{"report_id":"8f81fdcd-bbb4-4296-9bd8-ed5dfa5aae3e","version":0,"status":"done","tags":[],"date":"2026-09-30T19:00:42Z","url":{"schema":"https","addr":"heliostb.com/","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":0,"asn":53667,"as":"FranTech Solutions","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"heliostb.com/","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"title":"Helios Trust Bank – Bank You Can Trust","dom":{"size":1482,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (422)","md5":"f4f3b94d6248f0805a902a893951703d","sha1":"98e50bccee025ab1b5e60f530c7c29b23ad64960","sha256":"8d8ce43b5e8abfd3cdde1b34fbce47f15bf2351e47f7cec832c36486b9726611","sha512":"14a67114bfd8931ae130a493becd51d8cdfa5fa1d95fe373cf31b50a43ff9d46459870eab0037bbd3cf04aa89183ab5180ff927ca6180e1780fa9551d7c4e171","ssdeep":"","tlshash":"4a31b0e2f287744a7111c16090e1f2382f3ba148b7059d66b53077337fcd685e8b29e6","dom_hash":"domhash86da014b45e09612671eeb44e66037c6","first_seen":"2026-09-30T19:01:15.483642Z","last_seen":"2026-09-30T19:01:15.483642Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"heliostb.com/","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":0,"asn":53667,"as":"FranTech Solutions","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-04T19:00:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"embed.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-09-28T23:10:56.947134Z","alert_count":0,"request_count":16,"received_data":750375,"sent_data":8103,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-27T23:14:39.019501Z","alert_count":0,"request_count":2,"received_data":42773,"sent_data":998,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"vsb102.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":965119,"first_seen":"2020-06-04T14:08:54Z","last_seen":"2026-09-24T11:30:21.562575Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1103,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-09-29T04:32:28.101426Z","alert_count":0,"request_count":3,"received_data":6275,"sent_data":1674,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-09-28T08:31:53.906774Z","alert_count":0,"request_count":9,"received_data":1091371,"sent_data":4787,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-27T22:44:07.016679Z","alert_count":0,"request_count":7,"received_data":187115,"sent_data":4354,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-27T22:45:36.707646Z","alert_count":0,"request_count":12,"received_data":476216,"sent_data":6786,"comment":"","tags":null,"fingerprints":null},{"fqdn":"heliostb.com","ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"2026-07-10","domain_rank":0,"first_seen":"2026-09-30T19:01:04.297174Z","last_seen":"2026-09-30T19:01:04.297174Z","alert_count":124,"request_count":124,"received_data":5751392,"sent_data":63029,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"Essential Addons for Elementor","description":"Essential Addons for Elementor gives you 70+ creative elements and extensions to help you extend the stock features of Elementor page builder.","website":"https://essential-addons.com/elementor/","common_platform_enumeration":"","icon":"Essential