{"report_id":"6e7f0ea5-c38f-43e5-8603-f73d071094c1","version":6,"status":"done","tags":[],"date":"2026-04-03T10:23:39Z","url":{"schema":"https","addr":"hltev.com/","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hltev.com/","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"title":"HLTV.org - Official News and reports about Counter-Strike 2","dom":{"size":106,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"e44de33b775a6ca866776145aafd3c78","sha1":"a9079dab1e89170b39c1da665c53e733b00c498d","sha256":"efd4595fecc095473a8a523dc934dfcbc565075ce46a4c662563112f0f878839","sha512":"a54a60a1b1f2e04fcff54ccc8641bbe5d0aaa1d1395e7ba515609afe36dbab28a910cc7522abfc8c2f7afd18914f27f0210fc6046aad8a04912ae09bc05a6bdc","ssdeep":"","tlshash":"6db092f56412000aa620aba089daf20849408511e0098c40a49031ec848c609d8a3690","dom_hash":"domhash5e6292264e4e9b437727682de9d4390f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"hltev.com/","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-08T10:23:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"hltev.com","ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-02","domain_rank":0,"first_seen":"2025-12-09T03:44:42.489051Z","last_seen":"2025-12-09T03:44:42.489051Z","alert_count":492,"request_count":82,"received_data":4820595,"sent_data":37154,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]}]},{"fqdn":"img-cdn.hltv.org","ip":{"addr":"172.64.146.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2002-04-11","domain_rank":745354,"first_seen":"2020-05-06T09:37:49Z","last_seen":"2026-03-28T21:46:19.269153Z","alert_count":0,"request_count":1,"received_data":7904,"sent_data":546,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"numclock.info","ip":{"addr":"172.67.202.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-04-12","domain_rank":7116742,"first_seen":"2023-04-12T15:28:36Z","last_seen":"2026-03-27T15:23:29.492642Z","alert_count":0,"request_count":1,"received_data":797,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"www.hltv.org","ip":{"addr":"172.64.146.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2002-04-11","domain_rank":1958,"first_seen":"2012-06-24T04:03:33Z","last_seen":"2026-04-03T10:22:34.321239Z","alert_count":0,"request_count":1,"received_data":2205,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"kit.fontawesome.com","ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":16651,"first_seen":"2019-03-29T02:12:52Z","last_seen":"2026-03-30T03:31:28.031913Z","alert_count":0,"request_count":1,"received_data":500,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hltev.com/js/script.js","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"106d9c182fcf6d44582db99907b7136d","sha1":"1eb3967f81a94c248670e1f6f523f7b3c6a8538d","sha256":"b1158364b42d3cb97879cfcdec273f408fd0a45a700649ea8541533dd411d14d","sha512":"bbedd92d93f002fc20841c5fd3d8618b041289594a194e2533732409480ad251e7f67000c7460afae0bf0b952599600c3a7cbbe56b0dccaada01412897859bb8","ssdeep":"","tlshash":"9c01488c6a64323947b71fb362ab1e48f63940a365486446bdaccac10fb58e115f3edd","size":852,"data":"","first_seen":"2026-02-18T19:00:46.774591Z","last_seen":"2026-06-28T13:19:29.474587Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/knrytpm6uedu.js","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec46f6bdf6b17740284c7a92a889085a","sha1":"c7efc9eea28cef787e944bf95652a2cdb67cc724","sha256":"a5cfcbe6ec6eff141806a7ca54b2833e6f91ff1146cb4e2219fb879d573e996e","sha512":"40bd3931a02f5487bc98511d397b5d000817852d811428eec23f68ae536bb9ae7512e6e7041ba22d30c4109b783342a5bec850e30ea60ccfcfec547c42c74cf0","ssdeep":"6144:yQ6sDjQSyp5fqDaleLtGvhwI7tsUlSSHIXonJQbO:z6sHQSyp5fqDalex6B","tlshash":"0f7495903bd0a84813ab4fbb732bf1d5f86e095f3c14499be104fda0659562afaf1931","size":366876,"data":"","first_seen":"2025-06-27T04:58:45.891011Z","last_seen":"2026-06-27T18:24:20.947909Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hltev.com/index_files/TR.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/TR.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1414\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-586\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tYa9gfhh3ejmR5q4h20rYd677mfrvaDf6wxIOSNnFNzTrdNvCVK51CvpW6voWsMqoOzWunpUGyATYQLddiyTFpUKEFRk3Kb5ybzBt7m%2B036Xb0DKkgmrFKMqGwk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f0f540b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1414,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"7d1ea43889b3cffce32e61954e4dcb66","sha1":"ba287a74e7e5f5ad5c0574d5caca49ff41a6ffd2","sha256":"bb6ecadb37cdee8ffe3da6be93ff369246a6439e7dd17aca179a4a00b2762218","sha512":"4b6660bf92745c25550876f0a695dc567fd36f8dda73b36136d10002126512651d2bd27c7389ac9971add7d8e4eda055ada60cd474c35cd58d9bc2a82cdcad87","ssdeep":"","tlshash":"0c218629e0cba645e020fa50d7acf02ca7c722435e87518b566973575850356ae99449","first_seen":"2026-02-18T19:00:46.766937Z","last_seen":"2026-06-28T13:19:29.43741Z","times_seen":6,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/index_files/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qGOr%2FNAO9f2XJpVUpHxbsZTe6j4b%2BZYfmgQwXBzJFS3NUUCu3YCAey%2F2FL%2FqGEISJAYfIjt%2FAAN%2BlYgLx2YbnX156v5O7zSWu1Y%2FjJI%2BInkREgZ7pm4vHgYGPog%3D\"}]}\r\ncf-ray: 9e675b62ff790b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"3615566722010db974f6b230a002e1e5","sha1":"d6983248802f655f8bb42d9fb9958e423b1276bd","sha256":"e94ba2887c089b2198ca67bf0a866fc0ca1df46c838fd44e3dae783405f9a124","sha512":"ec10f656702e55b49b9c1e21d44cdcbc530f458f311132aa359d80c6bb725f3259531729872f51e6cd252cf774e9bb8d815e55e72c4dfd9f702b24292daba0b0","ssdeep":"","tlshash":"b8d02b9e5043639b4812156039c115c2264c12f6a43a85e82dc6d48752a853ecd9aa8c","first_seen":"2026-04-03T10:23:42.235194Z","last_seen":"2026-04-03T10:23:42.235194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/favicon.webp","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:17.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /favicon.webp HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nCookie: uv=mnir9p4x-q30kgrqa\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 420\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=6,i=?0\r\netag: \"68a9bec9-1a4\"\r\nexpires: Sat, 04 Apr 2026 10:23:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FfmJ5UuaV6P6pyD%2FQPnhmGOMQe1Xrt0Fp7XLh8fdTGm9bLKE2Fttunt1VLzRA15qxoMZKmi5J8lu8MGaU5rtr%2BfSmdj5jlqwRh3M8f6BJMj%2FVtyN5lx0huE4Og0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b66df950b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":420,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f9ae5edf661ea097cf0352cfa84afcc3","sha1":"2fad6738a3846a2b9dba0070315308084f98b91b","sha256":"4cc7722da226edb56d87121de95642973b54dbb687dc09eb414c2870168cee71","sha512":"cdc1889b51c3bffa1a32ce0d49d3c921bbdd5ede09f36aa5f2fbf4a742c0251945616ef20e422aace042c4187b086084fcf87fc616c3b096f46015796cc105c6","ssdeep":"","tlshash":"a2e0fa94a84958428c42f4a51529c2c41cf41ed43ff705d757d7115b3071d43d584404","first_seen":"2026-02-18T19:00:46.732889Z","last_seen":"2026-06-28T13:19:29.424936Z","times_seen":6,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/m=el_main_css","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/m=el_main_css HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7GAIsTbomzvqKIw0ogPxckdGAIzosLWukOf%2FUFfPRjn%2FMh5DiL4Zr5pXnK6KcdTW7FbNJinoHxVBtoflS5gGYh0ytyIDnhTeXtYpGrSlCa5Bub3NTz6mios0hS0%3D\"}]}\r\ncf-ray: 9e675b5edf350b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"3615566722010db974f6b230a002e1e5","sha1":"d6983248802f655f8bb42d9fb9958e423b1276bd","sha256":"e94ba2887c089b2198ca67bf0a866fc0ca1df46c838fd44e3dae783405f9a124","sha512":"ec10f656702e55b49b9c1e21d44cdcbc530f458f311132aa359d80c6bb725f3259531729872f51e6cd252cf774e9bb8d815e55e72c4dfd9f702b24292daba0b0","ssdeep":"","tlshash":"b8d02b9e5043639b4812156039c115c2264c12f6a43a85e82dc6d48752a853ecd9aa8c","first_seen":"2026-04-03T10:23:42.235194Z","last_seen":"2026-04-03T10:23:42.235194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/US.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/US.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1415\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-587\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9E4cWKgnGEwZ7K%2FS26lZFSK4ACW3udgCwXVc7C52VFD3oB%2BOU7A6tpfdAQYxNW%2BW4imG6c5dkUeV4WBZNxq30vjM7Uzb0gz8ZLNs%2FqlLLncMj3nFYoxPt9HkSow%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eef3c0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1415,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"451439daf235663270d67a79aa879f5f","sha1":"9585455235517de7009da8d0298f6bc88526c667","sha256":"4a2ee447f67fa0c52b9b9ab909b45be4d42f8064e61bf0d01e3410fb2c8274fe","sha512":"8317d4a4b5e6d22103e3ba7d6287e48b4b3379c75e3aa713f321a7dc8df55aba32705bbec7278d64f30dad7730d55863f897cea718c9fe2a47b134aeab07ce0a","ssdeep":"","tlshash":"6921e969640413cee11d25367a15e16d01839b40b8f9369f1428ee86e8f90f40cf5d77","first_seen":"2026-02-18T19:00:46.777501Z","last_seen":"2026-06-28T13:19:29.417771Z","times_seen":6,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/IejtXpquZnE8KqYPB1LNKw.svg","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/IejtXpquZnE8KqYPB1LNKw.svg HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"68a9bec9-4f0\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ijozvVvTUDQaCxRVWXLIEVz9t1QJEBLNpPruJygMolarhZFVYtMj7jlIil9v0el2LNWURcU%2BSD8xrTxvHOEomPS9PYKe1Mf9rPPWYAlOj6oY1qF2oqikWi1Wow0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eff480b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"828779f02adb71867402de1cbe256482","sha1":"3b6b8a5c51bba00b91c9cd9d4812648a4b008cfc","sha256":"ee0d02d741447d7640e13b110cda89c4c7004464592f26308da89c8f66a59209","sha512":"65517fb47df3b089f8d1fcb51d507780a88cda49c0c54cc9e7aeacd9242d9943718075738f5e0c78077d1406b3414612e3825a15a24360f84ba0e374f4d22aa3","ssdeep":"","tlshash":"1d21101f8370da99aa9c456cee64248576a4e24fd07cd3c1df53281ae44c0e082cda6c","first_seen":"2025-10-20T10:00:42.038116Z","last_seen":"2026-06-28T13:19:29.409967Z","times_seen":12,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/FR.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/FR.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1408\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-580\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=APvV96P9yh4Gjh3DmCyfVJm7vdSB8oG6bocJp4%2BMKoeEm%2FtQiasJuvYIPuIOHt9B58iGAd8Xp932H4jlc%2FOxy4bqbcLrmDjiriaydVC8etW%2F4iqWmPT52mBr4lk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f1f5d0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1408,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"2b751c771c4bddabc9bd3467648f3e5a","sha1":"12fa69d133301316cc0562b4a984b513d909f482","sha256":"ceaa23bf579ed1f358d586dbb8faf3bfa9a1a9fadb6642bed31d8babe053b760","sha512":"f7fe90cb28dbe062c6c6f5a5d460b124da3d39193a715858d741f45a5c449032708c387f39e30416e46ad5393e0616eaff414b3589c422c8ea89e3d770c9ee15","ssdeep":"","tlshash":"9121e97a5cc11ccbd0a37ef2ecd7783d9120d971cb9304aca5b55658502526e5550454","first_seen":"2026-02-18T19:00:46.773861Z","last_seen":"2026-06-28T13:19:29.464835Z","times_seen":6,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img-cdn.hltv.org/gallerypicture/lIvzvWZNkttUgoHbGRNTNT.jpg?auto=compress\u0026fm=avif\u0026ixlib=java-2.1.0\u0026q=75\u0026w=200\u0026s=e0102ae06a336c08ca44b29da0f0e4c2","fqdn":"img-cdn.hltv.org","domain":"hltv.org","tld":"org"},"ip":{"addr":"172.64.146.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:17.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltv.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 05:51:59 GMT","end":"Sat, 06 Jun 2026 06:51:54 GMT"},"fingerprint":{"sha1":"40:2E:79:18:C7:45:72:2E:F2:EA:3A:A0:7F:69:CD:4E:C3:96:2A:AE","sha256":"FC:77:55:04:BA:AE:2B:17:F9:FE:43:5E:BD:87:D4:33:2C:76:F9:21:EE:34:D4:29:CD:46:24:F1:DB:B4:A1:D8"}}},"request":{"raw":"GET /gallerypicture/lIvzvWZNkttUgoHbGRNTNT.jpg?auto=compress\u0026fm=avif\u0026ixlib=java-2.1.0\u0026q=75\u0026w=200\u0026s=e0102ae06a336c08ca44b29da0f0e4c2 HTTP/1.1\r\nHost: img-cdn.hltv.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: image/avif\r\ncontent-length: 6881\r\nx-imgix-id: b701e516d554ff682a54ef45bda587f5df1b4816\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 27 Mar 2026 10:32:27 GMT\r\nserver: cloudflare\r\nexpires: Sat, 03 Apr 2027 10:23:17 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230185-FRA, cache-ber1080031-BER\r\nx-cache: HIT, MISS\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 290227\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=jm0Y.rNUiknzuS8V.QnOZnOnC.uK1Fudp.BXmbbbpFo-1775211797.073203-1.0.1.1-IrFnGTUh0DpsSNzTisoCBYJ0tfPqNQzEB4gGx94A46puo6h0xdJykugOvEE8TLV2ava8Jz3Ufg7bJahh2Lxa9sc7aOt6Tnd3o2PpwA9Jyt7w9w_3SupVDIu1naE_ZwO9; HttpOnly; Secure; Path=/; Domain=hltv.org; Expires=Fri, 03 Apr 2026 10:53:17 GMT\r\ncf-ray: 9e675b63be07dfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":6881,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"96ce0846575304cd62e74064daf8ca5f","sha1":"09fe7622ead0d723ef45b53ee75a66f8eeda38ca","sha256":"0d82b52863658045214321bac2817407af5a6786945c1ce1f113e1e9cb354902","sha512":"7a6d7191f6f862c5cee08665b497e74310078556bb559b58b6e0976042e1c5276234b50f97beac5b4e7f4ae68df635e3b7653fd1c39c7254fc1adce09dd25f15","ssdeep":"192:+G4zdVZt5ff4lMwarq+Y+ISWarugb83sIZmN7:mzdDtBfGMRY+b69C","tlshash":"59e17e265b10df96d9fe3d71978907084b3dbe10670a5bc7e397114dae20ee10a0ee4b","first_seen":"2026-04-03T10:22:37.886559Z","last_seen":"2026-04-03T10:23:42.243843Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":6,"dns":0,"connect":1,"send":0,"wait":8,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"numclock.info/dyrrfqusnousercnromovlmnrcwauobddyheisecliivfn","fqdn":"numclock.info","domain":"numclock.info","tld":"info"},"ip":{"addr":"172.67.202.