{"report_id":"8defcf90-4d52-4988-a986-e2d6b724127b","version":6,"status":"done","tags":[],"date":"2026-02-14T04:10:30Z","url":{"schema":"https","addr":"hgbrn.com/","fqdn":"hgbrn.com","domain":"hgbrn.com","tld":"com"},"ip":{"addr":"216.252.233.10","port":0,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"hgbrn.com/","fqdn":"hgbrn.com","domain":"hgbrn.com","tld":"com"},"title":"HGBROWN - Certified Public Accountants | Clearwater, FL","dom":{"size":363,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (363), with no line terminators","md5":"68544b011a3cacaaecb2b8828f9a3d7c","sha1":"dd7fa0f852e7b9cbc99a26167e1bc77255eacd73","sha256":"a9a8221880caf0b082cdfa8eb7362607cc68f3577df528ccd8b0a4dd2a883201","sha512":"0c61940e84cb547d397a7563bb3abd3b0c1f0c29df9dcbb04e416cecb3bbfe65fb61a7532bcf57f5b730e2a922221ed1fee57c78bf150b76006930c2797f659c","ssdeep":"","tlshash":"6fe020eb5d75c83476a8068a70f6e39c163475a0ba21da4441d9d8765f20fd34c9295c","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"2026-02-14T04:10:34.342045Z","last_seen":"2026-02-14T04:10:34.342045Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"hgbrn.com/","fqdn":"hgbrn.com","domain":"hgbrn.com","tld":"com"},"ip":{"addr":"216.252.233.10","port":0,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T04:10:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hgbrn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"hgbrn.com","ip":{"addr":"216.252.233.10","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"domain_registered":"2026-01-15","domain_rank":0,"first_seen":"2026-02-14T04:10:30.742589Z","last_seen":"2026-02-14T04:10:30.742589Z","alert_count":11,"request_count":11,"received_data":964741,"sent_data":4757,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"49ddaedb627136545924b09a2a13df9b","sha1":"621fcae6d0eac0f097836c25c5bbcba545bd1634","sha256":"a546eed272f32db30435ef39568f86acd2fafcce55bfbc3634ca9e70d75ae77d","sha512":"f24adfe2d8fbe925ef46233370440af84ca15ba3a7e5be09d53e80887dec3ee806f5b23cc3bd260a94e77145f5bc9c9770118acfb6883887430282c390e95d86","ssdeep":"","tlshash":"91d0976b18358830738c014a70bbe39c223130a0ba20aa4080d9cc2b3e20fd308b186c","size":236,"data":"","first_seen":"2026-02-14T04:10:34.353474Z","last_seen":"2026-02-14T04:10:34.353474Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgbrn.com/","fqdn":"hgbrn.com","domain":"hgbrn.com","tld":"com"},"ip":{"addr":"216.252.233.10","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0006e352f20f7c287eb76ab97d928f14","sha1":"7f461c369b810d928e608a2fc0f4550626127b6d","sha256":"042638f23019e9d83d6644c74f8a7c0ff5c8e901a71a92de733a65cba15f3393","sha512":"8257d7b16a8c0e6de200a81eeb3e59d65f07683d5e5724fb3c51705f7b8e31ca4e9108ffd1bf00566f27d755922526314e9bf289723a589189dd276991e3181e","ssdeep":"","tlshash":"9151e16f01b210a64577739a834f63407132109b390aea477e1e87042fa3ab7a6a7fc5","size":3093,"data":"","first_seen":"2026-02-14T04:10:34.354284Z","last_seen":"2026-02-14T04:10:34.354284Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgbrn.com/","fqdn":"hgbrn.com","domain":"hgbrn.com","tld":"com"},"ip":{"addr":"216.252.233.10","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7291d9b9941efa718df98094c5cae1b","sha1":"bb77ffef4f3dc6c7a0dd320d6c992db9bfb1339a","sha256":"219713598121db0ed17d55ef606819868649eb8ff4115e91ad28fdf4a98ffbc7","sha512":"660a0e4c53845c75aeb4aee2cbd3555ceeb501cb656e075eaa0add9bfcc197ec52a1a0e1c9b806df11fcfd8dcd04fa85e121adb0fd0fa39145b01d56a50fd879","ssdeep":"","tlshash":"5d1104763b2a1534d6c9408b317ee7a93d3260717e029084c26ccc245d18e8314efcbe","size":921,"data":"","first_seen":"2026-02-14T04:10:34.356147Z","last_seen":"2026-02-14T04:10:34.356147Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hgbrn.com/","fqdn":"hgbrn.com","domain":"hgbrn.com","tld":"com"},"ip":{"addr":"216.252.233.10","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T04:10:07.