{"report_id":"80ba53af-c293-4b6a-9d06-3ace05fd63f0","version":0,"status":"done","tags":[],"date":"2026-09-05T15:34:51Z","url":{"schema":"http","addr":"heeboo-allocation.info/","fqdn":"heeboo-allocation.info","domain":"heeboo-allocation.info","tld":"info"},"ip":{"addr":"172.67.152.56","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"heeboo-allocation.info/","fqdn":"heeboo-allocation.info","domain":"heeboo-allocation.info","tld":"info"},"title":"Claim $HEEBOO | HEEBOO","dom":{"size":26473,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (784)","md5":"67c6fa19c49b005fbbbac8424363b196","sha1":"a2f1ce1ff22f83686bc7a365ca3cc84b5c3008ee","sha256":"ea5439c2b79ff568bd5c437a7d25a7694a32bd49eb51259784be918b5a7b3824","sha512":"503273d187b99db0f922d6a1f97e0f19f2b0389d3ee6fd8fff46cee8e731646397b347cd7baf0053cdb87b64fb1ec3cd712eccbf5a755091f8147776925b9f3e","ssdeep":"768:921xdT2dTi8zQCTFmA9HBewk1gPff86Vl:9YdqdG88+H86Vl","tlshash":"cdc21af416f0057a6003e3fe9f55f4596812c8e7d80acd21b79e46526f8ccad89e3b89","dom_hash":"domhasha8e0716aa274e38135ae56d59313d465","first_seen":"2026-09-05T15:34:56.903677Z","last_seen":"2026-09-05T15:34:56.903677Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"heeboo-allocation.info/","fqdn":"heeboo-allocation.info","domain":"heeboo-allocation.info","tld":"info"},"ip":{"addr":"172.67.152.56","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T15:34:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"heeboo-allocation.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"heeboo-allocation.info","ip":{"addr":"104.21.1.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-05T15:34:52.139378Z","last_seen":"2026-09-05T15:34:52.139378Z","alert_count":5,"request_count":5,"received_data":778288,"sent_data":2574,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"claim.heeboo.com","ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":4441,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"heeboo-allocation.info/","fqdn":"heeboo-allocation.info","domain":"heeboo-allocation.info","tld":"info"},"ip":{"addr":"104.21.1.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c5b191fa0608cc44adb4cd5e37be94e2","sha1":"56983acda886758f14749b9adb8615962502821e","sha256":"4eae8781309aab802e203ce844e3a7bd76c8ac87d9a32e107e49391faa3a9dfa","sha512":"40ce0be554781d33d8a8def67b6d4d49cee58430782baca696ab3b1ff3fe5af3c681bc9f251d8e908ddb9302538891fe4686fcd2261f49a54638d152ead53db1","ssdeep":"","tlshash":"9ec08071c464cf71584c10d7117ca6cd75906d7c42437597c6b9edcb649cf811bc44a8","size":180,"data":"","first_seen":"2026-09-05T15:34:56.927466Z","last_seen":"2026-09-05T15:34:56.927466Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heeboo-allocation.info/","fqdn":"heeboo-allocation.info","domain":"heeboo-allocation.info","tld":"info"},"ip":{"addr":"104.21.1.