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:17.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"numclock.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 02:32:28 GMT","end":"Tue, 09 Jun 2026 03:30:08 GMT"},"fingerprint":{"sha1":"B7:89:1E:C9:F6:05:7B:83:60:FD:AD:EF:82:BA:73:FF:EF:10:E3:D8","sha256":"72:EC:05:6F:8D:27:B6:95:3E:9D:75:D5:0B:7E:44:F2:95:C3:BF:BA:13:6E:DB:A6:BC:CE:67:5E:6F:36:62:6A"}}},"request":{"raw":"POST /dyrrfqusnousercnromovlmnrcwauobddyheisecliivfn HTTP/1.1\r\nHost: numclock.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 147\r\nOrigin: https://hltev.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":147,"data":"d=hltev.com\u0026u=f-mnir9p4x-q30kgrqa\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3a-PWGlJMTBv3ArTX5pS0Vo98Pyll8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fryO%2FIZdg3YKI6zwSbyhuyRiNsIdiociIgV8wPsUIIR0kJXh8a6e1dIiWoCQSkl8yh73gEB%2BDJDGNSQYtVSzUDs7hfylvZFASSKIsadLJleK43LlsFAlnNcc8I4eebfQ\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e675b645e328be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":58,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6e87d5c72a1c3e1aa2a1aced243d3ed6","sha1":"3d61a524c4c1bf702b4d7e694b4568f7c3f2965f","sha256":"ff1b10a49737f23db0c04149b76521dd78f68bf05d70163a905938b2de2f3355","sha512":"274018b35e46a33235037ac12f7805625a34315f3457b8a715b66fa163a1af0e1783806733a4c1eda3eacd8d6b46e47021d84456ce2b8f93bfda3993bbd35be5","ssdeep":"","tlshash":"39a00251551459fc95134c0d424d2f00093c012b6ac4604bf00c594851b501b4145133","first_seen":"2026-04-03T10:23:42.245657Z","last_seen":"2026-04-03T10:23:42.245657Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":38,"dns":1,"connect":1,"send":0,"wait":207,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/TopSmallLogo2x.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/TopSmallLogo2x.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1376\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-560\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aqc8nafwh4uNS1wR33j%2FJ9WqM%2FXU4B6Vkwn0JsnqtacGaon4vA3ZZItt%2FPNVl9SvnauJGGv%2FAfelHhOwB2dIlYvi8Ofiv%2BduX0chfCg86gE0sS2NkmLIHOY4NuA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5edf370b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1376,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 92, 8-bit colormap, non-interlaced","md5":"3e638bc33f407764466120bace479aed","sha1":"04537fbcd368e90fefd550c5d453970460c886ff","sha256":"a40ff4c920c90c2322987fac07f9e6eeb0df92576a01e606028e219e72deee6b","sha512":"75adfe74dc67c634c0752d7976f4ec6f81c68f94416e4dfc779015ed9973051e6a6ae051a25097a95ac76da0435abf899c7a9d8a45e21e78df033f4e7c40aa13","ssdeep":"","tlshash":"732108de295097bd5d21db81127e25e48528e8b13e88e2cd008d6766aad06ee02e12f0","first_seen":"2026-02-18T19:00:46.75905Z","last_seen":"2026-06-28T13:19:29.486441Z","times_seen":6,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/ITPa2pUSNjRxu-kSuUvKxB.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/ITPa2pUSNjRxu-kSuUvKxB.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 499939\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-7a0e3\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ua%2B8Y8syywAf3E1Z4BrASVSOnuyitIlxMZILHSUhU9Ewf3FUaQ3LP2WflYDCJNscCZ16DWBfRQDUBUBXfYPG7%2FDFkAHK%2FypGgoh2o0OVmi7mr9llxS%2FPgImHWy8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eef390b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":499939,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1276 x 312, 8-bit/color RGB, non-interlaced","md5":"b2326e90e2715ac5ad7f4bdd515124e2","sha1":"e43f1932f63f3a60b3375762050413ddaedde6b7","sha256":"351fb2c81b1c9c6f3e1a946ad578ac74bfcae75f60e51d6fe04a580c2e97fbd5","sha512":"0c18f23cd9d2fea7f97c1aab1f25ed256501062880ef12c269bb63acb6a7e5a6c8fa805ea8b2dce970b5b594c9d1df3a2850a154d3cd105232d81371e8259982","ssdeep":"12288:FthGNx+wPZpGu3/cdgr46Fhmz8vtIM6ZT:sNx5t3/c2r46jp1m","tlshash":"dcb423d4de5f5923316e224cc45229a0f422af7613dadff05f927bf4a03cd84a4869a7","first_seen":"2026-02-18T19:00:46.731161Z","last_seen":"2026-06-28T13:19:29.394776Z","times_seen":6,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/BR.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/BR.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1429\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-595\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eLFWpF8WqKnM9SCqGuJTlltO34q4xauGH7BDwknjst%2Fb9TyACKE%2F5FF2eEASN%2B5m23%2FelEwAEpFz1v0orgpYFW7qBUF3w%2B049OXhvdFXVm6vMZuMXowviQ3c81U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eef3b0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1429,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"2de21736c1b7f1641d231a9589e7acb8","sha1":"57fb99878067e8e4f4c64d5117bf1d4e5cc00787","sha256":"474d74b1f32beaa0f2eb5e6a89643382a241aab72a78cc4d1f5f1db67848859f","sha512":"5dd41a91562b9f7353597babe49bbdbede8511377a48f9c3c8f985217e3b32915edaf62283dd623de8015887e61392f463cd4dad9e55feca8245d6d34147be4c","ssdeep":"","tlshash":"8c213880d9f681a8be1037303820c896eff004ec2b8a68de71870f9b00343acc6252cf","first_seen":"2026-02-18T19:00:46.77834Z","last_seen":"2026-06-28T13:19:29.465812Z","times_seen":6,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/RU.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/RU.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1440\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-5a0\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aCwrtOmhYEqnATomvIcBzTL3Qmit%2FKF3gi%2B%2FiMMPoELk%2BunGc3ernFMQYJOWs0AC4UBZWGTqJ5yZ8UJDcWMx%2BMTx2C0Tf8gldP4EUzqMXJviP1G7DiOmUwgcLwQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eff430b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1440,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"f6a5b316423b712fc6e77ceed3d4592b","sha1":"98e38aa342807b2a89b45d36ecc4dd185b90aef9","sha256":"1cb23ff9e429bae9b73e2b0ee5a5c3bf52c1a6f45398b18acb692dbb3589c70e","sha512":"09ba08d3a3712ecfe23a9fbff71bf7bd91f3142960d76e5e2eeecec007871b2736bb1bcae266863fc7fedad596c9ccd68e65f0b894d97a093b869ecd0a370487","ssdeep":"","tlshash":"d4210b54b0d53922f7b074f50870bd866668fd92b6b71a8054254e0d76563e3d71f098","first_seen":"2026-02-18T19:00:46.75301Z","last_seen":"2026-06-28T13:19:29.430756Z","times_seen":6,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/ywdn4tmAvXfllLeV2SkkvF.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/ywdn4tmAvXfllLeV2SkkvF.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1112\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-458\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BQcF3gTmxa%2B8w6cfr7u0c94fK4rFCmCxvdJ3gbSAqXovPKydih6%2FsJEEz7m%2BhdMU2HLInh1AB5rr6R3egUqyhI5y9ijFx7Q4sBKXFkVsLC4zXDYLsjfunR%2Bxy7A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eff4a0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1112,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"23678d8d61d210d37bd4a00a850cc945","sha1":"0add87942c029a5a21db7e63e0d5e36904814683","sha256":"13f9139468915d7705df30a9d4244c6f6c25f9d800e74f84680ba14c6fdfa805","sha512":"fedec28dd200a3bad62702a27226c0a8566f0776ac36c2675ab06dd0ee03f9febbfab564894bea64fd678978a0dd53e5319c5c057b0f1f665a9e053f3e95b96e","ssdeep":"","tlshash":"2f219687c4178e35bb6361ba03f550c4bc37a32c2d379f5bb440a82ec5ab66c1682621","first_seen":"2026-02-18T19:00:46.747426Z","last_seen":"2026-06-28T13:19:29.428574Z","times_seen":6,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/4eJSkDQINNM6Tbs4WvLzkN.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/4eJSkDQINNM6Tbs4WvLzkN.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 2126\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-84e\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1AbEgj6lbc756dxZZ1GICw8nmqcgpIbwOQ7wj6J1CvFitGfBrAVNyj2EqaowrukVMb8WufZLGAJsaux68zcwh4UdgHzJ9uD%2BlU4PKPyTwG%2F%2BgoggEi7lOxRY25c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eff4b0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2126,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"f1499ad7b47dadea52874d61197407d6","sha1":"12142e0dcd88334ed2d5e5c4963cc049bb906a28","sha256":"85482c9a3a0c5d6cd3269062f3db19a373c734f06502ebe49552abe2db966e9e","sha512":"16ed64a232f5791b093acc093b500e7d9f54cdb7a048140efd3878c1a17444829c6d034fd5bac54b4431708ac7dbe582420eca6ab4c0f0070801e46825d9be7b","ssdeep":"","tlshash":"4c4139fcf0487d70a8bba202be134275361c011f192b0a424dfa18baa5f0e0b6e4ac09","first_seen":"2026-02-18T19:00:46.73204Z","last_seen":"2026-06-28T13:19:29.444106Z","times_seen":6,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/UBADgCrxI5mgxX1BZDZM2H.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/UBADgCrxI5mgxX1BZDZM2H.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1191\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-4a7\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lm%2FX%2F9hPfaPYKXYw5%2B6dVePkbydZbCPVRmacMvzd5NUR4K4lV9%2FouqEgYsV4ahwpVhteKAcUKDNE%2BrPk619irj%2FVtytwAb16AGuUnIPtp9UbfB4HVjyCcD%2FsH6I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f0f4f0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1191,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"a7dc2b7bdd0ea99adf46737f20dc183e","sha1":"329631e756e70335d57608f21f37f5cd33457000","sha256":"c9d6c89e64a1e1110cb2256713a5be935c3ffc246208d1a7771287323a2c8ec4","sha512":"19ef5dd50eaf2c7e7efa70072d189c278c93e85c51f159bf8345d75c5486a5e6eb2481388d2f5acba4994623d34c45a69af5a61441b3dc7c4159d39736fdf4e2","ssdeep":"","tlshash":"9621b7c67dc8beb9e401ed5e150b368dc8ad2d6cd15c11860d450c555eaa0b9a08d59b","first_seen":"2026-02-18T19:00:46.757485Z","last_seen":"2026-06-28T13:19:29.445019Z","times_seen":6,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/ZMmU3y7hAV248CmzgxsohP.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/ZMmU3y7hAV248CmzgxsohP.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1505\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-5e1\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5i%2BZddIRxtTPPtDyyTeTlNjkpiTwKGdUkrO4vSv6YX%2BYxGbIMBGZFiqJp0nAMg7SogJKgogLdxtGVkV4HrHR0C5ltRyHnrHR9eldnzb8D%2Bv5SmCvbnh4OkDBaEY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f0f520b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1505,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"e119a163c2cdb2f46f974a1e8df4fa8a","sha1":"4a8d172da8039cfec4a912c40741a8351f6a88e0","sha256":"d3e1854e0f4ccb7f6e1a5a699debc85d6109b6a2837bd61fd7b39cfa34b85e48","sha512":"6a700a87121a99c66a96a48834dab0a7477d948520e2b4e9d839cb2e781808de95bc6ee5c59fe095b2d571bc0faf1f46152e74d4c64c0076f04c00543e6fe314","ssdeep":"","tlshash":"6931f7ce2253c0da0974bea7bd7654a1903d5b5c43a4007a2c03f8e86eb8d4a38580c1","first_seen":"2026-02-18T19:00:46.779656Z","last_seen":"2026-06-28T13:19:29.48145Z","times_seen":6,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/RO.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/RO.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1419\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-58b\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ejNLx%2Fex5g5tZAaHoKI7qbHQZQJ1iD9RpTB7sa2TKmYNx9j0CI4zL68ZvravZ6Ypkx7cQcFjyutGFwltH9Y58M%2BBpcSEo1lGEDaqehXFzqmDTgnf7ZAJyLc1geM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f2f620b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1419,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"8a903bfa0fb0fdadf28aac64e52e70f4","sha1":"d8ea936afa434d21a7d4d502cd42ef135661ccb2","sha256":"bc34e0711b58770614b1fde0f55d29140b2c07b8593a7ecfbd83f4fb5f551d64","sha512":"88010daf2b906a4b7c28d49fa77e190eb6133206cf5756788c03e45545293863af37430d3c29ba7aae9c63fe5f331c6f10ceecd2115420b257bdc5316bff855a","ssdeep":"","tlshash":"c52108ff99d6834ef8d8c5fed5a420321ba5b886c34e28084bb038220763b472816164","first_seen":"2026-02-18T19:00:46.734867Z","last_seen":"2026-06-28T13:19:29.441821Z","times_seen":6,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/mod_csgo_player.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/mod_csgo_player.