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hgbrn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 18:10:18 GMT","end":"Wed, 15 Apr 2026 18:10:17 GMT"},"fingerprint":{"sha1":"33:16:93:74:E4:69:59:2C:02:43:E7:91:9D:95:2E:BB:EE:12:94:41","sha256":"AB:59:4E:DF:AE:49:F0:76:A1:A4:EC:FA:92:C1:DC:61:D6:A2:CC:A4:2C:C2:5A:40:8F:58:EB:10:33:54:E0:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hgbrn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Fri, 13 Feb 2026 19:18:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11891\r\ndate: Sat, 14 Feb 2026 04:10:07 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53441,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (945), with CRLF line terminators","md5":"f84e7fb657a8b1610569d214753232bb","sha1":"e0bac45aba310ee9c7a1f011c706b70fb5c5c9e3","sha256":"ff8074cb072957eda6013248cd4920a8f0e11914a0e9de93231fe6a25af97132","sha512":"39d6c8bb75af944207cfaa1732285ba1cdcebc39b9bea28b3a7676cfa4325364be74939cf07f4abad04a07b7a839fd3fc07246daf9916b8a293010ed984c0014","ssdeep":"1536:i0mFDygYBN/rs8t524HfoFh20fxtrgx//:i0mFDhYzrs8t524/4hZxtq/","tlshash":"4733a51b57c1202548330321af63679affa6c027e30541a57aee421a6ff1e6596b7fcc","first_seen":"2026-02-14T04:10:34.343611Z","last_seen":"2026-02-14T04:10:34.343611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":107,"dns":70,"connect":16,"send":0,"wait":17,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hgbrn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgbrn.com/thumb-2.jpg","fqdn":"hgbrn.com","domain":"hgbrn.com","tld":"com"},"ip":{"addr":"216.252.233.10","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hgbrn.com/","date":"2026-02-14T04:10:07.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hgbrn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 18:10:18 GMT","end":"Wed, 15 Apr 2026 18:10:17 GMT"},"fingerprint":{"sha1":"33:16:93:74:E4:69:59:2C:02:43:E7:91:9D:95:2E:BB:EE:12:94:41","sha256":"AB:59:4E:DF:AE:49:F0:76:A1:A4:EC:FA:92:C1:DC:61:D6:A2:CC:A4:2C:C2:5A:40:8F:58:EB:10:33:54:E0:3A"}}},"request":{"raw":"GET /thumb-2.jpg HTTP/1.1\r\nHost: hgbrn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hgbrn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:10:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 15 Jan 2026 23:40:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 94820\r\ndate: Sat, 14 Feb 2026 04:10:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":94820,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=4016, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=6016], baseline, precision 8, 900x500, components 3","md5":"c06208122a71d9353362568c09c56eb3","sha1":"4351fad77031becfadcd954d3af0d8b509e3b725","sha256":"0088a54e85cb659b318660eaec64be5120c710bba73c4435e21246b1f45462a2","sha512":"a4c8979fa7994b4bc06d1ee1b4188813780ed5c6f7525bd631ca97722ee1c337543a6c1a4624d672a481519c546c98982d959dacb02a774ca2c0368e5d09d297","ssdeep":"1536:fUK3UKdvV6/UJvnBm1jqS2z8A7P2qsLVeF+brZoBiREJOKDOAaZ1P3GFgu1uN6M3:xJz6/EBm1Uf7PRsLjbrCB5J9yZ1OVANT","tlshash":"8893f1287bdecd26c9c017730992da4e93752fa16b6327c67dad3d4d7b79a020c21781","first_seen":"2025-02-26T21:17:49.753012Z","last_seen":"2026-04-08T13:39:54.006623Z","times_seen":34,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hgbrn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgbrn.com/thumb-1.jpg","fqdn":"hgbrn.com","domain":"hgbrn.com","tld":"com"},"ip":{"addr":"216.252.233.10","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hgbrn.com/","date":"2026-02-14T04:10:07.