Addons for Elementor.svg","categories":["WordPress plugins"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Magnific Popup:1.1.0","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Elementor:3.35.8","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Max Mega Menu:3.8.1","description":"Max Mega Menu is a popular WordPress plugin that enhances the menu functionality on WordPress websites.","website":"https://www.megamenu.com/","common_platform_enumeration":"","icon":"Max Mega Menu.png","categories":["Widgets","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Contact Form 7:6.1.5","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.1.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/js/preloader.js?ver=1.1.3","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"78089d80119e2bc6d05d847111a4c4c0","sha1":"c4b5d04eaa1e4491bd89a187592318847701bb21","sha256":"cd6f60d498f53962a87dbac998db7382b03380f7bd8156032caa5a6ae85c3458","sha512":"f6a902bcd877852cc131793a9479d65783b5feafbd4f1c999e6d7729224823b2fff158467ef85cdd31505c699f61ac734e8fa1d9894417874900d858a6dcd0fc","ssdeep":"384:hlRTfWNC/ikuTRaXhEQZ0jTY51MHNVNUEM7IjaPMHCfYrXyA4m5FZugNR:fNfeC/SakTnHupQakifYjx4mBxNR","tlshash":"2ec274d87182f0d68bc25125493f930bf27aad11344ed440e16af5e1bc78aef91a7e2d","size":28119,"data":"","first_seen":"2025-05-06T13:45:08.247935Z","last_seen":"2026-09-30T19:01:15.549588Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/jquery-ui-core-js-before","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3dd12b163dd61231e56747ad3cc6ed9","sha1":"b4d4bc300f5fef6e8e0b673769cb628991927036","sha256":"79259e9d9abc9fe12b9136b38e34fd135a8f26b58611349af2dae71def29f34c","sha512":"c530d8184014157b51ac232fdb1a8255e2c3a5a0d4394a057737ae31201b3a4c53c16f5f7c78dd347a950802efc1956f8a924067b251ffa67b1b9e2057097462","ssdeep":"","tlshash":"f74111cae2e02028b0b008b28ea00288b02ab2a8e2b200a8b80a080808308008002a0a","size":1892,"data":"","first_seen":"2026-09-28T07:22:32.932698Z","last_seen":"2026-09-30T19:01:15.828531Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/phosphor-icon.js?ver=1.0.6","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4efd5465ca7bcc7a7a384504c92cfab8","sha1":"bcb946f9be3792ae50a6ba3aef994da1ac30db6c","sha256":"015944145b932205b56cbf0e27eaf916960cbebda3332a212339b4c65031c268","sha512":"37e7fe846b6fedc20676cd460b6914d4946fcbcc65a905f4804389ab518f6d9bca7dbccdf3788cfd33849a0766bf612690379f4d2cafbc1170312fa8bd2f3b8a","ssdeep":"","tlshash":"e9e0262a51f28652aba740c7f4179626f490013da40ded01d1c9c93eee68daa30fa768","size":353,"data":"","first_seen":"2025-10-29T16:32:19.656873Z","last_seen":"2026-09-30T19:01:15.616764Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/ScrollTrigger.min.js?ver=1.0.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba1fa78eb4bb49f8a0eeaf8e61708840","sha1":"489bcf6d9c69f0f29f871e0323510c5197859bf5","sha256":"ad33c2df9ada8a663c2147357828f980d0b7ca731ef33eb3c6e4f327c3b2cda5","sha512":"a2731344a2412b3f0cd539eaa83b86065a30947d28845ccc5d844d79bcfec8e71ce5342bff300ab2d87386ebf4862c942848901105c4ca79d70af3533a4e7476","ssdeep":"768:L+5LHpwfVyb83wG/B/nE306RAHdAIsxmAK31horUp45:apqgo3wKB/nKRAHOIKS3TjK","tlshash":"741309ca3244b03267df627aa52f030a733654d9291e4464f266e4e83c7d5bc873be6d","size":43380,"data":"","first_seen":"2024-01-19T15:55:20Z","last_seen":"2026-09-30T21:47:14.828624Z","times_seen":9227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/js/bootstrap.min.js?ver=5.0.