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 385\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-181\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ahIl7%2F%2B5K%2Fs0e8rkFWSv9GU0akmSAwRS6u4M8YURUH62T5O6PcokA0FpOfQqQ5yM6PUKgPudSUrm99hW%2BNTiUAUTzGEk1wqZdN2aUZFQ%2Fy1Yc4pBoRcDKkxSc%2FU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f2f640b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":385,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 10, 8-bit/color RGB, non-interlaced","md5":"67e6bf149c0bec53f85a33c58666b9a4","sha1":"d34ad83d78be82797d130d4526210615fc270273","sha256":"8fbef86a49b5ad6dce5a61d7de75a91ca20cbaddc1fffba8d686aa3aa00225e9","sha512":"6bdc6c7b4af792202caf6994aa6c1b01a61e1baaf2369ce723beafd1ca40d0c752b0b2dd0344bcd69bd5450cf9de3ef700d2b8b5760bd0898f4fcf9e00fd450a","ssdeep":"","tlshash":"54e0f1518620377cc7bace7203913018d6b101935f234d804c6e64ac6ca1a8e80e4413","first_seen":"2026-02-18T19:00:46.74835Z","last_seen":"2026-06-28T13:19:29.489562Z","times_seen":6,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-03T10:23:15.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qPQyxW2aeCc24HM%2BBYSZw9GwmgGVSW0RN6j4Z%2FWgOphAFWg1wEl3Jm9JmR4lZO5y7gObEiJdNIVBx4p9bUIDXlstMll%2FIZUfufPn6wirj0uI5KLi9Il3%2FRolqik%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e675b5bf8a056bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]}],"data":{"size":528353,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (335)","md5":"089323101f2035e821c5b46e2dd34a5c","sha1":"92d7e6a696415166a62f343b7a83774df127a497","sha256":"4e2eec644e5dad2a0ad57443f0edd81c1f7e762768a263b18dfe6e47bf0f88bb","sha512":"5220dd02702447d458ee3b1fcef0eeb4afc31816e4e732e20b888cd5dc1ba68e747fe0812384665ff979b096d4696943bae6422b18452ce543ad26272151b08d","ssdeep":"1536:sXeADrPOLmg3ICDRrjgizY3RVGJJJJDMu1SRejsWy8p9wpa8xYKgeNyfcDo57oBD:sXeADSRrjLzY78p9eFxhDIS","tlshash":"fcb4217090f08eb1a14a48ca7620a73a1ee19757e5c2150876ff57e66fe3cb9871732c","first_seen":"2026-02-18T19:00:46.749677Z","last_seen":"2026-04-03T10:23:42.257068Z","times_seen":3,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":43,"dns":31,"connect":1,"send":0,"wait":237,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/8PK6WSVMHZaYq8PHfpMS9r.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/8PK6WSVMHZaYq8PHfpMS9r.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 161009\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-274f1\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BOKfUHED3LTCaAarGiaxRQqzvvoU80ugZzaRsNUc%2BPzL4gtbWoKPvshS%2B%2BAoUFS%2FgKuPElQNU%2Fyz8lH7mT0LOlG26weAwrP2WLynHZNU47%2FNpe0hU2ngvrq8IAw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eef3a0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161009,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 189, 8-bit/color RGB, non-interlaced","md5":"9142384e2608bc2a104d548f5dee3e53","sha1":"082603d655fead90349ef22123cbf34b3b9b235d","sha256":"35a18492c64c8e7ab8e29a741559c2593aa2f818499cc369c65f17b7a0a8e4c2","sha512":"dc6dc81c75bbbfc8cc027703e2ffacecca288156a7cc4c3fbed787f7bc247aac3288afd0922c29e14479ef50a2770fedd8249befe3b9bd74935f33db66e70ac4","ssdeep":"3072:hVmiq1hnZKJitypNPO9K55J91synWesllxt01TH1WO4G:+JlKJZHP3WFH01WW","tlshash":"92f312e2cc589579d4c58c1ba25ed54f1382812876dd949f5fe83e9cfb90bcca01b970","first_seen":"2026-02-18T19:00:46.73032Z","last_seen":"2026-06-28T13:19:29.479814Z","times_seen":6,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/XK.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/XK.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2397\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-95d\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ndzo%2FT09BFqg5HZbEU2mELm6gQGJ7EjfJ8oITx%2FX2S6IYWzZ5v%2F9XFcr9aM50NpEeWzVWh%2B0UBotN%2FD%2FeGlEVKfNAWr%2FCoGLey7w7LMJqX7qEi9YuN0QZWuFqZ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f0f550b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2397,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 30 x 20","md5":"c98e09e6e743a99c9b3eab78204cc842","sha1":"a5f1ab8852eea2c32cbbfa1ae554e50bebbbcc5c","sha256":"db9971a4b6c563984aa3d99f9f36d07a8f75a940837d34962924a35895bdb057","sha512":"519b57161e4725e6311d24441c4551add74614584de65363304e2c8ac10a9c6df3ae8b4bfd5c4f2ddd0fdd27ddd229482ee81d190ffa896a9854295c14d2f888","ssdeep":"","tlshash":"cd41d80d9da0b801d48946f17df7307f13544651d6a9a412ddee885e2160470a7529cb","first_seen":"2026-02-18T19:00:46.740573Z","last_seen":"2026-06-28T13:19:29.449008Z","times_seen":6,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/fq2o8E_P9yRdOcQja6BUgZ.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:17.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/fq2o8E_P9yRdOcQja6BUgZ.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 11608\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-2d58\"\r\nexpires: Sat, 04 Apr 2026 10:23:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T0G%2BEg4pHhHv5KJZvXVAXGq%2Fr1brsQZX2KZiW3AxkpufWOpbWXNTU9tl6iYk7kv4Yd54boP%2BJgIuESdJJ9p0EoOGQyslTLVUxlQ85%2BGqcF5%2F73Klj8zGZqlde5I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b638f7e0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11608,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced","md5":"038f0e9e0e94d9b7f4547c6ec3845b52","sha1":"7dcaf08c1786770c274f983399ebf4b69d4f6df4","sha256":"4b760cf75a5d5acb90777b685b94fe51c8c91feb6fe5690b7c7c5ba34663b673","sha512":"7e3cabfd1475dbab429735cbc74c21c2b9093350fc33212c5d869d022b00b6faf154b3d3907198d341ef1ba6a288248e87a6d5a89341b74ef6763be1575e107f","ssdeep":"192:2siLNuIAf4Hmu7h3+QijBkjmPA4TUnP/OrJRR9t+VOXo9D0N+U:2sEEIAgHtDjx3gRR9EVuiD0N/","tlshash":"5232cfcc389dc68d44b66825acc888c669cc14fc26e17bc1b69f196b627dd148b5825f","first_seen":"2026-02-18T19:00:46.782083Z","last_seen":"2026-06-28T13:19:29.467915Z","times_seen":6,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/GB.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/GB.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1430\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-596\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mT8xCZOZubLHUcwSmm2qLVnsP8bvj%2ByZSNXSxmoWNBEeaBBKvCL%2B7ypuywIk7WNwYZr8IK0uQMZqudbei1syy7KuKS13wVoU8dTCGpew%2BDqVVWiBEVNy4iTUAy4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eff400b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1430,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"ad95d725af6c6305df5953ea88a33321","sha1":"14d6b27d3eba0edf10ffe0e64aa9e448a4508a61","sha256":"c556f2cc936240b6e982220695bd0a53c6ad8187ca8d1a4f6560407a447880ff","sha512":"3ef2aeb663da22ff8746f7bcc2b04b492c349c4de4d3970b7981acde627d4f36012ae2fd63b2577a12a7af0283ee3fcf4c322c63fe2bed9ae5688a3216034d3a","ssdeep":"","tlshash":"e521194a6ce69263e54302a42535f559b02cba180849072f699850afda4043f7fc9077","first_seen":"2026-02-18T19:00:46.755829Z","last_seen":"2026-06-28T13:19:29.431569Z","times_seen":6,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/UA.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/UA.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2449\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-991\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4tfpgAO0ATlhgcpiA94Thrxt%2B6nCJIZZ6SaBGRkLXROo4mKv29T%2BCUFc5fp3qhlcSb0KJRZ4OOKZLvk70qM%2FrfG5iQ7UMWYMf4FCkMbyfp%2Fwlj3Hj8wjcyy7cGc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f1f580b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2449,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 30 x 20","md5":"99f965e0959e0be1d182325256cc8679","sha1":"a4a9730b2979edd1e5f612b0401643c05befd97f","sha256":"45b769c795b5b93fa34d3c83e0b94e10764dc81fc9e2ab6aa10f9c8a69cf1612","sha512":"6f02754b4b4e40cf3a45401225f74d6018045aec6e76b87e13d380ab2d3aa182bfc70e16d10a3e4db9f221c1e6c39cf2f6848b2e1df423ef897619edec26a33a","ssdeep":"","tlshash":"ce512c0dea81dd03880854c338eea1373f0a50509ad0e9b3795f446f035a5748eabaca","first_seen":"2026-02-18T19:00:46.763679Z","last_seen":"2026-06-28T13:19:29.403822Z","times_seen":6,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/BY.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/BY.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1414\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-586\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZp3fbKaxxTgZdMvl4MWi87kEg80xL7wxBDA4dv6PMeL4A4ZI5R0SYT5zsuPnXBU528%2Ff9QwTxA1Imy1BtPLy%2Fj%2BrfzEU29syr40GERXZuGmRjco%2BSmW%2Bc%2B2Oys%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f1f5a0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1414,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"7a0040b7953efc84be9dfa39d4334967","sha1":"f4f7cadf83320ba8fbae0bd203a584e161b50271","sha256":"03a39183dd8a453f94b8f9a733d8011429781d89feab2c0b7eff8fa938f1a4c5","sha512":"a50ad623b7eb8b787b2a017d9b1645bd7087dba26edb26d4dd7e8b16f9183cee89213ff8af4718cdc5b6dc5d71509a5f33dff52c803e8a8315c2acba1b056077","ssdeep":"","tlshash":"092108a9d74c087f12af90b749db0614ca102cd9a3ecf85d81ce608b8c22fc57f1801b","first_seen":"2026-02-18T19:00:46.781321Z","last_seen":"2026-06-28T13:19:29.450182Z","times_seen":6,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/DE.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/DE.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1283\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-503\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxXOhN3YejUrllm09f06sDIJvax0kzwIT8ocYNMB4tpS0tUDVvzj2rXQ4PyyvyBTJSz7YBjcIXDmXVDA6HTD5jBB%2B1w%2FykVhgENOz665fuYplHCIGddY9OvUigg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f2f600b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1283,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"1adc838719753a9a0fd7f6cd641c2811","sha1":"6c59d2cc2f439caf0e23d0f507912195386a41d4","sha256":"bdd6e513ae11dfc0810247c8df4e763604761fe33723c35bafa8dba68ff1b1af","sha512":"5d6c1ca1e82e6db1ada4389191d66fabb070c6c1afddaa03baf9b94742c4a66ca1c53c9816fa7aec34ea56188e5f8f928c63969eafceca01dc5c4a09b1827856","ssdeep":"","tlshash":"e321c567b4a45f64f2a6b858d8f24f658d3046c0921fb85c403aa2c676705b4e146cb8","first_seen":"2026-02-18T19:00:46.75831Z","last_seen":"2026-06-28T13:19:29.410627Z","times_seen":6,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/saved_resource(2).html","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/saved_resource(2).html HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=epZIWwn50AAMYSfy0D2DwJCoSb7863c2tsxUs1OPdTD8%2Fs4u3%2FFa7r1K6lYzAXN37TG%2FD8t1NlsPNStPpCYiyl2SdmtHFcnYbRAkeuwyq2kO2MCV1kVHnMQMJ%2BM%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b610f6e0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3c2ccda97c47ede0b1c91b11efd575ea","sha1":"0a348c4b61c961aba7618f909beb87f740a81983","sha256":"97f9b10039b05e1af4a3c9b778fc72ba44cf68a376e4ec1d55f2558f16cf3e50","sha512":"31afbe911abfda33a2948d14578ba290b604920983118ca5a6268a9906120ef365416e5e776ea685d648eef7a2ee2245f424829fdd4c7150d944f4bf673aee28","ssdeep":"","tlshash":"50c08cb52412200ba220aaa2dadde56408408010a04a8c82a04039ac65cc35ce8a3690","first_seen":"2023-03-10T00:19:37Z","last_seen":"2026-07-23T03:10:40.51516Z","times_seen":1349,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/font-awesome.min.css","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/font-awesome.min.css HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"68a9bec9-7918\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w4MoWpZr3RuccqAm1akAojPj9T3Xu3t0eVKjoWYPFO%2BWIyMctghgW%2B%2B590FPmtzSZwv9ICgWTiYG8BWERmVxkv6phIXmo4NG63TdT%2BRBSQKZljXxarEPD31sB8g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5ecf310b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-07-24T15:52:49.981332Z","times_seen":302155,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/KZ.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/KZ.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1443\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-5a3\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q5jC7bpCbv%2ByWrohL5%2FbDcW%2Fp2E0XJSpih6tkXkGBcEcNOed31kI%2BmpFc8FHSsppZEVmyGQPaKdy3NJuZ3M8G3DRuCvhNg8ITKb7d38P1NePLh7jy%2FCqE8X6FQI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eff440b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1443,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"28be35d7c137c9717d97813e6a80faa7","sha1":"d861d699ad396bcdd5c829187224e034132cd181","sha256":"34eb9821d996fd60617fa836ea9f137c265e46a0d339400e6abd102b1ae210c8","sha512":"00dcda57d2c55db456313ac102aaf61d76a230b415b9ecef84bc3bdab62d5314f18dea0fe9da3b2c52d113dd49549db7a77b0f75286561b879fb2af57e1fd59e","ssdeep":"","tlshash":"0921c7810c095babf9ad1c49d53d9df20b8b6378812d09711480454a82f37d9ac2a2f2","first_seen":"2026-02-18T19:00:46.744236Z","last_seen":"2026-06-28T13:19:29.432727Z","times_seen":6,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/SE.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/SE.