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hgbrn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 18:10:18 GMT","end":"Wed, 15 Apr 2026 18:10:17 GMT"},"fingerprint":{"sha1":"33:16:93:74:E4:69:59:2C:02:43:E7:91:9D:95:2E:BB:EE:12:94:41","sha256":"AB:59:4E:DF:AE:49:F0:76:A1:A4:EC:FA:92:C1:DC:61:D6:A2:CC:A4:2C:C2:5A:40:8F:58:EB:10:33:54:E0:3A"}}},"request":{"raw":"GET /thumb-1.jpg HTTP/1.1\r\nHost: hgbrn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hgbrn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:10:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 15 Jan 2026 23:40:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 100991\r\ndate: Sat, 14 Feb 2026 04:10:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":100991,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=3744, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=5616], baseline, precision 8, 900x500, components 3","md5":"52d62c974c88482d6550a01909b5dfa8","sha1":"dc753819e34ca0cdafe5c9452e9a2167b52f02de","sha256":"4e5cb51773ec92cdbc5ed9dda0f6310ef2a54456fe71d0e23d55f480643ab920","sha512":"0d9a27d479fdfe3c9da39d34d7647074df62c311918cf0d532db556900cbdd036a7e52b38205b97645d49259470760bd195651d6d376072156e5dc073235c3bf","ssdeep":"1536:3IdHfAP7eReIZ4JwF7vJ/WJtJSr8qjAb8yPBFH5Tr4/Xu9st8SHra2:zj9vwF7vZhr8h88FH5w/g48SLa2","tlshash":"bda3025413e29d82e9d02e36849de0497702f65a55b30b4bbc0ca9053bf7ae68ec478b","first_seen":"2025-02-26T21:17:49.752286Z","last_seen":"2026-02-14T21:11:08.632889Z","times_seen":31,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hgbrn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgbrn.com/acfe-seal-150px.jpg","fqdn":"hgbrn.com","domain":"hgbrn.com","tld":"com"},"ip":{"addr":"216.252.233.10","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hgbrn.com/","date":"2026-02-14T04:10:07.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hgbrn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 18:10:18 GMT","end":"Wed, 15 Apr 2026 18:10:17 GMT"},"fingerprint":{"sha1":"33:16:93:74:E4:69:59:2C:02:43:E7:91:9D:95:2E:BB:EE:12:94:41","sha256":"AB:59:4E:DF:AE:49:F0:76:A1:A4:EC:FA:92:C1:DC:61:D6:A2:CC:A4:2C:C2:5A:40:8F:58:EB:10:33:54:E0:3A"}}},"request":{"raw":"GET /acfe-seal-150px.jpg HTTP/1.1\r\nHost: hgbrn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hgbrn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:10:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 15 Jan 2026 23:40:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10027\r\ndate: Sat, 14 Feb 2026 04:10:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10027,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 150x150, components 3","md5":"ee6f82315c060fa626b52c757f6476f9","sha1":"fd316c7d3f09f601e69148fb9d52dc75b6d82d08","sha256":"403fcf75b5aa0f1603e3e13111c9cb19a118b7c0518518dfad19e5a534254bfe","sha512":"2fbca5fa8da0d3cadd1249c0dade453975e81e6825045a3007c3caf50a9f78bee5d7d91ee4d94cf86755f70755a258a2299f7f41edb9478a05de49528c57827a","ssdeep":"192:tEmhD4eANLtmhHAs/92cSiI7ZNs0wkbBeWYBUVLwjeSy2oCy4:tEM8WHhD7IlS+HYOVL2y4","tlshash":"4322af22209497bfd8f3c877b4b15a42b3ee7416609ac5af02346ab735c6918dc1531c","first_seen":"2026-02-14T04:10:34.346253Z","last_seen":"2026-02-14T04:10:34.346253Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hgbrn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgbrn.com/FICPA.jpg","fqdn":"hgbrn.com","domain":"hgbrn.com","tld":"com"},"ip":{"addr":"216.252.233.10","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hgbrn.com/","date":"2026-02-14T04:10:07.