd341c0e596ecbf02f79e705cc48901","ssdeep":"768:7F8Rd9fgGkRFm4wAjpAFNFrUVtqxu+OU4l:7F8RdKfwrA4Yqx0l","tlshash":"5bd2c896fcd4d2bb2c1b963e63d896ac10661841dd125bfdbe22d154a5c3bf30db2b04","first_seen":"2025-12-16T18:55:46.040361Z","last_seen":"2026-01-07T08:11:57.723162Z","times_seen":3,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/favicon.ico","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:19.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:20 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6LJNQiqEf0ZZCIThgZKuw4JWCeRPpLlEiAsj02X73Su726D4WOkrWaVLYpp7ggF981%2BSM58Dc8i27k92mtVrIn7Py0hM2f0puzQh7E%3D\"}]}\r\netag: W/\"694bf7c3-1e0c\"\r\ncontent-encoding: br\r\ncf-ray: 9ba1fbd8cfe05691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7692,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"fe74080fdee7a3041da2b216395d9798","sha1":"925fbd871092cb3931771ad910fd5db2db14825d","sha256":"975bc0d90bee4e95e7233798f81322327b49167a97b4649cd40896e00319455d","sha512":"e64d482a9f7fe21a4168608a910a9879e9397eadf3d134ddcdea4a7807b8488a3ca53d0384b693d02a638a655c77d52095e5e2404a3309dcb436d26ee360e07d","ssdeep":"192:p5agAzR2jRxDxKSZFZCz33b3+MJZYAJZDMlV5Jj:p5agAzR2flFu3bZYAS","tlshash":"f1f19e0b0be56d7ac57676c738e57912fb8724129b240ea77636c3800728bdb4ba2425","first_seen":"2025-12-16T18:55:46.024438Z","last_seen":"2026-01-07T08:11:57.738704Z","times_seen":3,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/secureproxy.php?e=jscdn/getFile","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:19.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"POST /secureproxy.php?e=jscdn/getFile HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://helioschain.net/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://helioschain.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"xhjlpzoyf55b039en8tu\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 07 Jan 2026 08:11:20 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: default-src 'none', frame-ancestors http: https:\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zdvvr5scXp18jGOZmvGUa2ATM6trYwN1pbEmIk9gXePNvwsq72Td55nw7nr%2BobG5vRF5UogqZKtsZAvB2GBELKuW4P2FkjN8Pi1VkIE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ba1fbd8d8015691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1473e0fbeabc0536900184482e5d7208","sha1":"2ce769b93b1bde1292be3652c0be40932c333799","sha256":"43e8a4807c2054a6e8518c19131cdbde7f69242707b4564df707dee30065eb5c","sha512":"b6fd2c422f5a8a4cd7c9f3c5c136ca70a36cf3a8152aea5fd08a9d1f282fc0bc667b850bcc4b56c8cd6b91e907578f5eb6d1c9e93394c2d21b0398174267f658","ssdeep":"","tlshash":"c9c08cea20000201893096047ac222a824977b8a20e28a44ab82e027ecd461ac886188","first_seen":"2025-11-26T01:11:55.349732Z","last_seen":"2026-05-27T01:10:01.573318Z","times_seen":37,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/161a6c8244716c06.css","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:18.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /161a6c8244716c06.css HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:19 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\netag: W/\"694bf7c3-2bf2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9bSP9%2FW7zLSrATD%2F%2FFEKcm4fdq51cuc%2BOUpV0aX8Txkh%2B75WFiW8BQFWMD64LTbmejv%2FuyG%2B7J%2FOp641v2QWvYjGQS46YrzsqUkZEW8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1fbd24ade5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11250,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11250), with no line