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1438\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-59e\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6fV85v%2FQnwrnyGmfnhMXaVHoHQL%2BhVEPNdtUyAiPGl01HJ9aRfXE%2F7h76VbtX4jZXxnlqhsZhPVmgzJBYC%2BK%2FroYu86x%2BYe4CIur3eVTPU8gPTGL9ACjoGCqUV8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f0f530b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1438,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"6070fdbf0d1f97faede8bcadaa51e087","sha1":"8beb72cce3170910334a6ebbfa8f3bab0a480957","sha256":"7e488daffa8364bffd32dcac86b24070ff817b1a64eed74bd7f818b1065d03d0","sha512":"2a30f19e33db185bca69d35b519e1a14b27ab1e5a1d0c65a39c94e6886af669584f50b7bbb0723e512b23c52b22f750598145ae74e842df7446adc5caf53bc87","ssdeep":"","tlshash":"6321e915ec95ee1353653ff4925f21b18ac161c42fe15885cab10b8962dba073947947","first_seen":"2026-02-18T19:00:46.775787Z","last_seen":"2026-06-28T13:19:29.434402Z","times_seen":6,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/0xjhCAqxuTZKPNZqmtUvDw.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:17.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/0xjhCAqxuTZKPNZqmtUvDw.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 11884\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-2e6c\"\r\nexpires: Sat, 04 Apr 2026 10:23:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dpsqLYemLJSucJjOnMxkWIb4ISsB7JVWIpqk2V77mYTs7S%2BRIZWU5D388k%2B9WCvvsFY5aP%2FE3Mlrsf7VFJM%2B%2FlilwXKC7RhEmDa5KtZ2i7s67cJREb0%2BY%2B0LDZc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b638f7b0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11884,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced","md5":"81bc9afb535498d8b7e497b6e96cabf8","sha1":"0d9b63b41896962e3f30d595d9c1a9bc032e687f","sha256":"98ee87ce236d2f0aad692e18d7a81f41431dbdb1ff28ae15740d4b15d435eb0d","sha512":"3cbfc1ea69c94e2385b39179ec82e3c29f4a5cea9db8c07841eb95e73067d42c0b6aa2bec307545413320d931000a1bd81fc192930e77e104cb9bb0f5e0f9278","ssdeep":"192:283zMeiPYyEYKOFgGEG1ipF/rFZAjfKMwN6HXJH2RfSX2AOaEViSxChH:28DMeiYTkgGE5ijsNa0Ry94C9","tlshash":"3332bf487338db19676c8f53f8609e8d2a543f1359f2b94e0910e718154245e9d9c6eb","first_seen":"2026-02-18T19:00:46.729363Z","last_seen":"2026-06-28T13:19:29.419953Z","times_seen":6,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/THD0so2inl_S85zDEeRcPP.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:17.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/THD0so2inl_S85zDEeRcPP.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 142648\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-22d38\"\r\nexpires: Sat, 04 Apr 2026 10:23:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FUnvoRY65d4S6pakrxdAzo5yeiZ0FtLOHMzv%2BnrMDYOSpWdPkemYu0NqQO206jP29EPwfZhMSGxRtoILahf%2FtuwDjGz9kGVARRvzYujVx%2FKi8VgnMYM3KTimzCY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b639f810b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142648,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 417, 8-bit/color RGBA, non-interlaced","md5":"ab4e17f590465c159b8dd6c81b258aa2","sha1":"e6ce383ea47561cbe11a763499f6099a5dc89060","sha256":"5b8d257063e3a6487c1e681a904fc90301c76283366b269cbd75a07cf7252277","sha512":"935cf0920d937ebd7fc98e7c6bc76a03b679055c09b64caa68a2595dc2b860ea9026700f0a5d2f4bd066c92888e5bd23e767f88221a6d886af5dffc73c8baed1","ssdeep":"3072:ijqnU8bLxpnMkMYu33Giwbx9oJjDr5mRSWZfq0+t+XkilfRRlH4mjmKY90ffxli:Jn3bLxC3PwbxurlY/wWkO97mF90Hxs","tlshash":"9dd312ba419a611179fbcc1d9f1d42a4b6e0098447c4b4ac3962d7098eb0ce3cf99b7f","first_seen":"2026-02-18T19:00:46.776619Z","last_seen":"2026-06-28T13:19:29.424111Z","times_seen":6,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/yjdbHxcCu8xPQh0bCmBYZt.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:17.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/yjdbHxcCu8xPQh0bCmBYZt.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 145718\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-23936\"\r\nexpires: Sat, 04 Apr 2026 10:23:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jmpTLl152Mrv4CYLyUxMNWOH7vbc8Nas9yNBVJVshDvtUuBFZJrjxauRQsLTPAtkXziIzTRM6NFBfKm3luFZeeBaWe0ubpEpGhqsDDQS5NPj4DlqOiLFEQNYpew%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b639f830b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145718,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 417, 8-bit/color RGBA, non-interlaced","md5":"c82b788b91bbb91426119c3ad03ce69e","sha1":"e3c3704dd139c6fc49876be6bd113f50017af640","sha256":"ba27f69faa6f0430f0cd8a167054b4d90064bb9274e2abbe2192de076242d4c9","sha512":"67187e76351704237c585ba9a58f8ab90df6be6a0ee036501bf82bd2dc241e0f036feb913a0e1a7cfc6c0074de09e0c885bebe1475d05b7e0edf13e640cebff1","ssdeep":"3072:aSxth86r1GT4r8yLVNtYYMC8E3WPUQ/TuX47Ch1rybsuvau447:bthJ1GTKzVPYYMCx36uXNwVjp7","tlshash":"fee312f37c8c6ce38dc6c2fdaea3ebc54517e1a075eb22520403a557a3a92c544b5b54","first_seen":"2026-02-18T19:00:46.783888Z","last_seen":"2026-06-28T13:19:29.487672Z","times_seen":6,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/f.txt","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/f.txt HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: text/plain\r\ncontent-length: 56785\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\netag: \"27317-63d081b68e0f6-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2FCsjsJ9EF7tS0BQTpWEHywnDea3XJLVGZFBK%2BL4XuEdeeHZx90w7Lly1i7TwX7%2BC0vq2fP54a38tVz0jQ0o9jmG9e8qoBxqDNndilypuPNTz03chWlXQ3a3sMI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5edf340b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160535,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (4327)","md5":"09bd60417cf8a38fb3306450c9d91523","sha1":"5b3b5483060beee22c5110fee21d3f38f6c65796","sha256":"0dd14b10d9a5bc061145630221c5d9b6137afc58f99ddd74a580fc4fc4a9d1bc","sha512":"a40df3e6683a09550d35d3747cf6dfcf543fac8d30f0ac1e0f56564fcde05fdf5b64ca8f4e51c466cbdca649049b6561b33f34196122a73984d432b7e153685c","ssdeep":"3072:7/9vrOEbMl0Nvo4z+UvjTGDV1FsfQusuh7LfRW4BSMOL7l9ttPPOmrmoiRN3W5RR:7/9vrO1l0pog+Uv/IvFsfQuzrRW2SMsR","tlshash":"5df3e79971a2bcb7cb6399d5006f0107b42ea873f048c8b0e1d8ded97a249755277fac","first_seen":"2026-02-18T19:00:46.764499Z","last_seen":"2026-06-28T13:19:29.443314Z","times_seen":6,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/EU.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/EU.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1393\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-571\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MVh%2BYCatnGalk0NawmK%2FRU93E7Ai%2BBZ8kjRgXjjv1VCcmt6ek69IQ6dwEnNTiLCIVg9569A6seorePxbDWrnjmHLrToV05DFKMnW%2FPTz0ikWobMZZjiDGWm9KWE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eff410b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1393,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 30 x 20","md5":"b44b9f524da1ff47ff777519dabc6612","sha1":"58bbfea3efd6644422731c0d5878bc087d4f1d8c","sha256":"b07bd177a7704e0daf02096ba631fa63a0502faab75f32536d39207e09cbf970","sha512":"2ee84537a8c7446a25a5b86fb3d90e4ae84eb02e57808496e5c45fcf43a6fd95a805f6a3c458d8e8001c36a81fa0baf339cdfc664e37df255c3ddec72586db75","ssdeep":"","tlshash":"4721c85573d74648d910fdf3ee2b6681a9471bc3461db612d2e0a0206e6b1fc328b93e","first_seen":"2026-02-18T19:00:46.771136Z","last_seen":"2026-06-28T13:19:29.439657Z","times_seen":11,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/PL.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/PL.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1398\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-576\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ofMAJxOWPoxSkDrxY3nC%2F5QaVfI3QpVk73RG%2B77u%2F17OWN%2BFf2fHIADSwY9NWioWe88j4Gu82Ez1iJEUzwdFm%2Fbc4Z%2FMVIYusoqZEfuQYQhGc8wRSUKwv%2FLtImI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f1f560b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1398,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"0d9a93ab860bdad888fab04e383be62d","sha1":"b08d603aaccb289adfbe1a751cbe9a5454226ade","sha256":"6b16896efcd2c69cb3c09c6287cf267d4f86da51ad24abcf05a6eca9c3b87a92","sha512":"d106d78f0740585a4ca8843ad7fb3f7e953099a2afc09945bc73d187f04507dacf5d28ee1896c5e591c094b86d415c65622ba0e423f966436adb46f7b9c07c1b","ssdeep":"","tlshash":"4021ea64c0cad1f4e16bee349956163005d831791bc41b594d631fc2d0ba3fe2a6f6b5","first_seen":"2026-02-18T19:00:46.762896Z","last_seen":"2026-06-28T13:19:29.46142Z","times_seen":6,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/cf-fonts/s/open-sans/5.0.20/latin/700/normal.woff2","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /cf-fonts/s/open-sans/5.0.20/latin/700/normal.woff2 HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=10DXALvrcZTe5vD9XoIDSehZOlwwUwtropNILqglmR%2F9%2BTO%2BU5WM89YEfqqsyqAY9Nr8fm3JGCv%2F6VA3JSv4E58bdlWF1gcQlVB5p6S15QuXMFU8Ez1iTxf5Ovc%3D\"}]}\r\ncf-ray: 9e675b62df750b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"3615566722010db974f6b230a002e1e5","sha1":"d6983248802f655f8bb42d9fb9958e423b1276bd","sha256":"e94ba2887c089b2198ca67bf0a866fc0ca1df46c838fd44e3dae783405f9a124","sha512":"ec10f656702e55b49b9c1e21d44cdcbc530f458f311132aa359d80c6bb725f3259531729872f51e6cd252cf774e9bb8d815e55e72c4dfd9f702b24292daba0b0","ssdeep":"","tlshash":"b8d02b9e5043639b4812156039c115c2264c12f6a43a85e82dc6d48752a853ecd9aa8c","first_seen":"2026-04-03T10:23:42.235194Z","last_seen":"2026-04-03T10:23:42.235194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/syrtYYKR7sBRw3ZHy1YFX7.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/syrtYYKR7sBRw3ZHy1YFX7.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 941\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-3ad\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DnTFeaC8DqG1oh3Yw3mA1cJikm%2B%2ByrAcsQZnV9cXX5%2F5%2FcLfhYrd3cUg9vr%2F%2FJO2D7DtvbUJu2Ny6KmaqSXcpVovYv5g6Z9po9itfKuUnWfe%2B2i1P91J7lurCj4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eff490b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":941,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit gray+alpha, non-interlaced","md5":"bd0be0b1670fab28fc942c0a9f2e9dcf","sha1":"abde0483966f6f09b8ca841b6f331f69c2f058e5","sha256":"8802d5d99193451b7069f000cb5ce52efd8caa35ae5f95a75716e7fb9e3cc86f","sha512":"f4a30408fa3cb9b548e77bc7dc73993f9d0353886dacc30c296be6fdf81865b9847fedba62c28bb969817a0d1821708f2eb8375e498a82904004a005fa170d93","ssdeep":"","tlshash":"af1194ea7b491c697b629c6b9041793ce9bb6e1d207200d87a3bd4f14191828fa02106","first_seen":"2026-02-18T19:00:46.765305Z","last_seen":"2026-06-28T13:19:29.44038Z","times_seen":6,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/bRk2sh_tSTO6fq1GLhgcal.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/bRk2sh_tSTO6fq1GLhgcal.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 4011\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-fab\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bENeNYzA02NDBeFAD4PRR9RMHXyOfD2Hu7Ytixn1n3cXswyRRRazixHhyg8DwKr4brCTFIBY6PkrHvDfV1nPzvGX%2BFE24ruhfpHOERN6cyvMuM90vwEX4wv%2BUUs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eff4c0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4011,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"af2f5275b6241d3fea8cab1a4b5d7ba8","sha1":"ffa86de88fd0196d2d8e6ad93d0c498b47081346","sha256":"d5e84a441c04957c44b78d6f82e57bd2cef7b1b7adfe90c397bee1bdb09332f3","sha512":"3262bfb5bee756c913c58000fe7ac60964e4ac19d3b5356608bc354ac149f4ccf2957483101b16f9f04080871c5743dbb3e07e1fe3929a05bedb7229fbe2e914","ssdeep":"","tlshash":"79817dcc26c5e5189247e027e8b07c681a37a089097ab1867c5dceac05cbd4dccaf6f7","first_seen":"2026-02-18T19:00:46.756634Z","last_seen":"2026-06-28T13:19:29.487028Z","times_seen":6,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/mod_csgo_organizer.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/mod_csgo_organizer.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 135\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-87\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lWeKmQEbcaFTGTINatyQRk%2Fh9z1IAwVHf5O6FXJhwAl%2F4HH%2BOhT0atyI9Sc4CpgXZbZNjWGe9w1xwxpa9hJ7pSKqVjhgaR9ceZJ%2B2QJUllxOTVyFh8VLBTKx%2Blw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f2f650b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 10, 8-bit grayscale, non-interlaced","md5":"4bbea08a9cc4c795de1dda8c1448cba7","sha1":"1b618e101f533bacf654f606e6569e8451ce268d","sha256":"d1f26090baf3b2862d9912152c2f42ac49b743259086be9a9aa10cd03f353b3b","sha512":"e96dda26f558766295f1f1e8271e376df95d9c3b5fbc7f83f861fb8e80c13b515634808787341ec62123d50f63eef7caf0d4c51df33a64605a2a5e6069f74b0f","ssdeep":"","tlshash":"dcc02be0c0036c2cf44b81b71208023d613748040f100f0802cdc07cbda989485c03c4","first_seen":"2025-02-27T19:29:49.505714Z","last_seen":"2026-06-28T13:19:29.463596Z","times_seen":12,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/cf-fonts/s/open-sans/5.0.20/cyrillic/400/normal.woff2","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /cf-fonts/s/open-sans/5.0.20/cyrillic/400/normal.woff2 HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ULSc3rAop4lDaGuQgP5zvcr2Bdtc%2BfZhnhULmByRyOdQQXHf0poJxj%2B2fk%2FwYq8G0bk7PTCj0Mr1IR%2Fb%2F0i%2FpmPoxB5GviUelJ62E1a4%2FQzA%2FGYfxb7Aka%2BQVow%3D\"}]}\r\ncf-ray: 9e675b62ef780b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"3615566722010db974f6b230a002e1e5","sha1":"d6983248802f655f8bb42d9fb9958e423b1276bd","sha256":"e94ba2887c089b2198ca67bf0a866fc0ca1df46c838fd44e3dae783405f9a124","sha512":"ec10f656702e55b49b9c1e21d44cdcbc530f458f311132aa359d80c6bb725f3259531729872f51e6cd252cf774e9bb8d815e55e72c4dfd9f702b24292daba0b0","ssdeep":"","tlshash":"b8d02b9e5043639b4812156039c115c2264c12f6a43a85e82dc6d48752a853ecd9aa8c","first_seen":"2026-04-03T10:23:42.235194Z","last_seen":"2026-04-03T10:23:42.235194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/fRg43OBxeE9--b5OqX7JzC.