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5b72635ac91b884a37dd142041b8f3cf","sha1":"8f937fd10109fffee1c51836ad1e698cd064c897","sha256":"96bf13360d1d5a8f39d5c8a35d6dda85ec4dac4df8ac1b6216d282f4e20eeb29","sha512":"762ed4ee10b00c28d16411d59bfd8c4e3ad9c877aee1aa34ed932f38a4d8cb8874a970dc9caaef10134a7889d838f14e29587d437e7596c5675d6307e34b9d83","ssdeep":"192:OtkdES6CIf83e2SXC8uWS6CybjroSI3brZUqKfzymDHvCP:Off83qh3rw5","tlshash":"7ed16c7e9ed20637986bf5bd8f9b7080292284675909ed203d4ce1029f8cd2997f6f94","size":6529,"data":"","first_seen":"2026-09-05T15:34:56.930053Z","last_seen":"2026-09-05T15:34:56.930053Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heeboo-allocation.info/secureproxy?s=%2Fipfs%2Fkt5aI7E_FgHsAq1grTtXJA1063e3155cedda387392548a79986b26%3Ft%3D1788622460678","fqdn":"heeboo-allocation.info","domain":"heeboo-allocation.info","tld":"info"},"ip":{"addr":"104.21.1.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0613139e2a997b9661ecd69f533a7c5a","sha1":"afacf868a18fca0447556819b0c1b8a4cb132f58","sha256":"0162cb19f16582bd641dcbb8cc9d9bc564e865c99b0b95a5febdd1e435e2f6ff","sha512":"403cbca64e62a7b84023cd735f061d529b09eff537eb101792144c2ecd21892ff7fff259eaff100a100bbdd70d0304ae36c1056eacf1b584af2b2664eef96dac","ssdeep":"6144:ch5gD1rq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csdq9NWCEiox3Ti/ESVPHSyyA","tlshash":"21d4cbd0b34a56bbd8d6b2b7043349afdfa82d06064b188bd2e7dce4725470791d89bc","size":646293,"data":"","first_seen":"2026-09-05T15:34:56.908818Z","last_seen":"2026-09-05T15:34:56.908818Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"heeboo-allocation.info/secureproxy?s=%2Fipfs%2Fkt5aI7E_FgHsAq1grTtXJA1063e3155cedda387392548a79986b26%3Ft%3D1788622460678","fqdn":"heeboo-allocation.info","domain":"heeboo-allocation.info","tld":"info"},"ip":{"addr":"104.21.1.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heeboo-allocation.info/","date":"2026-09-05T15:34:20.680Z","timestamp":1788622460680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heeboo-allocation.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 20:12:45 GMT","end":"Thu, 26 Nov 2026 21:10:22 GMT"},"fingerprint":{"sha1":"DA:2E:BC:33:6C:9A:E0:F5:62:94:06:88:D5:77:92:97:09:1D:E5:40","sha256":"A2:29:DD:44:AF:C7:DB:EF:AF:27:A4:B1:C5:ED:C6:99:E1:C5:15:17:87:49:43:29:17:D2:7D:15:AE:B8:E0:BC"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2Fkt5aI7E_FgHsAq1grTtXJA1063e3155cedda387392548a79986b26%3Ft%3D1788622460678 HTTP/1.1\r\nHost: heeboo-allocation.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heeboo-allocation.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:34:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"9dc95-r6z4aKGPygRHVWgZsMG4pMsTL1g\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=gBZUtOZ8DIescPACBDh7Rg.js\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/05/2026 15:34:21\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: c80ea0a790226a333c792be1d2c83b1d\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QN92Gu%2FnmxCsFJmU1xFT3ClwS60mzx%2B0HPr5rGSq%2BEYUMu1DkrsfNJTm6YJmIPCPLCyY1YkhXX62sbovC%2BKoFDz316%2FKTB9fYbp5PSpn9q9TP5HHKPe592dKy8CHFp02RuPkotktDL6L\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3664c2b4f221525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":646293,"size_decoded":143102,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0613139e2a997b9661ecd69f533a7c5a","sha1":"afacf868a18fca0447556819b0c1b8a4cb132f58","sha256":"0162cb19f16582bd641dcbb8cc9d9bc564e865c99b0b95a5febdd1e435e2f6ff","sha512":"403cbca64