terminators","md5":"fd082411fe4a6514c0c55e8e6f7cc3bf","sha1":"3774a10017ecc70fd0963de31af49c1dbbe333da","sha256":"f528b3075f9c2343a6b02c0fcf339ea531d1aeb78c59d5cba8788d8d6866c41e","sha512":"3aef1df1a2e43cfd462e90d460e96221b01faba53f792b377b28eb29f0c6400dd98f8e3bfc958d033b2b240b7e861e1f2c7bfc6a4f57a6ac9da1644f0505592d","ssdeep":"192:8NIhB1n/JFntCvRQ7G4xYKjuujD3O1VFVnj1T2w9Y91hCYpcz+ZWwez0hzPwzklI:xvlxLsW7pYKjuujD38ghnczHwez0hzPM","tlshash":"ab32b53b3662f62c6c67942796a96e9f14449048d90707fdf853f36908c3be35e72a88","first_seen":"2025-12-16T18:55:46.022169Z","last_seen":"2026-01-07T08:11:57.724355Z","times_seen":3,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/11d951e69e6718b4.css","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:18.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /11d951e69e6718b4.css HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:18 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\netag: W/\"694bf7c3-3ed\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41VVj%2Fx%2BsHhZkOW0ZVU8FDfXPbKuAO8dL1ZxrRPTUdGmsw%2BJKnAglZDiAC4xXLgHCZzueC8OwwQnJ9c8XKxvzxhYNXqLyOsYlOaGj04%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1fbd24ae45691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1005,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1005), with no line terminators","md5":"92376c0c8a743e9c33cf1852487b4955","sha1":"4627ff5222c7cdf0da813dcf0820aa28a8b8be09","sha256":"7f7dc0c8d8a645d23a9ceee33107606ab48fd54edeba5befdecd970a8851a072","sha512":"a1ffc66d7532308e78aebfd45954c988e98079156d6fab6363d3c601192fef9004edae1b6c5f4eee01523985eb7df80f5d8ff7447ff98fa45c1c931d74de883d","ssdeep":"","tlshash":"2a1102a9b157d03dbb4bc3492eace70c4339e0c5e94225dfb84a106553cf393306aa88","first_seen":"2025-12-16T18:55:46.033609Z","last_seen":"2026-01-07T08:11:57.740395Z","times_seen":3,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/5210739edf1a011a.css","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:18.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /5210739edf1a011a.css HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:19 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\netag: W/\"694bf7c3-1c47\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uLm4EVbOUUE%2FwyWXcddHTsRYTTJT4T%2F0m1At4MWx912NgF3L2YPyd3DSFqAsEjIgp01p2oF2YJ2F9RrKyfvwrMXk0Am95O4aBE%2BsDvo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1fbd25ae85691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7239,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7239), with no line terminators","md5":"d9ae11136b58b74c64b027bce34003c8","sha1":"a82f984dc5f415e787353fbd6d563a63ebf7fccc","sha256":"2d3d45653b05ad40758207ca9ec5c5b53a799e51ed42b81389a986a233754682","sha512":"dd87996556763b9a6b9a38712e9f9ef5a133e663031c274c939b9eca8d3ce7856d03365d4ac512fc43e7fd2c288ca215b3a71ae847ce2b505a824c64e9fc94d3","ssdeep":"96:jtEpkFdrkrHmMfl3V7TE7+HBlnAgVy1ba00BPu85WdaWUmf:jPViHnNVVHBlnAgVyIPuKWdaWU0","tlshash":"e9e155da7560e33c6c5bf416a7dd664c042ddc80cc229ae6f945f2260bc3bfa57a2718","first_seen":"2025-12-16T18:55:46.035408Z","last_seen":"2026-01-07T08:11:57.716027Z","times_seen":3,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/css2.css","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:18.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:19 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\netag: W/\"694bf7c3-1dcc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0hXWlX%2FOs4PWKVES1OG80DaRYPWH8sgmyVgB%2BoEtDcu7nC9AiL6l8C6wh0UIhnmDlYyAnx6EFQ6kBjD3gNYzhN3F1VF9MpZjrqCHL%2B0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1fbd25af35691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7628,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a945690afba190bdf35bdbc8dca91152","sha1":"d93d79ba5c4ff541fb62d683c5d6b488b9f53ba8","sha256":"e3588f89e8f3d36d7befdcd1ad777d37963acce98132704f84f1d7ab2d5e1b4b","sha512":"72a22e14d311d595ee72e60b3ae2692c0cf6745594fab8f6f60c522f0f91a227d67e0dbbbc34e4fdfae78e152a29498981398ad2f56e511e7abe26664268a393","ssdeep":"192:9/NAPt34yaDD/OnIt3/ha8G/rKht3iIall/E5yt3RPaGc:JwSfyGKVm","tlshash":"ebf14490046b9400eb872cd277cf7f376d9da148a045c9795ffd1898acded2613a1b4d","first_seen":"2024-12-17T11:31:53.647668Z","last_seen":"2026-06-08T11:11:05.327177Z","times_seen":505,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/0xD4949664cD82660AaE99bEdc034a0deA8A0bd517-1.png","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:19.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /0xD4949664cD82660AaE99bEdc034a0deA8A0bd517-1.png HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 266\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\netag: \"694bf7c3-10a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Iz6kI5c40EaBGeqbem%2F2uVTAXP1PBZ%2FwYa%2B%2Fxeo8Xnh2Eh69FxmpSmX49rvHxgvcabEMV7y99D2ATLRhVzIPKVp6P5GBuMKDRXnkaSM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1fbd70e845691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":266,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"b9ea9e8b404f16a9665d5a38e37e88da","sha1":"4becb2ed13094b8df9fd1e9bbaa1f926a94b7f02","sha256":"bff989e7063c97e3121594ce4622273679dcd18d7aaaec1d6fea8fde251a6ad4","sha512":"09c13097d3937b323262770905de618c3afb903b6c9b80e2806f4a9201a547455a30f21c08113950a4510cc7b3fda080bf802419b0e3f5b50123cd2323cd7afa","ssdeep":"","tlshash":"dad095d10051dd7d99de42029cc011386d3b016cc1e4ccc44315c033f9c0175e5f8e06","first_seen":"2025-12-16T18:55:46.036351Z","last_seen":"2026-01-07T08:11:57.730581Z","times_seen":3,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/weth-1.png","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:19.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /weth-1.png HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 926\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\netag: \"694bf7c3-39e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zGhPAzHA5dYQHuwHTcTv5uU1hGO%2FA7%2F%2BaLN%2B9RstMP2X%2BME6ddD6l2IdDJsC5drTmcCXQfdeFJYbeOu2L%2BOzv4Hvxaefxe5%2Fbc7rlpw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1fbd70e865691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":926,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"678a1fc1e128dfadd4bae796038bb60a","sha1":"d3d7c101378d0c8b1450d86129790a4a721d7f93","sha256":"2f3aa013a814a6ec9f05d2cc74c94fbf1107c57efa0b44390065d71513f9cd63","sha512":"d14713e90af8c33467412eae1e9d3fece6b8b435ea28cbf4a37c4025baf78817a49046f6d0817382084945cc76649c934383aa3890f5845ae8186894453270e5","ssdeep":"","tlshash":"7e11c8c322dc8cbabd8119f4c281432578ca0f0d3535e98ae50225a4aae6c529611297","first_seen":"2025-12-16T18:55:46.032679Z","last_seen":"2026-01-07T08:11:57.733294Z","times_seen":3,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net//secureproxy.php?e=jscdn/getFile","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:20.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"POST //secureproxy.php?e=jscdn/getFile HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://helioschain.net/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://helioschain.