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:17.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/fRg43OBxeE9--b5OqX7JzC.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 132664\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-20638\"\r\nexpires: Sat, 04 Apr 2026 10:23:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nr7RdH6WnB9bb9%2FWvaGEvG3E1nzVQc7i1IRFET%2BAhvkFO7tqbl%2FhW2FRRAaNtqpYfptUCQrIWUctm3wSSdDR6SkB0sDiDy7hLAWyvLJwhdDnzxlEmBra3LuHjO8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b639f800b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132664,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 417, 8-bit/color RGBA, non-interlaced","md5":"90d96dfda04c0a04db902b4b25bee866","sha1":"e7b64df08f7b9547e4badc041f9a9f2810f120a7","sha256":"97cc6ff65caae0b63a87bb2dbea737e52b90bfb203abb510f4534d040ca984c7","sha512":"7b9fa95a80d89c94c15346dcf5c5f84d669cb39b00cd399ae022d8ff6ab72d3e3227cfa49be732ae06f2df2a832223460bbd7f0606e40ecaf4d356c262074969","ssdeep":"3072:DUgoj4wo6Y1BPrxwDFEcv+JB8CzGTtSBtXPxcfQol9dtcCbXXP3:DUgoEThP4FElJBg5SBtXPLolnlXP","tlshash":"78d312d9839003321fb77f678b5a0e5db97838fdfc59811c6174a114aa6800d27eba1a","first_seen":"2026-02-18T19:00:46.782986Z","last_seen":"2026-06-28T13:19:29.417061Z","times_seen":6,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/9vOlYp2U_z0vXPb9aLK-4r(1).png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:17.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/9vOlYp2U_z0vXPb9aLK-4r(1).png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 654\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-28e\"\r\nexpires: Sat, 04 Apr 2026 10:23:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3E96T7rkQMuiwm0PEVacA3G3hRGP54aTl1EFfWtBFFEHu%2BO36zTIJyVNBDQUDlBEp1py8nPJLo1iInOlNKNAorzkXd251KrnVTlU6fFQAlTQO7kISk5bN83DNsE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b639f860b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":654,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"03d7e6db42e1551dfd1b2c857caad7f9","sha1":"f87644d4f7b757b2e6eadc1d09a651b99828c5a0","sha256":"6af486f854fd9d1718209776eeb8e000f2e65d57fbaf3654945ebc8a84a4ca55","sha512":"e09a45382d65cd297197527bff49726223f6ba0ff0a6770ea4b2fc414cd92dafa7204181d80075f97ccd57cb07392338c9d0f831f30fd4a736d360f477585061","ssdeep":"","tlshash":"2bf023cd671561a7511f4221a59ff3b39da1b10e84273c2d0d16236a4e916278c1239e","first_seen":"2026-02-18T19:00:46.72246Z","last_seen":"2026-06-28T13:19:29.438864Z","times_seen":6,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/fonts/fontawesome-webfont.woff?v=4.7.0","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:17.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /fonts/fontawesome-webfont.woff?v=4.7.0 HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/index_files/font-awesome.min.css\r\nCookie: uv=mnir9p4x-q30kgrqa\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XcwTUSTybxzqPQ5IYO4yXLScCqq3rUWYyG%2BOOhSEHxuaWQeTqsfX74VhPciic%2FyqrJORNWD7Mxgwn9u2Xz9wp0yRsajosEeIXwSfq%2FmICoO2Kun5uUq6HXKq7YU%3D\"}]}\r\ncf-ray: 9e675b647f8a0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"3615566722010db974f6b230a002e1e5","sha1":"d6983248802f655f8bb42d9fb9958e423b1276bd","sha256":"e94ba2887c089b2198ca67bf0a866fc0ca1df46c838fd44e3dae783405f9a124","sha512":"ec10f656702e55b49b9c1e21d44cdcbc530f458f311132aa359d80c6bb725f3259531729872f51e6cd252cf774e9bb8d815e55e72c4dfd9f702b24292daba0b0","ssdeep":"","tlshash":"b8d02b9e5043639b4812156039c115c2264c12f6a43a85e82dc6d48752a853ecd9aa8c","first_seen":"2026-04-03T10:23:42.235194Z","last_seen":"2026-04-03T10:23:42.235194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/fonts/fontawesome-webfont.ttf?v=4.7.0","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:17.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /fonts/fontawesome-webfont.ttf?v=4.7.0 HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/index_files/font-awesome.min.css\r\nCookie: uv=mnir9p4x-q30kgrqa\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oybeSVCSwQvruOwymcifIblebwT6G%2F9yqdnBElP4eMY3cdrEx2z%2FG7IyDBFkD9jJq06POQ%2B%2FXbMWYce20PKZt6DJLYqU%2FILgfBVH%2F0Y8ue96d67f5lV2kaEwXp4%3D\"}]}\r\ncf-ray: 9e675b65ef8e0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"3615566722010db974f6b230a002e1e5","sha1":"d6983248802f655f8bb42d9fb9958e423b1276bd","sha256":"e94ba2887c089b2198ca67bf0a866fc0ca1df46c838fd44e3dae783405f9a124","sha512":"ec10f656702e55b49b9c1e21d44cdcbc530f458f311132aa359d80c6bb725f3259531729872f51e6cd252cf774e9bb8d815e55e72c4dfd9f702b24292daba0b0","ssdeep":"","tlshash":"b8d02b9e5043639b4812156039c115c2264c12f6a43a85e82dc6d48752a853ecd9aa8c","first_seen":"2026-04-03T10:23:42.235194Z","last_seen":"2026-04-03T10:23:42.235194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/PT.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/PT.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1412\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-584\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ojKFjh2vGfWWd%2BiKuOkUZjnbFXIgdQLobAQgDJIKMX3BaD1pZXJXWpAp63xESxuYDeZf5TSB5FS5FL5B20o6kRvIbQkUxnMjEk7rTIReSRgubcxwEuaSIBLGalo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eef3e0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"e82492bee0e1fd3b17a3e27003f5a7af","sha1":"4b6b23f9e996ec4bf4102bac04779524819ed7c2","sha256":"c2e93753c75207a9862182194a12d71526d700d419e9599b6fc8aef50c6537b6","sha512":"8972b568e65dd94e57a2ecc07752e49b50375ab397efa0fe6f4f8069051d7c487f4c74d111928b29bf7291e11df6fb12766b79613cd26b488719b5abe102b146","ssdeep":"","tlshash":"ee21e95da9c35f3ec52784ffc51f6093ab862b5047795446221d3560f5a1c32bb36b04","first_seen":"2026-02-18T19:00:46.737376Z","last_seen":"2026-06-28T13:19:29.435249Z","times_seen":6,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/custom.css","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/custom.css HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"68a9bec9-2a9\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FGA49YptPPCCLTsZw8Q7BtiIbDnXT%2FFPurlTJtQRBjQnsa8MT0dOQdit%2FMOF49rd0P0Wa5Q%2FSs4WsyoazjE4v%2BXf5GrMC%2BRIG%2BVDM7k%2Fmh08CxNoJmYl%2ByqJ5ro%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5edf360b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":681,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ffd138a63afd8cd9ced3d0331a6c7e31","sha1":"74476dd6ac20828317242ba52d5a8310a6070898","sha256":"a3d5a89d39118adc3166d6b9c8d7e9572ff68212fa0a1f7d9aa47f2982489751","sha512":"792030884ab9404356d1fc36d01b4054a2f76b60d853a1a3856dced170ead363d276773dc9ca25c280cba7f49e693308486c3c91d097dabdc39195ddb4af2b8a","ssdeep":"","tlshash":"d501dd4ace161000a27fd59a2ff10718d6aa8093df07052c3ad41245cffa128c2a1fec","first_seen":"2026-02-18T19:00:46.741341Z","last_seen":"2026-06-28T13:19:29.478885Z","times_seen":6,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/ES.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/ES.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1417\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-589\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ouw8JOIg83dFyj%2FPnOy93wPwJiA2F3J1PPqMcgabRKEL3YW23fhCU1ooZlT6A3HGM4WEO%2FN2jbFk%2FDAT2fZROabTVq4CmjBZMD9YzFmyKGdUXm5K%2FtGj506fDcg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f1f590b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1417,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"e7bfec8cca9bad2a557e571faa4a05be","sha1":"d8daa8a17bde7c9025cc85c91897e74b8eb8ec26","sha256":"71f2fff7e9c74e56c3afb98f70f5b7cd792a7e10736c0f2725d94e4e5eec939c","sha512":"99332308aed6f3eb88d19c0ae98d4e1c542bf0cc8b6934b69c4a3197d1b67a8ede64fd95996c9cf1e2bd71722204d6510358ef1a5d8c571e338da01e405214b1","ssdeep":"","tlshash":"28210ec493289d19f54c55f17bc4d77414654b8d3b00f441bfa135a1647e573850c3de","first_seen":"2026-02-18T19:00:46.762062Z","last_seen":"2026-06-28T13:19:29.441192Z","times_seen":6,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/saved_resource.html","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/saved_resource.html HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lTlny4GwPEGFoMqr0EtM%2FizbTftQxg9t38xiYI3CpgGX%2BXdd2aZVPDEBX1YWsPErT5jqeMNTRKvOUClvPmwg14bRniqL7khlaOv2ECx4FzJDvVn9k3AGFjG4VoY%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b610f6c0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3c2ccda97c47ede0b1c91b11efd575ea","sha1":"0a348c4b61c961aba7618f909beb87f740a81983","sha256":"97f9b10039b05e1af4a3c9b778fc72ba44cf68a376e4ec1d55f2558f16cf3e50","sha512":"31afbe911abfda33a2948d14578ba290b604920983118ca5a6268a9906120ef365416e5e776ea685d648eef7a2ee2245f424829fdd4c7150d944f4bf673aee28","ssdeep":"","tlshash":"50c08cb52412200ba220aaa2dadde56408408010a04a8c82a04039ac65cc35ce8a3690","first_seen":"2023-03-10T00:19:37Z","last_seen":"2026-07-23T03:10:40.51516Z","times_seen":1349,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/saved_resource(1).html","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/saved_resource(1).html HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FbnsOXQv7x9SjNLbk0dJgw1rs3ltkdaNHnaV53ZnTxKctXbHCQu1DXB8Brx9UVh9oEHHq%2BBVwC0tZLKxtqeoaPuQspbxjC9CcZvn5xMGTP5TRWnndXSAGY6q%2Fxo%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b610f6d0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3c2ccda97c47ede0b1c91b11efd575ea","sha1":"0a348c4b61c961aba7618f909beb87f740a81983","sha256":"97f9b10039b05e1af4a3c9b778fc72ba44cf68a376e4ec1d55f2558f16cf3e50","sha512":"31afbe911abfda33a2948d14578ba290b604920983118ca5a6268a9906120ef365416e5e776ea685d648eef7a2ee2245f424829fdd4c7150d944f4bf673aee28","ssdeep":"","tlshash":"50c08cb52412200ba220aaa2dadde56408408010a04a8c82a04039ac65cc35ce8a3690","first_seen":"2023-03-10T00:19:37Z","last_seen":"2026-07-23T03:10:40.51516Z","times_seen":1349,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/TopLogoDark2x.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/TopLogoDark2x.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/index_files/af8c24928cdb9b063317aabe2109d74a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 2429\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-97d\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HDrBoFzK4SDUwiHKy46jI2fFRpsboKcKPnsAjORNJEGOMhNwGvVMSrYheQk%2FSeOnvpavZx5kMM%2Fsem6JncjQfVPZXsg7rYVWr3BY9R5f0CUeLBieIkoOVdCUpV0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b62bf720b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2429,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 346 x 120, 8-bit colormap, non-interlaced","md5":"9cc3605db662ad1152bf025ab3e6eb63","sha1":"65e9b6fa4a12f07d4282c3710c50e4c7e4f56b63","sha256":"0c65a0dcbdae1f6d78426d288feb7a9d8176c594c2a918be9587095b3b10bb3e","sha512":"bda10430ac9f74ed63e6715ca54af5daba8a3df24cad442e5bdf3cde6eafc18fdcc38751f187d870395437cf5aa5b6a7b645849e1af9e38e2142860660bbde3f","ssdeep":"","tlshash":"fa412ac9909c58be34e75d9461075098ae349e70b8a2a60cc3033f4cdc37989a1b6723","first_seen":"2026-02-18T19:00:46.780435Z","last_seen":"2026-06-28T13:19:29.467028Z","times_seen":6,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/streamers-bg.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/streamers-bg.