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hgbrn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 18:10:18 GMT","end":"Wed, 15 Apr 2026 18:10:17 GMT"},"fingerprint":{"sha1":"33:16:93:74:E4:69:59:2C:02:43:E7:91:9D:95:2E:BB:EE:12:94:41","sha256":"AB:59:4E:DF:AE:49:F0:76:A1:A4:EC:FA:92:C1:DC:61:D6:A2:CC:A4:2C:C2:5A:40:8F:58:EB:10:33:54:E0:3A"}}},"request":{"raw":"GET /FICPA.jpg HTTP/1.1\r\nHost: hgbrn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hgbrn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:10:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 15 Jan 2026 23:40:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33118\r\ndate: Sat, 14 Feb 2026 04:10:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33118,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 300x90, components 3","md5":"4ca637e768d0bf67eb96c8851ae14758","sha1":"0284c903acae5736a76d061c9ee55c035792275e","sha256":"45f239955ccb5818e8d244cc01532f9dca743d0e5053ee30d786832de584eb55","sha512":"5034921a3e33b44a3eaa1a0b3897a60d42a2a7177145e3b0726b1b6131144a638af40f577f49838337fdb8abf070b96f624cb5f3a96a4e0e01b437acf7e481d0","ssdeep":"768:7v46ENFPdl1qszhdCYMNkDdKNy3rJ+R8NgbBePlEYtXlq:7lE/fDh7MCdbsR8NgbwPlEYtE","tlshash":"e1e2e0a3e893146a6cb0537d9c88b1d66c1f5b26963730a3a3e51f81f7f638e7416702","first_seen":"2026-02-14T04:10:34.347155Z","last_seen":"2026-02-14T04:10:34.347155Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hgbrn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgbrn.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"hgbrn.com","domain":"hgbrn.com","tld":"com"},"ip":{"addr":"216.252.233.10","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hgbrn.com/","date":"2026-02-14T04:10:07.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hgbrn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 18:10:18 GMT","end":"Wed, 15 Apr 2026 18:10:17 GMT"},"fingerprint":{"sha1":"33:16:93:74:E4:69:59:2C:02:43:E7:91:9D:95:2E:BB:EE:12:94:41","sha256":"AB:59:4E:DF:AE:49:F0:76:A1:A4:EC:FA:92:C1:DC:61:D6:A2:CC:A4:2C:C2:5A:40:8F:58:EB:10:33:54:E0:3A"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: hgbrn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hgbrn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sat, 14 Feb 2026 04:10:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-07T09:59:55.665259Z","times_seen":146312,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hgbrn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgbrn.com/tampa_1920x1280.jpg","fqdn":"hgbrn.com","domain":"hgbrn.com","tld":"com"},"ip":{"addr":"216.252.233.10","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hgbrn.com/","date":"2026-02-14T04:10:07.