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"xhjlpzoyf55b039en8tu\"}"}},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 07 Jan 2026 08:11:20 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncontent-security-policy: default-src 'none', frame-ancestors http: https:\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l4GLgiqIILkGz3yjWJlAEpo8gVOY8oJ0T6kARfW8qyyTOTD7y2t5eCCMC%2FAcTiWJWpCI%2BW5LWd3r86mgDNuAiEblA0VOFbPoGbiIBn0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ba1fbda496d5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1473e0fbeabc0536900184482e5d7208","sha1":"2ce769b93b1bde1292be3652c0be40932c333799","sha256":"43e8a4807c2054a6e8518c19131cdbde7f69242707b4564df707dee30065eb5c","sha512":"b6fd2c422f5a8a4cd7c9f3c5c136ca70a36cf3a8152aea5fd08a9d1f282fc0bc667b850bcc4b56c8cd6b91e907578f5eb6d1c9e93394c2d21b0398174267f658","ssdeep":"","tlshash":"c9c08cea20000201893096047ac222a824977b8a20e28a44ab82e027ecd461ac886188","first_seen":"2025-11-26T01:11:55.349732Z","last_seen":"2026-05-27T01:10:01.573318Z","times_seen":37,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/d375412258951410.css","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:18.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /d375412258951410.css HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:18 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\netag: W/\"694bf7c3-7b24\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=twPLavBJDdfPiKKXwXANAMdmEO06ifkd%2FBIgPoyWsezaNTjrN%2Bw2Q09fvEFHkH9KCkWvNWErHHoRoewy%2FDjEj%2B5CoOeeOEkGpLmeCBo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1fbd24ae15691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31524,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (31517), with no line terminators","md5":"1f9a2fa37932317e9b47283b15ddcf78","sha1":"4616198a935c8106c6c0dbb5521398becf9f6639","sha256":"dfb8675eb3e0232101e664ef8bff8141841f83c1e9856e229124dbf84756c0ee","sha512":"bbb3d685332fa3e16a0ba003bd388bd3d2215c602f311886e04e6fe2d4559ba3c68dfd5db4b4435541a469c079596670e3259d7a4297b5554ac00ac84f06e9b4","ssdeep":"384:GA4r7suSI3f1usfAXOE6Pr0TR8y9Ue3RH9brG3R+zM8WtBBryYsPk5TRJclY/KkW:GA4rwXEaO3Pel9rGgMDF1sPk5sfc9vo","tlshash":"8de2861fbab0d53db42f9815b4a42eca59185504f65717e9e863be358ec72e30e332c8","first_seen":"2025-12-16T18:55:46.041713Z","last_seen":"2026-01-07T08:11:57.736779Z","times_seen":3,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/fc00cb7634d48420.css","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:18.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /fc00cb7634d48420.css HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:19 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\netag: W/\"694bf7c3-ea\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7xtc3RYXoI0siwWw3%2BhQAGvGIdF7qzy3ZUfTS1MYW6OX99IiE5cilXkXTfq4sDjA%2FllUK2XpgSY6F1nidXadrW1mbU7suexridydunA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1fbd25ae65691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":234,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"db301ecb60d47a79bab5232828519bd8","sha1":"9447c32592cddb42bba1835cd5406dea03c218b5","sha256":"52c2310c6292daec9c06c086cd765232f2d99fa71514c937d35783899bb13d96","sha512":"f252d622e1acf9eb7ffcd0984f61b107e3b458d8fd5f36a6b073e28944d0a928a3c35dbd01ccf423c16c4c3cf2f18753aac968b748a1975488206d76bb613933","ssdeep":"","tlshash":"9fd097e9c742523e7833b9224f24c3589b18d850ce182390b900633182c73eb2970309","first_seen":"2025-12-16T18:55:46.023104Z","last_seen":"2026-01-07T08:11:57.725469Z","times_seen":3,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/sprites.svg","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:19.