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/index_files/af8c24928cdb9b063317aabe2109d74a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 61300\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-ef74\"\r\nexpires: Sat, 04 Apr 2026 10:23:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BkHe%2F0HWm8%2BAs0Be6TAIGfa8l63G%2Btiw1HWy912np4hISnAxt5ANm%2Fc5nHwlPGEOEV6P6cMzeZtKZM7rbbCPnMfhq1FRN0QGlwKh0NGzqKT8bw5jK71l4GWHmFE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b62cf740b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61300,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 357, 8-bit colormap, non-interlaced","md5":"9e30ec175c971a21c11341951f59fbfb","sha1":"1392c3dca4c75d5e591dfc1e12de4d5ef10f2e40","sha256":"8e0a5a5f919625854f50ada934b15e5710bed829be6a6e4f81c97c00a7c4d12f","sha512":"50568dda8fe4856a93a5c1087cfedfa06b5bf617938389858b6351bda599f39e29da0b873d963b9a164d4a322b5d82e5a36708574d286506b61078fe3ebdb1e2","ssdeep":"1536:9psNvYmqolF5Aeij79eDZiUY6AMT/Z5BSOAf:Ps1/jl6gZizMZSf","tlshash":"205302962cbc71017cd3f7714b740522657602a60fcfcb642ad38cee18ac99af25c939","first_seen":"2025-02-27T19:29:49.526066Z","last_seen":"2026-06-28T13:19:29.411315Z","times_seen":12,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":232,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/cf-fonts/s/open-sans/5.0.20/latin/400/normal.woff2","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /cf-fonts/s/open-sans/5.0.20/latin/400/normal.woff2 HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BFpnuTu68x3T7WpFo8XDIxsnvVnXvtbMk5IHX6Wd0VVBEn8slbazZGbRROOxUxoWTGpGkQt07pmuMbDIjv2EsppEzRhszDPl%2BJ1b3%2FAUv0FQGsP5l7jhhaEA67w%3D\"}]}\r\ncf-ray: 9e675b62df760b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"3615566722010db974f6b230a002e1e5","sha1":"d6983248802f655f8bb42d9fb9958e423b1276bd","sha256":"e94ba2887c089b2198ca67bf0a866fc0ca1df46c838fd44e3dae783405f9a124","sha512":"ec10f656702e55b49b9c1e21d44cdcbc530f458f311132aa359d80c6bb725f3259531729872f51e6cd252cf774e9bb8d815e55e72c4dfd9f702b24292daba0b0","ssdeep":"","tlshash":"b8d02b9e5043639b4812156039c115c2264c12f6a43a85e82dc6d48752a853ecd9aa8c","first_seen":"2026-04-03T10:23:42.235194Z","last_seen":"2026-04-03T10:23:42.235194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-length: 19948\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\netag: \"4dec-63d081b683515\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dt80AJQv%2FhXTHreXVOtIe%2B3qA0pW0G0skl8%2BmWZh49%2F6JYSmxxaLDDBrAEeFwYveK8LBLBfK43JwZ4hPmQToY7Q4qdG%2FWaY8LxVmQgnvCHgJYB3boPVcY4bfKLA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5edf330b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-07-24T14:35:42.207329Z","times_seen":337593,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/RS.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/RS.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1399\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-577\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AYozlEIPA7N1qmUIvYT9RHTNXrwN2oLXymJ47aBjWJXMoT5%2FgBxR6aE9k5KS9NMH0XPB3VQ9F8axcTecsOmF4CDSsvryQElC5NJ8FWlhUFSdZS5sXoQKwnyjguA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f1f5e0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1399,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"c53019ba32c80856036cfb7375fe327a","sha1":"938628c8c0277846890357d5e74c98ce02a6807b","sha256":"c240f9ada88d861d2bcebacb4eecd0dc5b1d8dec3f32180412226425a41224c0","sha512":"043db687547ea4593946f689a6a506674e40b72f3bd22a044134b04862935fdab7fc773af72a13f44bf8894d36bd84a770954f79574c7dba2df2f118c574ffb4","ssdeep":"","tlshash":"ef210bc39e209c0061cf35f29a9bd5ff17b81128a29072574874d1d4bdd7c8ca803d56","first_seen":"2026-02-18T19:00:46.784647Z","last_seen":"2026-06-28T13:19:29.455186Z","times_seen":6,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/mod_csgo_caster.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/mod_csgo_caster.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 198\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-c6\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jnqPp56IM0ALvNdY%2FMvx1pS8cNuSTdCF3tT4Xpz1sgmNc2EbSWNWSpQPqPElcLve%2BvNKeywh4m2g1hcNyTABG8iTjBIz6RYo2hwFd%2FqfJuYZu0C1A3XqG4bS4dY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f2f630b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 10 x 10, 8-bit grayscale, non-interlaced","md5":"6fd6ccfcd73479f575fd6dd54426efdb","sha1":"6af3f3d92e2b13aa2e726f5c0fcd499d0c7d5994","sha256":"154dc3f2a0cec37595cdeadd37d857fde87961ecc995a84ed4614f11da8ecf83","sha512":"0dcd36a6d61e3180568ff13f1b0e62b0a2fe07ec7f95ada7dd5b59699e78763a3cc1405ebcc9b26a15474ece5395d16c03e2436ef9ade1995427cd13dbb594c6","ssdeep":"","tlshash":"a3d022ec86082e0fc9609b7b45020958b9bf01681a27a948804ef8b91cb76092a4034a","first_seen":"2026-02-18T19:00:46.728563Z","last_seen":"2026-06-28T13:19:29.438128Z","times_seen":11,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/teamplaceholder","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:17.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/teamplaceholder HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-length: 911\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\netag: \"38f-63d081b685455\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5OeqqN1JsORC%2BSGXnvsemS9X1bMEReqBZBjOOCULQyDAmY8xImFxmTYb4%2FxY0HUtdNHbK%2FbxjtLqhYVxLtdyYJ9zl3Vl%2BSWEe2kHco0trefoosGUHy%2Ff4MbQKdI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b639f820b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":911,"size_decoded":0,"mime_type":"text/xml","magic":"SVG Scalable Vector Graphics image","md5":"98672f271681a57a4a4c1725b4a7932e","sha1":"b94f3c38e4aea15cf5c980eaa640dd717599a509","sha256":"3363850f91d3f779a2838e2b6136cf5add475c1bfa36d5fe1e01ecb2a0cd2f86","sha512":"62f369ddeab33d57249d197f96fadbbb443c29275150f3858c3f399ca28efc90f5e8cea52609f7edf63ef336403b7d8cbd0c940c2b140817d3ef49d70423cee7","ssdeep":"","tlshash":"541123e903d54654998fc7b1a93b9d41bb1da4b7008590f0f2fc4f11ef830512a81694","first_seen":"2025-10-20T10:00:42.048306Z","last_seen":"2026-06-28T13:19:29.420783Z","times_seen":14,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.hltv.org/img/static/favicon/apple-touch-icon.png","fqdn":"www.hltv.org","domain":"hltv.org","tld":"org"},"ip":{"addr":"172.64.146.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:17.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltv.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Mar 2026 05:51:59 GMT","end":"Sat, 06 Jun 2026 06:51:54 GMT"},"fingerprint":{"sha1":"40:2E:79:18:C7:45:72:2E:F2:EA:3A:A0:7F:69:CD:4E:C3:96:2A:AE","sha256":"FC:77:55:04:BA:AE:2B:17:F9:FE:43:5E:BD:87:D4:33:2C:76:F9:21:EE:34:D4:29:CD:46:24:F1:DB:B4:A1:D8"}}},"request":{"raw":"GET /img/static/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: www.hltv.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1312\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nx-proxy-cache: MISS\r\ncf-polished: ok, orig_size=2444\r\nset-cookie: __cf_bm=8KaIymXYY6i62zKy3oFf.k8.Ng.s2iOmStIwBQbBh2w-1775211797.5755656-1.0.1.1-oVn.98uuStGwAYr8Iv8Ahqe3EIFthnPTX2SeXztJdnWxnNOTMENyYllGCReBz2zMZRoukazA0_M2zo3yqt6EdCYwPthNKwib.CwPE48PIm6cwU2ItJhI_i8F8zmth0j5; HttpOnly; Secure; Path=/; Domain=hltv.org; Expires=Fri, 03 Apr 2026 10:53:17 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4,i=?0\r\nvary: accept, accept-encoding\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Apr 2026 08:33:19 GMT\r\nage: 6597\r\nexpires: Fri, 03 Apr 2026 18:23:17 GMT\r\ncache-control: public, max-age=28800\r\ncf-cache-status: HIT\r\ncf-ray: 9e675b66dd61dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1312,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cc2f5fc493444552fa2e4a519acd3f11","sha1":"3fc761f566db733f0e62b5f1b26bf09b38a83ac9","sha256":"725c24cba2d86b204bf3112a1b7639bae647f862571d3c4efe9556c9ad50c335","sha512":"94ca8433e22ddf3e99c92009deec7ecea210954e982f6aa75087a967397cd70873be76b44dafde511e7a7d4bf58707d49d0fcbe80ac708d0f85a3d835bf983ba","ssdeep":"","tlshash":"39211ab1c5ccb3f12c99b9382d387ab584333aa1ffd0444b17981c50e5a841f514b32c","first_seen":"2025-02-27T19:29:49.538816Z","last_seen":"2026-06-28T13:19:29.485828Z","times_seen":16,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/OyrfDgfALykW3zHDRh5Pnc.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:17.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/OyrfDgfALykW3zHDRh5Pnc.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 1361\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-551\"\r\nexpires: Sat, 04 Apr 2026 10:23:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JlVkMAlDm85bcQyIKjNNuTVUgZcX8YwtQha%2Fx9CHNd57vM8ET9wF4%2BF5iKEOwlP3VxyisZP58KLDj2P4bJFdux1GmqJEG%2B2nkM7b8Y%2Bk9Ad1rOk875jOFwqSeRs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b639f870b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1361,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"76caf9874b5bb755bb1654341b84099a","sha1":"fd9508051f829ee9317e287ffe7b7d111f1a3c83","sha256":"f1d7bdbad830dd5c24c988c38af5a4a7f5f17d34661220bb8bdf2fe029b9633c","sha512":"cdff8601dbf39155ec22ed571432825fbaa8871c6eadde8ac2cdc123cd3358e21ae773b355ba3e4adf2c8f69f8d1380231c2d6948b27e84e1c8834d8730ab84c","ssdeep":"","tlshash":"55210b96d1c88c711638e297e252d454f13250281b13b82924bb9612edbb31a38a354f","first_seen":"2026-02-18T19:00:46.742988Z","last_seen":"2026-06-28T13:19:29.460382Z","times_seen":6,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/DK.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/DK.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1428\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-594\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tgxU9Qsm%2FOOvLIRbNhvEYoPiMDLOwGuZt9F24TsXCI262PMEoFjN7mPmrx6cZEBcVD06JZAlaaEqSeTyB%2FPlAmgv79OOwXWbq2BsfANliFOVKWmXHoiRbti6%2B2Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eff3f0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1428,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"200e57936edf927cd3e398219bef6a22","sha1":"4372001f48544aa7aad253ce56da657421866458","sha256":"d514a1e8ac0461a4c79287e5885e1e7e2454d967d8ef065bec4aab2e56c76fc6","sha512":"943ba0b2550d0f056cc29bf0fe966b38a3e35b187d947d66a50c7dbfebcda2160c5c621173b4bf1cbb62e6aa8a97eb86260d0a61b4bd5417b974b3183a60544f","ssdeep":"","tlshash":"30211bc0d678353acf2e62928c73d924311091823784b188c62773d844f98c19022f77","first_seen":"2026-02-18T19:00:46.770345Z","last_seen":"2026-06-28T13:19:29.406108Z","times_seen":6,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/yeXBldn9w8LZCgdElAenPs.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/yeXBldn9w8LZCgdElAenPs.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1635\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-663\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w%2BYoFjytEw8uNdP2WV9BAsbWgk0L2DLx8iUV%2BX8fhZHTg3F31Gq4v8s9zEd%2F8kmV5%2Fq0OOPOYdf4fVE%2FFiLlYniJPjz1g%2F1dXwt0i0gXVtysP3QPVOWPSEfxEh8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eff470b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1635,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"bc082393aef4f72c797b342779315e04","sha1":"f13c510600fc2efc6159458f0cf7763b4ec57aea","sha256":"742e2642595a7abd925287f40e3e82bc8b7c9116c0c051355db5840354bc95e0","sha512":"83c2af162d1b0a3b2943355e5e4c2650852836ec7bd4adfbccbc91cc7fb0c7c841dc65c99bef28bd136a15744b1b74e96fc7582453aa205c52d66449f8905328","ssdeep":"","tlshash":"ba31f80b8d2f9159db6e19798b60f113ce8780050d12afc2cbd6549e48e17e091a501e","first_seen":"2026-02-18T19:00:46.746602Z","last_seen":"2026-06-28T13:19:29.451596Z","times_seen":6,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/MN.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/MN.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2453\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-995\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i3A4p4MR4UaNfvMMQ%2F%2F1ibhZR7fJ7UteUY5clDP3wEiJvtbhJ6IqcYcFjr76ddu%2F5dhjkH04cSa74ZOvZpXJSbSYUbgih2O1faKIW3X2wYNX16IjC1ZEDZuFtTs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f1f570b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2453,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 30 x 20","md5":"69073c6dd83754ad267fdb242821516e","sha1":"d0726bdf2f56bb7bfb324fd94539e3c7680f8fc2","sha256":"09c5bf2133db3b09409c100dea5269df52c40fba005a5b9f0dfdef2c5d457e97","sha512":"71eb78b58630df77724e4a8a8806e52adf72fa0322cad9be9f7d3c76f02620236519ad6269cd3d41ba3509bd7f6e4308fc1d194e43c070fa9164064c398c3964","ssdeep":"","tlshash":"8a513b0b9d61b6004198f8eb38e7bfa72f420d01e6c1f1c5e0accc45ca196b09b27b67","first_seen":"2026-02-18T19:00:46.745102Z","last_seen":"2026-06-28T13:19:29.429821Z","times_seen":6,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/CN.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/CN.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1374\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-55e\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JKs5uglhUNuxWIcrM%2BjyN6QxmbMI5vly4GYhRBDMsBcbEsfoS%2F%2FLPWlp50zvjCOXKzYh6R7I%2B6%2FjEaInOy7%2FMW15wG1jtPbpY1t8r%2B9Em6AO9pSfXV2PaJi1ouI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f1f5b0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1374,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"e48ffc02200d0b026e41c3082ecc0c9d","sha1":"63536bbd6001f1d2fa7c2ad15fcd7cf9a70ac4c5","sha256":"9956afcdf7aef4933ea8fdf0839c3cb757c7600bbc305c5a104444f1d011a9d5","sha512":"fdd7e1d1b38f679426c6d38c4c8f36217e701f98c19d9b6c57ddac865b7b398f8402696afd32355f3efaa4b4b5f648bc1f97dba63998ab9618a5a13e51d8cc4f","ssdeep":"","tlshash":"4621a306a64c518cd9773e32baa1a4354f1397a12c20220160acb38353065f47cc3e79","first_seen":"2026-02-18T19:00:46.773056Z","last_seen":"2026-06-28T13:19:29.454046Z","times_seen":6,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/AU.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/AU.