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d7cb18be275bcc1f33324620dca9517","sha1":"cb71df7f175c1b3ee8d642a0efde2e742a142f46","sha256":"c938e1227260834371896291dd5d28e98b5743ec952b721bdf791744ab06810d","sha512":"032d8a984981de805b197e8377aacf6296fc33491b035015d892d13d5922b811dca07ad1eae87f185d28252f0c04a76bcc8acadd508db6f25e8fa0a3b38b886b","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU07P:HwORx3YCD45wZbDZTb0gP","tlshash":"3a73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80672,"data":"","first_seen":"2024-08-06T22:16:53Z","last_seen":"2026-09-30T19:01:15.590164Z","times_seen":1070,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/js/main.js?ver=1790794259","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"296f70b1cccbfa18033a43519717b4a6","sha1":"a7c76a2d92a73cdb610a6a0ec7fd875e7059b8a8","sha256":"917e21164b67a6ae82c462b99001be145b0076aac913cdcb928fcc24cb1589ce","sha512":"45b8d5a32299a8b237c79fb8b9013e5c01bcf0b0759681d95f5ccfdf7501848b8675ffe9e6418106e340a32a1e6ca9963adb730e0525d7a365f1d4f4bffbd50a","ssdeep":"96:2gNE2lN7Sds+IKAPHajSKAPAL/r446olNmFIvGspEhO7xi+/R+ltXl/shUm4+gED:PIsNHkcALD48Nmrl9lUhUm4+gFcd","tlshash":"610299167cf265a1207ff02d6befa554ea26010f8209db117d9d4bc40f14374a9eeade","size":8728,"data":"","first_seen":"2026-09-30T19:01:15.559795Z","last_seen":"2026-09-30T19:01:15.559795Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.5.13","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2994d9f50b0c37ffe180e9ad8d4756c6","sha1":"f7c8662f4d02e20611c07ec820cabaeec6e5fe58","sha256":"fc5476bc2167aab6445fe97af36555c70f2cd9dfc5374b68b1f3b77f6427f5c8","sha512":"c4bf8e3e750c04e16270327f18549b62604d33333b031473f95983c888c1b361e1741d19a9f325a6cf942b1329a9ab84005aff78d93de4e62b262020f1824dd9","ssdeep":"192:4v6PbN3SLFNjilRm5ReHKj2H8gH+gwnmMQwco/0MbYrdpb9pPkx:4v6PbNiVii2KnpcLpb9p8x","tlshash":"9032f988378776f052b36025947f761ab136ab34741c8850a21ad8e06db9d8fe073f3e","size":11619,"data":"","first_seen":"2026-02-09T15:18:15.621029Z","last_seen":"2026-09-30T21:14:13.621105Z","times_seen":8078,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-BubbleWidget-CrSR8RTB.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"0bd462f8b42caa969e21b8e4b2662c5b","sha1":"14f803776bc388a796fbba503d56e01d8ed90ab3","sha256":"dc20107ed9e9fa2023e86efbde021f901da8c33316db2abc44d3453204067564","sha512":"8d538ac489bd5166473f99fc070ab022a1671d60f5460e84de80a3684cc6f739dc99aa4b97bf4c378884dc165d3ad0b2a0a3e490af7b2e2c0bbe622fa35eb95f","ssdeep":"192:RxmLK/JsCR5jGdIt0kFogZWdDuh1oIuDJrTLz7FRMVwG7xgq0THajtmXKV1:KKRHR5jGdIt0iZRuDJrTnBRaDlg5T4PH","tlshash":"a222a44ef4ad34927331898cd19b4a367a2c67116b02edf4b0166fbb039494312b6b7f","size":10688,"data":"","first_seen":"2026-09-25T08:59:34.255682Z","last_seen":"2026-09-30T21:54:54.591187Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-09-30T