e62a7b84023cd735f061d529b09eff537eb101792144c2ecd21892ff7fff259eaff100a100bbdd70d0304ae36c1056eacf1b584af2b2664eef96dac","ssdeep":"6144:ch5gD1rq9NWCEiox3Ti/1gFQZDeoV5oMPNFppHSyyA:csdq9NWCEiox3Ti/ESVPHSyyA","tlshash":"21d4cbd0b34a56bbd8d6b2b7043349afdfa82d06064b188bd2e7dce4725470791d89bc","first_seen":"2026-09-05T15:34:56.908818Z","last_seen":"2026-09-05T15:34:56.908818Z","times_seen":1,"resource_available":true,"data":null}},"time_used":718,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":607,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"heeboo-allocation.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim.heeboo.com/apple-icon.png","fqdn":"claim.heeboo.com","domain":"heeboo.com","tld":"com"},"ip":{"addr":"216.150.16.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heeboo-allocation.info/","date":"2026-09-05T15:34:21.253Z","timestamp":1788622461253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.heeboo.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 24 Aug 2026 08:43:29 GMT","end":"Sun, 22 Nov 2026 08:43:28 GMT"},"fingerprint":{"sha1":"F5:60:3B:D3:2C:FF:10:17:47:1A:DC:C4:57:14:C1:DA:A1:22:B3:BD","sha256":"3D:91:A6:25:F9:A7:DC:01:16:02:3E:81:3D:59:66:1B:87:00:37:C3:36:3C:4B:D2:FF:CB:D2:81:CF:A9:9A:A2"}}},"request":{"raw":"GET /apple-icon.png HTTP/1.1\r\nHost: claim.heeboo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heeboo-allocation.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 284811\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"apple-icon.png\"\r\ncontent-security-policy: frame-ancestors 'none'; base-uri 'self'; object-src 'none'; form-action 'self'; upgrade-insecure-requests\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https: https://image.mux.com https://www.googletagmanager.com https://*.google-analytics.com; media-src 'self' blob: https://*.mux.com; connect-src 'self' https://*.mux.com https://*.litix.io https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://api-public.streamflow.finance https://staging-api-public.streamflow.finance https://api.devnet.solana.com https://api.testnet.solana.com https://api.mainnet-beta.solana.com https://mainnet.helius-rpc.com wss://mainnet.helius-rpc.com; font-src 'self'; worker-src 'self' blob:; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; form-action 'self'\r\ncontent-type: image/png\r\ndate: Sat, 05 Sep 2026 15:34:21 GMT\r\netag: \"2949ec923da752d6941881d5430b1db5\"\r\nlast-modified: Wed, 02 Sep 2026 08:27:29 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /apple-icon.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9pfwz-1788622461306-ecfc184465a2\r\ncontent-length: 2755\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2755,"size_decoded":4441,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"2949ec923da752d6941881d5430b1db5","sha1":"7abea345beb19cb00e80fb33fd63192f5cc21e94","sha256":"308a7363d993eb330ce9f3ffa4a5f0214755dad27baaf9a347fa065e35719f35","sha512":"5c1f78f01da38285a11b3d6ad85510d1e1923dea5456c5fd3274a300478183bccfd6c1e0e96f2e85f16b1f3c442c3403818aa91a9fb7605bc36e091ab2ba4c35","ssdeep":"","tlshash":"ab514cd729ff5618c3d3d8efc028116cc52241a49776d15ee879b9310b1a940e8dcb18","first_seen":"2026-09-05T15:34:56.913321Z","last_seen":"2026-09-05T15:34:56.913321Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":13,"connect":1,"send":0,"wait":31,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heeboo-allocation.info/favicon-1.ico","fqdn":"heeboo-allocation.info","domain":"heeboo-allocation.info","tld":"info"},"ip":{"addr":"104.21.1.