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1424\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-590\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P2qXIeqiM1nMMUmz0rjaoxDqyuk7zAb9jMB%2B2mWaSZkz2SGIp7XJJ8l%2FcOoJLaiFOagxvFRVWnGcQQ6VCSGi9WscCrESUoq1DQdH6P4%2FjVc7T0vLytjaLeUoaW0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f1f5c0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1424,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"127e3a75ca676e3d7ddf31609792a342","sha1":"c1b3c01d23e0ecc17d1822fe11ae774bcf8f493d","sha256":"ca5f0bd6a89230d38761303e04143cab90a58b5da893fe9318ffa5660c0c0cd7","sha512":"c67b576d4cb9180defde2da7fddecc6ee22ae07d0e9c99991fc3dfb6a9b5039135d91f909b3bf1c1046012dab4e94d35d6c9dc1def478cdaff49615fc6b8faeb","ssdeep":"","tlshash":"da2108c095d56dafc2a224f19ef034ef43c638da19a22f30900561027e6a774a33efa4","first_seen":"2026-02-18T19:00:46.753811Z","last_seen":"2026-06-28T13:19:29.416383Z","times_seen":6,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/NO.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/NO.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1435\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-59b\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DsVW%2BAjo%2Bn40r18%2BvOP0jqV7wLpYKoilMx9ibpTj7a2wyzu5snO3%2BNkCQns6lh1QlVBCYI29723GUchskwjLvl7vFiahELVDIWbcCHuCcQTcaWkDO5SOsR88C0U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f2f5f0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1435,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"894efe8337ec1838c340886d249c146a","sha1":"783326fe2e5a5db1a31a7341f8e4f343faadb7a0","sha256":"1406c432d5b394f49fa4561e81d6f2e12a3ce0b069e6d135d744d717e981c4e6","sha512":"6706adfa1a3bea0967c47b030e7aad5e514b2ad331818926083b4157b9dd8f458c4b549407b18fee6611520d7e60f1d0db1331bd4df03266220e14b88ead01d2","ssdeep":"","tlshash":"5b21e9258988596cc719b04737c773b25b9c059b8c92ac50c4d2c478dbb6e124ee32f8","first_seen":"2026-02-18T19:00:46.73566Z","last_seen":"2026-06-28T13:19:29.482199Z","times_seen":6,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/BG.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/BG.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1443\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-5a3\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BObacbvzcZZ5cMJFJYnvFpPLVvcpWA3RGPORi8d0Tw383dtB6w6E5KZ4A0vHxYtV5zOhZqfIresQTE0XVvhiSeiSoQ4lhBjlioQY9RSZJ9B9asOX6Kle1eOoSHA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f2f610b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1443,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"a981f6e2e0f5267d087a3252644363db","sha1":"87c0160fc4b1f82a0e9293643f56b46ffc875af2","sha256":"440ecf892384372077b4c811b13937e4de1ebd80519db462bfab124105aaed67","sha512":"b86f346b519662cc77eb55f7626a8a2eca152f541915fdec2e925ddf6d5cac2a274ca0061751678ff2173e4aa1ce6a65a0a9ccb5e6ea49ef71ade3cf147fb85f","ssdeep":"","tlshash":"262196bde6429175c65bc9709404e168c7a64bcb558a2bb490aeaf4042a48e533154ff","first_seen":"2026-02-18T19:00:46.734078Z","last_seen":"2026-06-28T13:19:29.418523Z","times_seen":6,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/UBADgCrxI5mgxX1BZDZM2H(1).png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/UBADgCrxI5mgxX1BZDZM2H(1).png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1217\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-4c1\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pbC5zFIGHT2IMZk9JSzhdPgO2Rsp4e3J92bziealwDlN2%2FI88DJzj2SmtA9fzI%2FpJ0rOykJhnWK7askc0lxvGKzhBvXApsfkEntofgNiiNpY8duUMSwg86k%2B5mY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f0f500b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1217,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"a68027d81880f9637f1fc191bdc3fa79","sha1":"af4911910e5da6799e269a4b5c35541db2a3bacc","sha256":"7ed28b629a8d1b239a0f6042ffa6270fb6d7748cbfed8f1e736c85568a206c7c","sha512":"845bd0e4385a7e242ea82802479669ca46f0ee611092e853c95ed17c261f7b34ad624fbf8c141b03d1cb86f9cb588808c3ef87c08ab001d4d432be632d4bed58","ssdeep":"","tlshash":"ad21b7b6d1be3084adb4968c7013296f9d7431bb10251cfcd5a50122b574d96a459156","first_seen":"2026-02-18T19:00:46.767891Z","last_seen":"2026-06-28T13:19:29.415698Z","times_seen":6,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/2mt5dKGFBdIcxv37gayq1X.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/2mt5dKGFBdIcxv37gayq1X.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1353\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-549\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3LhHOPWHBYvSpXmQLAg8CFuht8xDKDGirjCX28WQIdW%2BzUmb2sV6X7giUsN6y9JgS0MSwY5mwq3mJezWEInyuzmcPpdhE%2FR%2BkmXKYadINhxaqyaBAKf1%2FAuoU3g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f0f510b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1353,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"08f7929ce35fb2917ddeb1c0f9a63a3e","sha1":"88b6ec155f17fd5f98a103168e83c57793fd6f6f","sha256":"26bd77186c09b0c87fac086845a6d7fd422a77b8c15c732f71b881351756147a","sha512":"bcb553916ecbbce343aa548f5cb69bb01d171d63e50dbc6888eed61530dd2236e3b6358b667f5c1253cd73ed7b1d447ec964e8beca98e16eec48a33b57b5db14","ssdeep":"","tlshash":"ee212bf899112f4d763d1f7322031526c42076d021b2e1a4e8ca5e6e484fa984983783","first_seen":"2026-02-18T19:00:46.727691Z","last_seen":"2026-06-28T13:19:29.488851Z","times_seen":6,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/5zNnJXstHRJXkFMbhjH-Ba.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:17.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/5zNnJXstHRJXkFMbhjH-Ba.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 10259\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-2813\"\r\nexpires: Sat, 04 Apr 2026 10:23:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zS5Lry%2FEPPqkoBFmI%2FwcqqLEfEFa0ta5Qx5Igpe%2Fi%2Bzn21Xvm5h8vLG1U4cHXSJs%2BAAnhcSZrUwLl8PW0Vi2UmiRIQ2aN5GDgVHi2RbIpGCPSns9nV4lQfi5HQE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b638f7d0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10259,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced","md5":"d6fabd53e2c39c74e10790a33621b19f","sha1":"7ce405361977d7cedc67544fd0ef031802301010","sha256":"293fc42fdb22ea060bff008e8072ba905d683dd6c2ba87614fcbadbe15821ab5","sha512":"f970a138913a78aa185ccd1c582c205beed6943be0c6db51caa0cfffb5df0e9d184794b86be47f892ccc605a69e78b85a8f40fd4a087d49040455589ee8bbcc5","ssdeep":"192:2ub1F69C/g6Lm5DpFpRAl60GEc2BXmOCVV4ni/yMy83aXhFlGkB4EyIR:2uPkC/gDnUgEc2BBiVuMTaXhWP5IR","tlshash":"7822cfb312c7498b8da074f0212c90f9affe0928749a339f4cc49bf59ede2066589356","first_seen":"2026-02-18T19:00:46.752138Z","last_seen":"2026-06-28T13:19:29.475765Z","times_seen":6,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/WORLD.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/WORLD.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1345\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-541\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D4SCpTPIau0x69kkKTCtvGakJd3P0X7tXa2gpi6USSGTcFt7sIbLE92%2BUriQ%2FGBOFEwEXC6IiwEphlok2to6h6nbBG4JPZ%2FZ%2BrkoOzQ1a96ESoekJqiPoTfotDk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eef3d0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1345,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"3bfd1c9487264ed5dae3fb4e30bb2a8d","sha1":"e98232f4e84523ce9c965b86bbd1d57471b43168","sha256":"58c282b69c515fd9f539a4747e7c2f78f5ba221531439e64249b863b7bff09f5","sha512":"92f348863cb15d9c1c706197c88a9d243acd4f5a78c33cd18f1bbb7dbbceeaddb8c13cc4139da4d179dca55c5652c678e14b8623f11623bc37c132c798bcf3bd","ssdeep":"","tlshash":"4621b5c2dbc88169d56a9a30002a0538b50119dcdb0cc55cd0e00c80b93bed9abd7ab6","first_seen":"2026-02-18T19:00:46.739786Z","last_seen":"2026-06-28T13:19:29.427598Z","times_seen":6,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/ogcHrcCdzRvxbYvAz04KAN.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/ogcHrcCdzRvxbYvAz04KAN.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1035\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-40b\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BwhV%2Fu3s%2BPAr5RJrI8PnyD6f1bv28XjrrMGWJyKNinb50ZAZX%2BumgFJWrEhILwIdJdUUJzWLRJwBkWzsxSDbuvlde2bO8wZLL0ciofW4KC2DWcaf8%2FSjgX1ZXc4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eff460b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1035,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit gray+alpha, non-interlaced","md5":"fbdb04f8cc3fef1b7a9f82daf5bbdd60","sha1":"a4a333f0a41d4d2f2767f1842971aa494a685453","sha256":"7ffe645da705c3b5b9e95fa98c6b0c60920d8b99dc2875e8b171378f08a8e865","sha512":"edb65327d948c9dfee9d0fd2c43667b866306a526c679a1d3cfa1edf6c2f5876f0d52dbaf59adbe1697fa3af4e8c5ac0dc2f523cd7c3d34261ebf8948713651b","ssdeep":"","tlshash":"6311b9b75a0f15a0d32b141be4a7c8641a66324fd500045fd001f760eda7347c5dca87","first_seen":"2026-02-18T19:00:46.738149Z","last_seen":"2026-06-28T13:19:29.421998Z","times_seen":6,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/knrytpm6uedu.js","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /knrytpm6uedu.js HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"68a9bec9-5991c\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2BB5QwD0chUSiGSwLC9RsQAW%2BlXChHuNKcFR1FVrfxZ14GvQcZKgQj7e7ejXfFlpsHp2OKFGe2drFCxjYCmBLH7s%2BTUmswIgaDiGIWphhQ7FCuwh1kX04d9qt1k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f2f660b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":366876,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ec46f6bdf6b17740284c7a92a889085a","sha1":"c7efc9eea28cef787e944bf95652a2cdb67cc724","sha256":"a5cfcbe6ec6eff141806a7ca54b2833e6f91ff1146cb4e2219fb879d573e996e","sha512":"40bd3931a02f5487bc98511d397b5d000817852d811428eec23f68ae536bb9ae7512e6e7041ba22d30c4109b783342a5bec850e30ea60ccfcfec547c42c74cf0","ssdeep":"6144:yQ6sDjQSyp5fqDaleLtGvhwI7tsUlSSHIXonJQbO:z6sHQSyp5fqDalex6B","tlshash":"0f7495903bd0a84813ab4fbb732bf1d5f86e095f3c14499be104fda0659562afaf1931","first_seen":"2025-06-27T04:58:45.891011Z","last_seen":"2026-06-27T18:24:20.947909Z","times_seen":89,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/pickems-cta3.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/pickems-cta3.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/index_files/af8c24928cdb9b063317aabe2109d74a.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 22440\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-57a8\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eW%2FYR1IL1pQ0ZQbJKZ%2Bh%2B0aiTJkJgtQIheUsI1HtMqSoAB8VVZwUS8RYAY7zxX3QLpWNVZVLY%2BUROd15Z2XtM4I4xHXwck%2FMybNRevCqt4UxFFIRrrQKfewtwT0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b62bf730b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22440,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1908 x 332, 8-bit colormap, non-interlaced","md5":"6c8f408140e67720a705c30ff1de35bd","sha1":"0ef00280a6b9453cdf0d599aab41365945c82dfd","sha256":"65b99522047e6618dd3d3c4bf82a6aa143407c4402a11e27397ba2a815b74c5c","sha512":"ed264f1a14baaafd9e76a3aac7f1562b1219849abecf9de0ba317e8fe9c82d463517b54b534ca2bd8756269ed762af5e9e4be4450b4114812ee7f410c8344c94","ssdeep":"384:bKYSWG3eSGvNHGXdHGapGTK+koiHE/OomRbNVLxXynAxuxkxYG:eYi0GXWK+koKE/O3bPxXAxk2G","tlshash":"5aa2f15949ae1dcd0eefb6d4968a3cb3b90e2c7903523c048f5ac70b01a6507657caf7","first_seen":"2026-02-18T19:00:46.751281Z","last_seen":"2026-06-28T13:19:29.442552Z","times_seen":6,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/VwWnF455DIXW53MtWKF2Y6.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:17.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/VwWnF455DIXW53MtWKF2Y6.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 12535\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-30f7\"\r\nexpires: Sat, 04 Apr 2026 10:23:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gs16ZPqUqCscgR5STKT%2BxOQqlvPFhgWYU7%2FYskvfiJ5%2FhpRVmCwp3mijohHYHWoDRDpAqGAtnx2SZX9%2Bw5NemhDwqDsDxMDZEhjUAnfPIPYUn6V2XAt02HhwaKA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b638f7c0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced","md5":"a531951bfc434580ff34877741dd2df5","sha1":"c6c5f03255ed2787b11b33e98cac9598ba7a4862","sha256":"e6b58654f84a13cf6cb17f4652230d4480a0a2904a98885b63a7326ae1086d3d","sha512":"ab625fadb047f0fee57156f22d57bc0e47b65d6141777a72838879ca85054ebb2bf18ec6869adced9514c4f291d0687c9e42c518ef0bba6e413d44a8abe33289","ssdeep":"384:2Sl7qUD5fwbzHp/L6I5yer35kXcLiz6yA87vo048:2SPt8t/L6E5liz6yA87148","tlshash":"6d42bfe1db03b64cd3b1d1ac29f85246dbd982f9420db3470a45140b0956ba39b86fab","first_seen":"2026-02-18T19:00:46.724516Z","last_seen":"2026-06-28T13:19:29.484855Z","times_seen":6,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/I600mTB0Tcp5QiY9UCy83o.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:17.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/I600mTB0Tcp5QiY9UCy83o.