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /sprites.svg HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:19 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Of6BS%2BwV3%2BKXmwJetseOrqmt8Qcfhx5HnDdcJkpU3SRcJ39ru9gAWzN4hfshJ6hVFArn26Kex7upst%2B9sa7KXGLGS9MmuKduzsX23FY%3D\"}]}\r\netag: W/\"694bf7c3-5bc9\"\r\ncontent-encoding: br\r\ncf-ray: 9ba1fbd63dc35691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23497,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23bb449fe8b9d0395d3930c1e07f56be","sha1":"9767045e733a72a9a293e98d962204f474cc940b","sha256":"475621409644fd089a8a5665bc056ed939c1f74156081a035cb0f0f8b26c2029","sha512":"c76d0d062b6d9356ee6918f8a3fa4cf525c5c5c39b303f2920b38789010448fc34b09b86ab2301bcf5126c72295bf9597e93e49024ba206268a1c31a24824214","ssdeep":"384:5APyPJNOAW8BxvDAdt4QAAQ8Pc0f4b0AZch2Ek+F4Tqc6v5+/e:5APkrqIxrAjAuJfth2Ek+KTB6v5+2","tlshash":"2fb2e8e19f3863bc9bc7634daf219cd8770e84ab3f7185d0c52c66a97487998b616c10","first_seen":"2025-12-16T18:55:46.029543Z","last_seen":"2026-01-07T08:11:57.728879Z","times_seen":3,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/favicon.ico","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:19.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:20 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t3ruukj%2B9ab0rKPM43X9Jf69PK019AMkfmHoo6zMZ7LvjdPDelGlzSPgdjqZwt5BSFgPLjXdL%2FMf7dbl8qWWjpWMjvoDwsstX4%2FLJno%3D\"}]}\r\netag: W/\"694bf7c3-1e0c\"\r\ncontent-encoding: br\r\ncf-ray: 9ba1fbd8cfdf5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7692,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"fe74080fdee7a3041da2b216395d9798","sha1":"925fbd871092cb3931771ad910fd5db2db14825d","sha256":"975bc0d90bee4e95e7233798f81322327b49167a97b4649cd40896e00319455d","sha512":"e64d482a9f7fe21a4168608a910a9879e9397eadf3d134ddcdea4a7807b8488a3ca53d0384b693d02a638a655c77d52095e5e2404a3309dcb436d26ee360e07d","ssdeep":"192:p5agAzR2jRxDxKSZFZCz33b3+MJZYAJZDMlV5Jj:p5agAzR2flFu3bZYAS","tlshash":"f1f19e0b0be56d7ac57676c738e57912fb8724129b240ea77636c3800728bdb4ba2425","first_seen":"2025-12-16T18:55:46.024438Z","last_seen":"2026-01-07T08:11:57.738704Z","times_seen":3,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/axios-1.4.0.min.js","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:18.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /axios-1.4.0.min.js HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:19 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\netag: W/\"694bf7c3-1471e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eH%2B%2B8E0Kvz21ICj9k4jTXIluGLEpOs%2BgnqkT4CLnVVQcwy1MKjx1AgmX%2BIiXMhK5iei7v7AkMleeetsK8B8TCQ42gyu8QSpqxEzHxHE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1fbd26af45691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83742,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"19155011322594422ea22e70826d1d06","sha1":"1ace89ba06dfc96bd9da2360675eb7c7eee2f008","sha256":"b3c8e1765929a095f8a238f659e59bc30e92a536f66b63f450ee5c8c9219a60b","sha512":"d59b20ed9a40a3dda234fa75d04e69fc578a6e13c24a1ec9be002bc1147ec858fd750cf85a559f6b90992ec3c1ce5933d5afec6ab8d4328a231775aa2070fefc","ssdeep":"768:Uo/xMcnkD2impfPBpJpQbfr374uRy2CgV6vxAlDEG73cYcjW4uL9QctcfcecRcap:pLmr374ul6vxAhEK5apOd9IDye01","tlshash":"2883b8ca1806d0d98e1912eed873f448e0644a53cdacf197d72edcc0b1aef66948767b","first_seen":"2026-01-07T08:11:42.089811Z","last_seen":"2026-01-07T08:11:57.742061Z","times_seen":2,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/40f237d85fa660e6.css","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:18.