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heeboo-allocation.info/","date":"2026-09-05T15:34:21.255Z","timestamp":1788622461255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heeboo-allocation.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 20:12:45 GMT","end":"Thu, 26 Nov 2026 21:10:22 GMT"},"fingerprint":{"sha1":"DA:2E:BC:33:6C:9A:E0:F5:62:94:06:88:D5:77:92:97:09:1D:E5:40","sha256":"A2:29:DD:44:AF:C7:DB:EF:AF:27:A4:B1:C5:ED:C6:99:E1:C5:15:17:87:49:43:29:17:D2:7D:15:AE:B8:E0:BC"}}},"request":{"raw":"GET /favicon-1.ico HTTP/1.1\r\nHost: heeboo-allocation.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heeboo-allocation.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:34:21 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EZrFViaUxDmMahG6K1LQbEoZK%2FTgeEqtT343Yc78nOCKanZYjkxGZGBGW%2BiMzQqjZ7M%2B3fxiD05etAjNC8FfXhlY%2FH0wovfDrRbwo%2FztNR2YEfDX0oGwcVDHN1ZjI3Hcp059M0jdgohe\"}]}\r\ncast-mode: default\r\nlast-modified: Fri, 28 Aug 2026 22:03:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=6,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a920594-3aee\"\r\ncf-ray: a3664c2ed89b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15086,"size_decoded":2474,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"15c0ae7b2fdc9fb37ccfae7afa20a17b","sha1":"9bf806b7dbd54159f190585a7ba8c37122ad90d2","sha256":"7682dc3cac9961ad80249d855fe6e85d7fe3b1b82b2462b26ec7092028d126e9","sha512":"d57ce19b6ec1453024966b0655360daf3049a7b6e7b6405796a0b95e5763553790a1ceaeca51da72632d1f08cf83840245822c7ede6b1200c3ab65b96ff329a0","ssdeep":"192:jKiPvtwmZxUDGH9fTmmms1t1mmmPsN8M7Uf:jdvtwmoGHzkMQ","tlshash":"8c6268479251a221fd266af5480274047cf34dd1e809b994b9bcf08e6d77072f8bd29f","first_seen":"2026-09-05T15:34:56.917181Z","last_seen":"2026-09-05T15:34:56.917181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"heeboo-allocation.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heeboo-allocation.info/secureproxy?s=%2Fjmpd%2F","fqdn":"heeboo-allocation.info","domain":"heeboo-allocation.info","tld":"info"},"ip":{"addr":"104.21.1.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://heeboo-allocation.info/","date":"2026-09-05T15:34:21.829Z","timestamp":1788622461829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heeboo-allocation.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 20:12:45 GMT","end":"Thu, 26 Nov 2026 21:10:22 GMT"},"fingerprint":{"sha1":"DA:2E:BC:33:6C:9A:E0:F5:62:94:06:88:D5:77:92:97:09:1D:E5:40","sha256":"A2:29:DD:44:AF:C7:DB:EF:AF:27:A4:B1:C5:ED:C6:99:E1:C5:15:17:87:49:43:29:17:D2:7D:15:AE:B8:E0:BC"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: heeboo-allocation.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heeboo-allocation.info/\r\ncontent-type: application/json\r\nContent-Length: 1336\r\nOrigin: https://heeboo-allocation.