21:35:13.516474Z","times_seen":241331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/js/fontawesome.min.js?ver=1.0.0","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"788581f7c3b3915cc4b3a631bffc016c","sha1":"5f6f9f2c47be03ab4222b5b0466ec12538880bae","sha256":"e45a1d7590bda6cb0af56a347e979215b8854ac49d54b7091ef1e64d1aa578a6","sha512":"530702fe26b3e738875fb57a2e348a697802b9146a6d3a75407a5b389e25d67c36fdba027d9d8a94522a05403fb91545d289db4449d8f5da3caccfee4ff8a5ab","ssdeep":"6144:1yompD5cEYjS2sDVW4o3ch/V2Dnio/NULo9tRtKerVs3O3seX/YJF2S8eK8wDKSu:qD5cEJh/wtRw/3O3l09","tlshash":"4945d578d7a4a3bc9d8687b5c62110747a8f90be71a09328937dc6f0b2575dcc2dacc9","size":1194299,"data":"","first_seen":"2023-03-07T14:04:28Z","last_seen":"2026-09-30T19:01:15.832088Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/bdthemes-element-pack-lite/assets/js/modules/ep-search.min.js?ver=8.4.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"362b66000db1f2306b1c2a6b5e838e7d","sha1":"2187f9410a65aadfc05f3eb61065dd48a4b24396","sha256":"9466171ae329b34407967f437e4c75876dbbd3f0a123b017d6445b1b81194d4c","sha512":"459949f53379a224547709f5c9f9438889857022cee1f35d6213005aa08ca2c92e60928a9482f9718d1aada93c285683c645a96e6cee59c4e82fde669dfdd51f","ssdeep":"","tlshash":"8c51eb46788ab5e7317220aac3933f2d3554a628fc094645f02d51a217fbdd8bd1fe49","size":2850,"data":"","first_seen":"2024-09-14T11:52:16Z","last_seen":"2026-09-30T19:01:15.795962Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/contact-form-7-js-before","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a83e44453c4974778b53d29826a7ddea","sha1":"34a44d03483212fd1472cc2578f20817e37ffa18","sha256":"f1c96c331aac1a8d479c44af76c9d9aa98b8f0046186e9ccc2d0e6b35755823a","sha512":"0440b0afc91ae5f779447076b700b705df4e0a488be79c86321d40f3d3258f905aa8e9e86f053a12b77667e53c001064521d2f1b1b50c893c4dab007b839eea8","ssdeep":"","tlshash":"914180a5d5e81d4514d6c174017d1310b114a417c61f5e45f24d004c5ff4079794418a","size":1960,"data":"","first_seen":"2026-09-30T19:01:15.835439Z","last_seen":"2026-09-30T19:01:15.835439Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/aos-animation.js?ver=1.0.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","size":14239,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-09-30T21:09:35.87492Z","times_seen":25018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","size":1499,"data":"","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-09-30T21:42:11.050729Z","times_seen":92783,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d13f2659e06660fa42e7a7e7efa3d39","sha1":"8cd5d4897da381e2e9d9e766a36b756bb6a7ae96","sha256":"8388cc83ada688390cdc912f065179c1a721719ff8173a74c38e0e499dd577de","sha512":"d319654675c24b265a96f64a44489531bf4775a0b14cd56229f4a50d9205f1bef5c07fedf5c07643775478592cad7d26c831bb269f8ab0f0ec2a55071e272d7f","ssdeep":"","tlshash":"78515936fadd966da68303e4d5219e8d4009a114b2e84d5daa3de47ce1c1fd3adc230b","size":2754,"data":"","first_seen":"2026-09-30T19:01:15.838109Z","last_seen":"2026-09-30T19:01:15.838109Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d02cd14e8ceb0c916375357006912db7","sha1":"82682e3c11879724fad332e4