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hgbrn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 18:10:18 GMT","end":"Wed, 15 Apr 2026 18:10:17 GMT"},"fingerprint":{"sha1":"33:16:93:74:E4:69:59:2C:02:43:E7:91:9D:95:2E:BB:EE:12:94:41","sha256":"AB:59:4E:DF:AE:49:F0:76:A1:A4:EC:FA:92:C1:DC:61:D6:A2:CC:A4:2C:C2:5A:40:8F:58:EB:10:33:54:E0:3A"}}},"request":{"raw":"GET /tampa_1920x1280.jpg HTTP/1.1\r\nHost: hgbrn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hgbrn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:10:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 15 Jan 2026 23:40:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 369456\r\ndate: Sat, 14 Feb 2026 04:10:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":369456,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 1920x1280, components 3","md5":"434c9cdc7a60f64929456cba0ec6e812","sha1":"54cc7257be6a2dfa04d7885d105d84b1a9e7dda2","sha256":"469b90eedc3627dc4795f43efc78727b6c6e7c8bc3031b3f44135582c0a6fc45","sha512":"bddc9609b1e928821100ae5f2b59e0ccab5a291282aa11605c7294e1aa50678c3614318548a21ed56e92768140dd5156a4f0f3b1e268d6616e658a5dd5832435","ssdeep":"6144:wR3RldMGARtSdMG3BYiTrtXS2RAc8YzFqkwSr6s5ndGu7RhUUYo4TEkls:MPmGA6GWTBXJRH8Yh3wSu8hUUY9TEkls","tlshash":"2e7423630e2b452d9030c39d3e5f423067b9761c8567212f1a7e9e6d25dd6c2ac8ff94","first_seen":"2026-02-14T04:10:34.349079Z","last_seen":"2026-02-14T04:10:34.349079Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hgbrn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgbrn.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"hgbrn.com","domain":"hgbrn.com","tld":"com"},"ip":{"addr":"216.252.233.10","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hgbrn.com/","date":"2026-02-14T04:10:08.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hgbrn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 18:10:18 GMT","end":"Wed, 15 Apr 2026 18:10:17 GMT"},"fingerprint":{"sha1":"33:16:93:74:E4:69:59:2C:02:43:E7:91:9D:95:2E:BB:EE:12:94:41","sha256":"AB:59:4E:DF:AE:49:F0:76:A1:A4:EC:FA:92:C1:DC:61:D6:A2:CC:A4:2C:C2:5A:40:8F:58:EB:10:33:54:E0:3A"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: hgbrn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sat, 14 Feb 2026 04:10:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-07T09:59:55.665259Z","times_seen":146312,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hgbrn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgbrn.com/logo.png","fqdn":"hgbrn.com","domain":"hgbrn.com","tld":"com"},"ip":{"addr":"216.252.233.10","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hgbrn.com/","date":"2026-02-14T04:10:07.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hgbrn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 18:10:18 GMT","end":"Wed, 15 Apr 2026 18:10:17 GMT"},"fingerprint":{"sha1":"33:16:93:74:E4:69:59:2C:02:43:E7:91:9D:95:2E:BB:EE:12:94:41","sha256":"AB:59:4E:DF:AE:49:F0:76:A1:A4:EC:FA:92:C1:DC:61:D6:A2:CC:A4:2C:C2:5A:40:8F:58:EB:10:33:54:E0:3A"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: hgbrn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hgbrn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:10:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 16 Jan 2026 00:06:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 254401\r\ndate: Sat, 14 Feb 2026 04:10:07 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":254401,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 262, 8-bit/color RGBA, non-interlaced","md5":"df09657c794ede8b8c905581171e06f8","sha1":"60fa75277e32c0ae035e4ad3b1781a7b50d40c88","sha256":"7b037613455a3acd539e3b40c4e90771272042984b1f6e46b9382facd25ca394","sha512":"e9625490da47edfdcf6e55d75fe58e19675230fc74acf3665744164011fd7a97e0b9925ce7fb9e984a230c4af33b7c72d06c85d0a0951247d9d1cef12671805a","ssdeep":"6144:cJUnwAOzACCVEf1UYIpuqIvgTb0SWYcFmrIv2dUjOrEtt:cJPJzhf6CqI0bJWjmrOcEtt","tlshash":"4e4423116fd8c3e5f6431176950327888adc924e8acdcf6ee1a8c6394cd36b075c977a","first_seen":"2026-02-14T04:10:34.350679Z","last_seen":"2026-02-14T04:10:34.350679Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hgbrn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgbrn.com/aicpa_logo.jpg","fqdn":"hgbrn.com","domain":"hgbrn.com","tld":"com"},"ip":{"addr":"216.252.233.10","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hgbrn.com/","date":"2026-02-14T04:10:07.