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1336,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QB-AJQAyoAFQDhAtkCLgAmAxcAAAECZQMAAO8nhn2XtsKCARqSyaeXOHaOilFrZZACAAB5fIT6xqgLBFYS_T61Xz5sIpq3MA46XGCKx2xjxsolrLaeM1o0MjKaHhpKG54ekKFoLKcoKdpjcH9GgMiddk5-ZXhjKGzZrkGixYzLzjj4b_dUhyPQ7nyEuV0dqXvjUyNT3aClvG-9OBGoPsjfhdpBhFsTLpu2reZN0iAoKaPmi0RaJj1W0ClIFpQvJMYs6xW1AQtCJJB0alQFH1-76nf6R1I2WwY1IYkOHvZmf_NpeS0oANgBvv3yf6Sh828mu7KBm-E3GDWOQ0-sodqKh269bKRJD0nFxs-3M4vYzKN1VsKE-0rIhn7ndzTX1-kwgp-kMTN4JSi4LxL-S3_wBrVQmEiYfIAoc5cWnl3Q4WibrZ2AilgCzMxydTXfebd747ZaXDplX_KgZBnGQVlVfu-qvqATaAL18RisJK48zGP86pQmk_qktpVr4kxzjFN6psAFwJONd5UJ-VgaQh0dsOw4uDPmCHyQzx4z__zIvwzUIxMQhsiDJdOm-Qe9cCoQ6XieEd8Zxsl7bm0K7MbFkYrwLmtqcCXxyAHnxhDpIeNHbI_uqKRF8gCtYVYESnJEB-fnOXB9BDSpQc-eEAV1M1mJ2eup-yGJGVYc0Vs1eMweiPcgXfg9valOmzOPJ2cueBjrwPAI4mk9elGOZjTieAFqM8d10vdKs6Mh7JcbnGYJj4N5SRCfJMZ2OlXdCCR6R78BeqmBLE6GWupLDlBMDRRmI13HWKTnUHIfbJVylaClX8-4ahO8CNVC-RqURX4i0L5dczBvfPo326Zg1BsvGGOB3ZN1dsSeMQc12dinX4QzuQg0Bbr6rWoq-Y2k0Uk8VU5DKGXnH3365IKJiAR3SY2AT0JLumQNzw6mcLxgZE76s7U1PCm49fqKa49uypKaD96bBJica2nU56YOkXioacKuENmLxGLZDfHU9IaGUXWCQBhdQt7Rb4_kGWglWHTVsTAwEiMB2lMsDMaj1F85PAyMHRlr5uF8JIMJQRAKHZQ8Skx1KTG9PAyIhIv_TZpNCLfeMOMtorza9NSpSdlXsTn2LRxdUrzkLn_5Fy9vwo4czEXYUkRVASeKfCPPtHHtwUCHyZGLpcOPm0G0e7AdJ_WiYmikiGtI2qwDMb1zAucmUbDKG1F_BBLDmGXquKYL10MFZGuDbW1D7DEHS0ym30CrF-a7gJEoGm69OUqFEA\",\"challenge\":null}"}},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:34:22 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 18\r\nx-ratelimit-reset: 1788622522000\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 09/05/2026 15:34:22\r\ncdn-edgestorageid: 1445\r\ncdn-requestid: ce1ec2c39a14fc5ad2ac59cf30c67660\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BCu66Y%2FLtkGziUyN5qWe5lkncKzt%2BnUaEmU7g%2FQcpOvldMlQopu9cSagP9vD3Tl00ip000MdTvPkmkb2%2B3NDVeSB1lsPVjnmR8Z4Q7B%2BwAjHj1DBw47YFom5a9pzP5W5sLob0IuL9THO\"}]}\r\ncf-ray: a3664c3279601525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3327,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-06T01:58:41.033731Z","times_seen":18301417,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"heeboo-allocation.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heeboo-allocation.info/","fqdn":"heeboo-allocation.info","domain":"heeboo-allocation.info","tld":"info"},"ip":{"addr":"104.21.1.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T15:34:19.945Z","timestamp":1788622459945,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heeboo-allocation.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 20:12:45 GMT","end":"Thu, 26 Nov 2026 21:10:22 GMT"},"fingerprint":{"sha1":"DA:2E:BC:33:6C:9A:E0:F5:62:94:06:88:D5:77:92:97:09:1D:E5:40","sha256":"A2:29:DD:44:AF:C7:DB:EF:AF:27:A4:B1:C5:ED:C6:99:E1:C5:15:17:87:49:43:29:17:D2:7D:15:AE:B8:E0:BC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: heeboo-allocation.