705759a235b496b4","sha256":"7ef9d535824753c1d6c88dc403ef2ae3d1b7dfe2b0ae982de8fa81b8829c6dd4","sha512":"d0f7b0f8dd56970686f5b6442ad02414262dc1991dd1db041b9168a149598c1b134a5c3eecbbea36a84648660781f334e61f2a8ee112ea462e9a3906bb6bca57","ssdeep":"","tlshash":"0421581980b810a20b67723f2d6e9710a162278b9cfe3c30389c01498f2c01d01fd7b0","size":1129,"data":"","first_seen":"2026-09-30T19:01:15.840465Z","last_seen":"2026-09-30T19:01:15.840465Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3f3e47448369c2ee374d6b56d9c189f","sha1":"b4888a932d7288dd3d2678481147b4e816d4e3b1","sha256":"cbb453c748ac8ee1417a0044653bbbeed772e5949a827bc288833dd7e542c8f8","sha512":"cd7bb5c27fc5b59145312a81b0eaa66e03d35bdedd99ec248f0ad085f1e4879a0d9d10eebf850177c0be51fc6c3b07436090970b8f16e3f35ffaa08113cb8748","ssdeep":"","tlshash":"b3418f4a80b894620213723f5c2f9711a1b26b8b9cfd3d31389d45969f2d02e25be3f9","size":2048,"data":"","first_seen":"2026-09-30T19:01:15.842411Z","last_seen":"2026-09-30T19:01:15.842411Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"68ac6c2c5eeea170ffa87020475ed02b","sha1":"398b3f19f8024b84ee822fa884b8239c92c7ec39","sha256":"f9418ddbc48bcfc37d24e21244318a1536a8a9584b7fb7fab87aca2e73868301","sha512":"562d92dfe9b7384d17dd30fd01e0ffc0ed4ccb1a6321474a63afe32eea8cdfd8f20bf24b9f97dc4ef24a724db24c1f5d73f1647a2991ce0e09440e75d051f9d5","ssdeep":"","tlshash":"7a616b0884b520360a27723e5ebf8310a2a6524baceebd7539dc41554f5c02d06fd7f8","size":3425,"data":"","first_seen":"2026-09-30T19:01:15.844382Z","last_seen":"2026-09-30T19:01:15.844382Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b38e2490933b2a0120d09517aab543b6","sha1":"9cbd2229379fdb74dc0920ef8702d02bb5a19595","sha256":"7691deaa6b755cd9f7959c32b730a07b7b37a37ce12345c020364116c52f1cfb","sha512":"df068f644f77123e1f7dc73c6f13c475984cf04266b248baf211c31f9044fe65500b60428be016cb6bcee99770973b81eef6a1327e753b92d63bf8385b431cdf","ssdeep":"","tlshash":"05e0c04e3a152b31e29781970af1dd1830e03038a54d9c20dc9de80c4909cde1568f48","size":363,"data":"","first_seen":"2026-09-30T19:01:15.846378Z","last_seen":"2026-09-30T19:01:15.846378Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb723d749493893fef00de4a102d5b14","sha1":"83e4d476c5ce53d9fd2a5f07a72db8395c5be20e","sha256":"5025f2112d7c4786e6cdd0d8becf512b1a989a81c5f37fa072c3ca944ca9211e","sha512":"bac6e6754071aa4499cda15909e69619377a5f862a69a99ad4b5577143b8bcadac6ddafbd243f0754f6602063c5bc3c629027c5f767c90d71861b7952764d479","ssdeep":"","tlshash":"c411ccf3b7dd907fba9e6d66593402cd5a1d90735c110a5bfeac3575cc8442534b1d40","size":913,"data":"","first_seen":"2024-04-17T16:07:41Z","last_seen":"2026-09-30T21:49:22.498679Z","times_seen":43697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-09-30T21:44:00.595756Z","times_seen":64172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"418831f786dac29d9a9d87a2e94c8d47","sha1":"8fc6b9028331fa35c51e61e1419d5f21b93ecb84","sha256":"410cdb7d50888f5f6defd5dadbee16e690aa9a458da8c0039c3ff77daa6846d5","sha512":"b8955cb78bd3b598a5daa7453ba0fc8248a5bf6f69339a20d0eb6805197540e235ad63ec8b6863e8ac62835652d69e937aa719154acca1af6ce6e2da50492c8d","ssdeep":"","tlshash":"31c080a594e81d4514d6c144017d