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hgbrn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 18:10:18 GMT","end":"Wed, 15 Apr 2026 18:10:17 GMT"},"fingerprint":{"sha1":"33:16:93:74:E4:69:59:2C:02:43:E7:91:9D:95:2E:BB:EE:12:94:41","sha256":"AB:59:4E:DF:AE:49:F0:76:A1:A4:EC:FA:92:C1:DC:61:D6:A2:CC:A4:2C:C2:5A:40:8F:58:EB:10:33:54:E0:3A"}}},"request":{"raw":"GET /aicpa_logo.jpg HTTP/1.1\r\nHost: hgbrn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hgbrn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:10:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 15 Jan 2026 23:40:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13831\r\ndate: Sat, 14 Feb 2026 04:10:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13831,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 150x141, components 3","md5":"ed6b65dc5a32d52edbb3f23a77a13de5","sha1":"bc059f205b2b711317a47610067e70037f02f1e6","sha256":"6991be79030e3ec1ee0fc44bafb4b98cd85bb7c1add33aad23d95547dac1ee03","sha512":"dcb907b7d36e145283f1040a1863ab34898b414447ad5f54c5c0e52ac581a9006d8eaa6556430434570a280834cbbfb612743eb9c8308fc1855c83fa40991b5d","ssdeep":"384:EGhAWmcHEk5JkGImJgaeADVANpS2AOAZKpE+bJPRCQ4g+:oguGL5DVANxAO6KpE+Rv+","tlshash":"34529fb25933af56ba144d4803b12d59000d4b2b579b0608f6becf8bf293d6f643f942","first_seen":"2026-02-14T04:10:34.351562Z","last_seen":"2026-02-14T04:10:34.351562Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hgbrn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgbrn.com/favicon.png","fqdn":"hgbrn.com","domain":"hgbrn.com","tld":"com"},"ip":{"addr":"216.252.233.10","port":443,"asn":40676,"as":"AS40676","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hgbrn.com/","date":"2026-02-14T04:10:08.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.hgbrn.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 18:10:18 GMT","end":"Wed, 15 Apr 2026 18:10:17 GMT"},"fingerprint":{"sha1":"33:16:93:74:E4:69:59:2C:02:43:E7:91:9D:95:2E:BB:EE:12:94:41","sha256":"AB:59:4E:DF:AE:49:F0:76:A1:A4:EC:FA:92:C1:DC:61:D6:A2:CC:A4:2C:C2:5A:40:8F:58:EB:10:33:54:E0:3A"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: hgbrn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hgbrn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 21 Feb 2026 04:10:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 16 Jan 2026 00:14:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28957\r\ndate: Sat, 14 Feb 2026 04:10:08 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 234 x 245, 8-bit/color RGBA, non-interlaced","md5":"990352b87641c0db6381ba9dcc1ddb8c","sha1":"6d7f979fe4e374c3516039fbe51aa46bf1d70d1f","sha256":"f2bb35bc7ff99f622dd4a6e270c88fa674ee184173bc85d87db88927b4305843","sha512":"8edbba4d4a09400f526e60f5e6ceb572388813c4a6a6e6e2b680f4b418d41dd17fa5a069e368f9177d889066f9560b7fd2dc79444bbc6df71db43d6afb748a13","ssdeep":"768:ALSRy+KCuw9XpB8iMMSbVbflDaMM1OuNxjmVJ:mSRZuczd8ZbfAROOxcJ","tlshash":"84d2e1b66bf99b39b279828e27d61b30b52ad14b68081f2313310abd5657b3344d13b1","first_seen":"2026-02-14T04:10:34.352535Z","last_seen":"2026-02-14T04:10:34.352535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"hgbrn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}