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:34:20 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 28 Aug 2026 22:03:00 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WzK3VxbLGKIREK0OU5haq%2Bdo8CzR0bL0bzQnm%2BftJmLfYx8MMrMNofMCE0JkWGW%2BFcwtZ0yD2O%2BY5mesga2N3LaJEV3U22BuoD7Pp14CrDxxsKnYcGCjpCcCt58IeM1ty16Fn1lPVeO9\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3664c271e9f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26596,"size_decoded":7960,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (784)","md5":"10d80bec249c44e16f79b3eda0f3df90","sha1":"59646e190bb8523244e38565377ab0fbfacab76d","sha256":"5d3d246f115136d6264a6c2fe4f679f4b62b60c67102c9c2837befc766b6ceb5","sha512":"a2d1cf5c89f4d78c320bef14072e640b5fb7a76fc44de0b79a44714524e89fe59aa5872036916108de3af5fe004fdcae73e068b1cd54f40f52096d6cd748d27e","ssdeep":"768:dkxdT2dTi8zQCTFIA9HBewk1glsff86Vz:dydqdG88CsH86Vz","tlshash":"ebc21af416f005ba6003e3fd9f55f4596912c8e7d80acd21b79e46426f8ccad89e3b89","first_seen":"2026-09-05T15:34:56.92175Z","last_seen":"2026-09-05T15:34:56.92175Z","times_seen":1,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":51,"connect":15,"send":0,"wait":210,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"heeboo-allocation.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heeboo-allocation.info/0u1w232ddjy7e.css","fqdn":"heeboo-allocation.info","domain":"heeboo-allocation.info","tld":"info"},"ip":{"addr":"104.21.1.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heeboo-allocation.info/","date":"2026-09-05T15:34:20.425Z","timestamp":1788622460425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heeboo-allocation.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 28 Aug 2026 20:12:45 GMT","end":"Thu, 26 Nov 2026 21:10:22 GMT"},"fingerprint":{"sha1":"DA:2E:BC:33:6C:9A:E0:F5:62:94:06:88:D5:77:92:97:09:1D:E5:40","sha256":"A2:29:DD:44:AF:C7:DB:EF:AF:27:A4:B1:C5:ED:C6:99:E1:C5:15:17:87:49:43:29:17:D2:7D:15:AE:B8:E0:BC"}}},"request":{"raw":"GET /0u1w232ddjy7e.css HTTP/1.1\r\nHost: heeboo-allocation.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heeboo-allocation.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 05 Sep 2026 15:34:20 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 28 Aug 2026 22:03:00 GMT\r\netag: W/\"6a920594-14a3d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sZJYCYMBZsMyMRX%2BYXc0T5n%2Fi6ZkWiKVgGM1E5Bi1PYlwbEjQxLO7gu0ju41VdZpA0MwSp1%2BtzD4kfUzkULX4obbc%2Bd0BvFuRkTe6l9QE5SDQysgMtHWvr0ZTE91qHcE%2FOPIJyFv1%2B5f\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3664c29aee81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84541,"size_decoded":19448,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (64656)","md5":"434ca0cabd2194abf6cc764429d43ee3","sha1":"d1b02e2ac83475347010715e08f380fa6270f273","sha256":"9f6eadc4a1fbbd22671e6e67275791c07fd87b830deeae3880219271166ae7bb","sha512":"5c863ccc61b102c8302165bc5a1db66656effa26539e66cb3f235f4f027c978cf605001d88312a124c025528ac5225fb1a49942ac34dd39f36d98221f7f76261","ssdeep":"1536:J4+CNa50ZC5Pt4JJHYZvnP5a7z3fIIw0Pf7H7UTyWbA1KQLN:J4+CNa50ZC5Pt4JJHYZvnP5a7z3fIIwU","tlshash":"cb83b6b07265d43bfc27a0f1d3acb88cb52ab196df6656e5be41221223d27f10d1ab14","first_seen":"2026-09-05T15:34:56.924735Z","last_seen":"2026-09-05T15:34:56.924735Z","times_seen":1,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"heeboo-allocation.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}