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 11302\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-2c26\"\r\nexpires: Sat, 04 Apr 2026 10:23:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M3fDZrmiVryUE1G5kUo%2Bd6xrZuaa1vZ%2BR9mSZLnKnIofJbWz3U1yklT5Nk87eMAai4iAqaqe6H6J3vcvZ0xHmGIFWU8m4hfDhOOjZDhY8XNJMdhYheesEBx1MGc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b639f7f0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11302,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGB, non-interlaced","md5":"f972f59d4b5cc346a6e3dab6ba574137","sha1":"c865ba07bf5e5442fc8ac7e7db87cca179439b92","sha256":"08f6b19040ca549b7e7ad18fd57f6743f3e862fdd057f52a55f45fa882fdcf78","sha512":"dc8b6162f343f022f0ac0fb5721489699c8e9eeef7db9dee71f27d1c6488381fb937c56dfa4d703a9ace9f9541db3497299efc882c4caeb1298c9a5f7d327b3f","ssdeep":"192:2tKyR5CTOUMZuk3jk58Wp8ScllIeuhRdEG3CagukgrJLb6kB+FI0RIIP3dg8lgSO:2tKyDwwZY8Wp8D1uhrPCavxrR6KiIafU","tlshash":"ae32cfea26051efed89dc174f38e1544fae9318e5e63061f7a81c7c4302e1869e1247e","first_seen":"2026-02-18T19:00:46.742239Z","last_seen":"2026-06-28T13:19:29.423282Z","times_seen":6,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/steamLogin.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/steamLogin.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 5115\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-13fb\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=46AsKsGuDBRfoXQjr9gb9xDcQ%2Fw40BDIa7aijWiyyUEKPpTeik1BQ1cJkO7bVq7Z2%2BZ9xf46g%2ByGlj3jU9Gedw5C0EUF87G2MES%2FxzlWwHBXZYx7Y6z7xjnyEzk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eef380b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 35, 8-bit/color RGBA, non-interlaced","md5":"456dc9adb7a6ce8786c82c6e97d665cc","sha1":"8af07725ba69dd271dbd35778859ae9a0f6b4957","sha256":"ad4597639fec81bd53c6614e300c8e16f66462079251f53604f0855ed32aa648","sha512":"4992683c61c6adff2d8f4f2cc227a7f914bf5cbb3c30dc6459975ca6f379750a420256df4c950b9bed9b9777bf109108e621ef3647990ae232d9df6b0959329b","ssdeep":"96:cZzy2NU6PDpMxyDtcIb6sI3ddNMobmQCPzhM7LACX07M:GW2OOqxyD1b6sI3dd6obm5huxX0A","tlshash":"73b16c75384f7db5ae732137a877512ef4ca537296c1716c3722e7a335c1e18b082642","first_seen":"2026-02-18T19:00:46.759889Z","last_seen":"2026-06-28T13:19:29.415035Z","times_seen":6,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/CZ.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/CZ.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1405\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-57d\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5q47gtYyoeunoy40CgrRocLdLaC7VG2oPNPkyEFvpgUE83lBimTtkWd68ccI6lsmu5rF5gYnZfIR4n0M7tKju%2B3LU9N0Lo7u3xk4s4I2htDWtFLExeosHlzhhWg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eff420b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1405,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 30 x 20","md5":"c132aa4f9d445f3d7aecb101a374938c","sha1":"47a793619abbc8c4fe68648373a51dc65ea13155","sha256":"5d5d6877aedd9bb3aa01373cf0f86bfc8500a193c416e10c5e8d3ca1d984cb58","sha512":"ab32517557ac01df18f3872d17f82ec3d18ba0991ee973c4965077440fd8b7f4efd9a0fabaef49d2ae4d08f5be752fef800d72ed14b9a779710470c9fa7601ac","ssdeep":"","tlshash":"bd21b6a852af28c5e14ec6bf65299ffb41183088955c35028787a51ed4c1af5e1e7b88","first_seen":"2026-02-18T19:00:46.723535Z","last_seen":"2026-06-28T13:19:29.39864Z","times_seen":6,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/adIB7mzeYFH6m60KEvZhus.svg","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/adIB7mzeYFH6m60KEvZhus.svg HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"68a9bec9-32c\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2FjwPOlk0WXH4X2B1H1b6Sh33PFTvUrOOAZFo51XQBrswdKEezi0xXzZxqiKYBAC2DXv7nv3sNw8zLW8mDswnGpcG3FpUoiOb6x%2BOmEOzri9GR5WjIy1TtxPs3k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f0f4d0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":812,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"07f396010e286a530a5c90d11695908e","sha1":"7a668ea423068241b5462769f6103d6a89daf8ae","sha256":"dcf98b8a26833e2683c0dd1a1d9927f6cb326bb6f3aaf0df2d07bfb446726321","sha512":"dd18ad4be901f1c4742c344a9dfb5914127822e8050cfafffb5ec4c0ac389e6482af295b8f52b88f13b2410169ed6983342fd36f0946131e633a3a8392229bf8","ssdeep":"","tlshash":"0401ce9681864836ac26c2f4933842e555b578eb8126c688d59a392f1d0c8d981e6bb3","first_seen":"2026-02-18T19:00:46.750451Z","last_seen":"2026-06-28T13:19:29.409267Z","times_seen":6,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/ac8cpvb5XKoAP7C2uYeHyG.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:17.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/ac8cpvb5XKoAP7C2uYeHyG.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 130462\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-1fd9e\"\r\nexpires: Sat, 04 Apr 2026 10:23:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l8FSFy%2B%2F3ECbEZ2Z00ozaBJarRjyPM01tMqexUfUssJEONWRb5rgs0l%2F1om1Naq4wmJ7zrvqx6qGylFU5BN4D0k%2FLMG4ajnLY1FVHuJly8U0rhOtYTbWHwHoGYg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b639f840b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 417, 8-bit/color RGBA, non-interlaced","md5":"adfbed8fcd42b7c425c08509a0fb10de","sha1":"5ad363a037f13cc1801d1e30f0439bdfa539dcea","sha256":"bd786c1dbbcef91b310005e8b6e0ef84ee23f0e928177d8d58d02f1a8677feac","sha512":"21f0199d8a549c92659f0721df963c805b66316983985534546a33657afc383d64087541f0d487f133d1dec8fb09aa9827284ec5de411bcea07aa0f5919a93a8","ssdeep":"3072:uZ0HPiw7hjLG8TaPAVAcfu0rDU18Nid35WyxKKOGVF1ZBgZaCE+:uZ0vXZXmmjE8Ne5Wyxt3FpgZlE+","tlshash":"56d313316783620b67c594f2befaf40e4b6dc4aa57d1f838935c1b40b116d5eee08870","first_seen":"2026-02-18T19:00:46.769581Z","last_seen":"2026-06-28T13:19:29.412917Z","times_seen":6,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kit.fontawesome.com/0ad7180e74.js","fqdn":"kit.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /0ad7180e74.js HTTP/1.1\r\nHost: kit.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://hltev.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-length: 9\r\ncf-ray: 9e675b5ef89a56c3-OSL\r\naccess-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3000\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GKLRuS2n1PP1ZQRewTmB\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with no line terminators","md5":"722969577a96ca3953e84e3d949dee81","sha1":"3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5","sha256":"78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3","sha512":"54b2b4596cd1769e46a12a0ca6ede70468985cf8771c2b11e75b3f52567a64418bc24c067d96d52037e0e135e7a7ff828ad0241d55b827506e1c67de1caee8bc","ssdeep":"","tlshash":"26500000000c000c33c3030000000f000003030000030000cf000003000000c00c000c","first_seen":"2023-04-05T07:39:32Z","last_seen":"2026-07-24T14:38:59.49241Z","times_seen":31421,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":177,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/af8c24928cdb9b063317aabe2109d74a.css","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/af8c24928cdb9b063317aabe2109d74a.css HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"68a9bec9-2074be\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tCKWsXZxEE0MC1f85UAjSBnjQPhM3vTnDYo%2BLiytzXC9qHlxG5YaOlVQGtM9xD%2B4hakDKBkWm68CAlTzuRclb%2F7zCOiqWKbDFhs%2FekILTbmohGu%2BWwytnMpC3nc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5edf320b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2127038,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (63200)","md5":"b0f5fb08e3846b2b1a02b25e8e3d1823","sha1":"8d2c477e0de8b7f0417b02a850d0d5d9a3aba534","sha256":"2934fc4a1dbbee5bb46c0017a3ed03da184bce9e646fc9ee2251adc69e3ce80a","sha512":"e0c7b4cc77e2d72560172b62753e6ecc1066805b2f3650030416100d71695971fe1e761bef3029729ed48b4f7aa1a6b77f619bb97314651c26b07fcfcdda2f95","ssdeep":"6144:GXAKRcE5oGplu3F/EMQksPc3t4QG7myuSlh2nJGhM/c:GXY2lu3F/9Qv02QGCjc","tlshash":"3925ea32964d312db63bca6ef08175693f76c143e72347fef57aa629c1c90c6132a648","first_seen":"2026-02-18T19:00:46.726886Z","last_seen":"2026-06-28T13:19:29.476803Z","times_seen":6,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/ME.gif","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/ME.gif HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1431\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-597\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Mdad2upH6%2FqG2EDc%2BLuL%2Fsug1S6BKXeuIXRGsfHiAk%2BICYvRKydCAmZtiWlrVf%2FNFKzz3TMEYTy6Ddm6M%2F9%2FSiu6K73PFDdvWAVE%2BNEiuM2qpbRY3xuWUNdb5Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5eff450b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1431,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 30 x 20","md5":"b107c97ea13111022b2bdbeef7d238bf","sha1":"897433e4300ff444fdca048d14959e92d26f446b","sha256":"139a9835894c3fddf4da817ffe59bf9c7191bc6f0c51250ddf033fb00590f98e","sha512":"4c209ae1b0f34dd011a28f3b539b31cd2b498b2d738e42f4be10e3fd8207d1c297e8e3018a7abd58e0f40d1f0b35a86ae4a1c1085b20f43343a51f7f7f0bdd03","ssdeep":"","tlshash":"1021193ffb04ae05c48060a137c49386170c563323a73e81aaf62ae826ce4a50117aeb","first_seen":"2026-02-18T19:00:46.761225Z","last_seen":"2026-06-28T13:19:29.459308Z","times_seen":6,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/js/script.js","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"68a9bec9-354\"\r\nexpires: Sat, 04 Apr 2026 10:23:16 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=05flOWxrTZ0Qr%2B%2BOWpbN1dA4o7FJwapRQU8Pky04wfb%2BxvJtw0QfGtE4gJk1yfj8z1w%2B2xyQxBXk%2Fzdsmt%2BMhfryTahF9zGuqIxOR1CkL1OTiewRsNPk6snO4YA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b5f2f670b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":852,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"106d9c182fcf6d44582db99907b7136d","sha1":"1eb3967f81a94c248670e1f6f523f7b3c6a8538d","sha256":"b1158364b42d3cb97879cfcdec273f408fd0a45a700649ea8541533dd411d14d","sha512":"bbedd92d93f002fc20841c5fd3d8618b041289594a194e2533732409480ad251e7f67000c7460afae0bf0b952599600c3a7cbbe56b0dccaada01412897859bb8","ssdeep":"","tlshash":"9c01488c6a64323947b71fb362ab1e48f63940a365486446bdaccac10fb58e115f3edd","first_seen":"2026-02-18T19:00:46.774591Z","last_seen":"2026-06-28T13:19:29.474587Z","times_seen":6,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/cf-fonts/s/open-sans/5.0.20/cyrillic/700/normal.woff2","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:16.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /cf-fonts/s/open-sans/5.0.20/cyrillic/700/normal.woff2 HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2WnJIjjx%2BC1sbyvVkWBGdmvjIqYyQOHoCpgfmWtPZBXV%2BEY3kX2DbN9V6ck5b5IA7pgRwQck8vcylDLl9Fq9zkYB0O95vA53mv6cFLXiWDXp0NkUvKnRJ7oSfdQ%3D\"}]}\r\ncf-ray: 9e675b62ef770b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"3615566722010db974f6b230a002e1e5","sha1":"d6983248802f655f8bb42d9fb9958e423b1276bd","sha256":"e94ba2887c089b2198ca67bf0a866fc0ca1df46c838fd44e3dae783405f9a124","sha512":"ec10f656702e55b49b9c1e21d44cdcbc530f458f311132aa359d80c6bb725f3259531729872f51e6cd252cf774e9bb8d815e55e72c4dfd9f702b24292daba0b0","ssdeep":"","tlshash":"b8d02b9e5043639b4812156039c115c2264c12f6a43a85e82dc6d48752a853ecd9aa8c","first_seen":"2026-04-03T10:23:42.235194Z","last_seen":"2026-04-03T10:23:42.235194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hltev.com/index_files/bUB9D95e9-m1vmV1uOJkYL.png","fqdn":"hltev.com","domain":"hltev.com","tld":"com"},"ip":{"addr":"172.67.186.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://hltev.com/","date":"2026-04-03T10:23:17.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hltev.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 13:36:44 GMT","end":"Sat, 06 Jun 2026 13:36:43 GMT"},"fingerprint":{"sha1":"3F:A7:F0:04:8D:1B:BB:82:CB:E6:05:EC:10:33:8B:36:96:05:F3:1B","sha256":"A5:DA:55:CA:6D:80:C4:29:1F:AF:95:52:52:F2:91:B7:B9:CE:71:DB:6D:B1:52:86:BF:39:F3:4C:E3:D6:F7:F7"}}},"request":{"raw":"GET /index_files/bUB9D95e9-m1vmV1uOJkYL.png HTTP/1.1\r\nHost: hltev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hltev.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 03 Apr 2026 10:23:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 98239\r\nlast-modified: Sat, 23 Aug 2025 13:14:49 GMT\r\npriority: u=4,i=?0\r\netag: \"68a9bec9-17fbf\"\r\nexpires: Sat, 04 Apr 2026 10:23:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RqPMcGsvnrbFngwLquCawpsSltwiXLULuHFSMcCuI%2B%2FmCYaFs0l60%2FB1FVikVfHafSTH9%2Be5iyh1JKoNn5MNA8gqN0qiAE%2FEUulMmZ6Xb4N0P%2BWol6UkPyCirD8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e675b639f850b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 417, 8-bit/color RGBA, non-interlaced","md5":"93331d3dd12eaa955a21803279db76f9","sha1":"4bcc06035b3447749d39d7cbd8f9460d401492d3","sha256":"ad65d54a10e22d62354e625072f1416a1be65bd9c5f818b2183bf64eff12f16d","sha512":"c3d3fd016b36b2b83ed12dab2aac1de27bbcf9c671f1486696fc8bc4fa363c51d2a3be31757cc84e8dc4325bd9560b66d9450950ea7045e0a240e365f32bc0bf","ssdeep":"1536:dlPPkPx0l3NBAocPgG8aeP2N5RmQmKMSvtA+FQHzNOUm/rDx4IqsBUA93tjwhgYz:dhP+0ld5cIG8aeOXRJ6SF8HzNKrDx5Kz","tlshash":"33a302a7403e70e68ab9ec5e9f55ca6058e171fd72025d15b042ab3bb46c3176f8ca83","first_seen":"2026-02-18T19:00:46.754957Z","last_seen":"2026-06-28T13:19:29.414309Z","times_seen":6,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"hltev.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"hltev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}