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /40f237d85fa660e6.css HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:18 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\netag: W/\"694bf7c3-7ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YGFbpQ0rSEbTJsJjaDKlkHKl3frk%2B9NTSv3cYmoNd0uuQTR4OLu3KmaQJgqoqZM3ZZrikXVZ3ZWnqQbyf2ZgnN6%2F8n2YafgwBDpcZBc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1fbd21ab65691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1998), with no line terminators","md5":"e2b2686c041fe81964accdd6b81f8af3","sha1":"af5b5ece397e2ead570ab138fe73c48703f1314f","sha256":"abccb38061a8b875d1b5174fc18414a45918577e4887d4f3442924f1d41bfd8c","sha512":"f447fae9298d7f3e1e593bf8b4de8db8e63ec1d12d9c61c104d1b3d31e386529227c680859b7fdf6c6124f571ba5c48bfdc425cb8de286282d2f4bcb6289c6c1","ssdeep":"","tlshash":"8241c22aaa55350df4174454d2e0b3dd313d8044fa2a576be533b935c6d72939933748","first_seen":"2025-12-16T18:55:46.021268Z","last_seen":"2026-01-07T08:11:57.720518Z","times_seen":3,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/0b17156fe193a7ec.css","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:18.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /0b17156fe193a7ec.css HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:18 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\netag: W/\"694bf7c3-723\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ga5Q3IgFJTJs6gLWau8KMyKi5Jzciev%2B2QlUcN1DkNb%2BmY9Tyiw0vtPs7odfHOYdhw8IAyxVzGqhkqxPzLJLOyddbmHkAtQq0h3ylL0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1fbd21abd5691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1827,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1827), with no line terminators","md5":"edce712a96b0a3d7010bc623ebe2ed8c","sha1":"36529f9c41f236178cc71cfa8d82035f739f3b98","sha256":"75be6ae72863818bb027fa6dffdd553d10fb554d98709975dafb8f47afcd57b1","sha512":"49e577100720900068dad16ed543cae16b33288eb9d4e4f0f247182986c4c13e114b7ffde08534724a4600d94275796a50e5390778055d68b41a7deec8ae8d4d","ssdeep":"","tlshash":"9b3134911dfc517ce8afd443f9db8dbc43185831ab7279d75970836855c6be7411054c","first_seen":"2025-12-16T18:55:46.027021Z","last_seen":"2026-01-07T08:11:57.721949Z","times_seen":3,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helioschain.net/738dfbceead53208.css","fqdn":"helioschain.net","domain":"helioschain.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://helioschain.net/","date":"2026-01-07T08:11:18.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"helioschain.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Dec 2025 13:26:22 GMT","end":"Tue, 24 Mar 2026 14:26:14 GMT"},"fingerprint":{"sha1":"AC:44:29:26:FD:70:8F:34:6E:71:CA:16:1D:F5:B9:F3:F0:3F:EA:25","sha256":"F3:0A:86:D9:74:66:E8:18:26:EA:B2:10:1E:37:17:F9:7C:D6:C7:5B:5C:46:26:67:B9:B0:69:36:AB:CD:71:BE"}}},"request":{"raw":"GET /738dfbceead53208.css HTTP/1.1\r\nHost: helioschain.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://helioschain.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 07 Jan 2026 08:11:19 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 24 Dec 2025 14:25:07 GMT\r\netag: W/\"694bf7c3-425\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8EUiutFjU%2Fohin6hNGys5rYKXz1uSG9QNVyaJQfp6XUWvdMrUghTtrjCi8AqAAJ%2Fm9LUKW0HJ3MMPD5KVNKbjC4ysgrpg9jF0%2BWj1DE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ba1fbd25ae75691-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1061,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1061), with no line terminators","md5":"56492520d98c2e257afec8adf19a1afb","sha1":"3f564c09dad5afe9c79dcd863c5f2a937c042796","sha256":"f8d59ebef44b1d15ef79ecfb8dc75d0bcb005d6743638cd9f30bcd16a6bb1285","sha512":"754e641c1efec00710a7a035144842a02d8dc813b0c128c9281b641a6005fc8c329229840e0708f9d358838bcbaafdcaed7a9ff36b49ba5fc456355c095434d9","ssdeep":"","tlshash":"e1116b61a3d8f9797826ec6b965ed8ec217420648c9295f1dc60f16014c7ff28367c15","first_seen":"2025-12-16T18:55:46.034564Z","last_seen":"2026-01-07T08:11:57.727892Z","times_seen":3,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"helioschain.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}