13107114a417c61f5e45f24d004c5fb4079794418a","size":169,"data":"","first_seen":"2026-09-30T19:01:15.853803Z","last_seen":"2026-09-30T19:01:15.853803Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ddd05e53ccd5288f2256212a325ea9c","sha1":"a6bba5f2f9ae97658a5e92fd0e66a9f07e1e268c","sha256":"683f6b63df1f717c16012b4cca4fa4db3ba764d13d7f683b5a7c0ef0df54387f","sha512":"442f68b6fba59e27b0e70e5c583ada516463e7bd0d52b34e52ff88a23386262b1a6217667e179d24d35cc8fea70e1c6d05cc4a0ef061a9c18300b9a9edc84562","ssdeep":"","tlshash":"6ab0123f94d61c54377708584437c3027433740090351445815e905029388b5514a8c0","size":96,"data":"","first_seen":"2026-09-30T19:01:15.856033Z","last_seen":"2026-09-30T19:01:15.856033Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fad6a0464fd99becdd9a48d606ca8e3","sha1":"d7b2bc83adee89a0638ed4d1a63f7c8ae83506fb","sha256":"74ffaf131bafa8bbc4958480d1fd49ebb8be8fb4c9a21b44469762063f860bf0","sha512":"2afc27ed04c0c13d9f4af4515a34ccee027615040a5bdc7bcc2cde23de3d6e97a659933324353e7a055f8f1de1a95e2f9df770b3826fe235baf5c5eb1fae0a7b","ssdeep":"","tlshash":"e0a002dba2e4616cf4b10cd28ea503cdb16bf2f5d27214a8bd4718481930d519152e4a","size":66,"data":"","first_seen":"2026-08-08T12:00:35.269099Z","last_seen":"2026-09-30T21:54:54.744139Z","times_seen":9477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"9bd5bcd166ef0ff59fd437204a113163","sha1":"3c2293ca449eea0ffd6ff30c3dd464b8ba5ea44e","sha256":"c0f8309b1679dcf8e205d7965194893d5d066612975d160a28162cfcd19548f4","sha512":"0e408234ec6446025ec239409e64c9a541a65f686e530f5ccb62ba629da5f229a96323a76a94b72b46b59ddb812450ecbf3ffc89b0a683e7ce38221143b03be6","ssdeep":"","tlshash":"d4e07d36789c0e430e611ac8951b2a55c440a173d496989c5937840852acd6137d9418","size":315,"data":"","first_seen":"2026-09-30T19:01:15.858669Z","last_seen":"2026-09-30T19:01:15.858669Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"204144be201222b0c08eaea91d29be6a","sha1":"3d1666ff57bfc79154167c839f8a0777262f295c","sha256":"81ae87b50fc12633ee8294ee4b88b4c3fc5cf52199df7d75aae719a077be3c17","sha512":"f18b36cc7347ad03a91950d8fa4d2fef782543cb6a72ba25d0d5588e6f18161d5f65f8b2f1d66470f99467cd59b7966075a1ec6a289686af474d7d7d76fccd97","ssdeep":"","tlshash":"1951922179855a7f83e39bc03a2bba17697c06268041b8e9f4ed48bc04f5965320be4b","size":2717,"data":"","first_seen":"2026-09-30T19:01:15.859948Z","last_seen":"2026-09-30T19:01:15.859948Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"b05a91e0310f66b2fafdec1f8644ad94","sha1":"e791568731c61d31b27dc1e7ebf0ce32b976f936","sha256":"91fe3b2b1f8f466187ae3d16973022f2a7ccddfeacf9f2d7d949194ae02d9f8b","sha512":"da8bf320414feb679bdc0bbdb9f7be21808ec774010f65cfc70a4bdfd815ee13a76def7f0188d8c05869955160e90836b1c0b6d6f4a12ed5af73200a3945abff","ssdeep":"","tlshash":"ce218e31f1d6aaf74893efc135677413b0584434a045bdfee5798ca92c77864260ac5a","size":1115,"data":"","first_seen":"2026-09-30T19:01:15.861095Z","last_seen":"2026-09-30T19:01:15.861095Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3f9925cb5ee49ab925b350df1811396","sha1":"7fa5e1819b6eb547eb004d8ff15999a72295c72b","sha256":"75e4bedf037ceebab0cb546b966fc736d27a5c14f1c8bc8d4c1cef99f0a5e162","sha512":"0f78c7bc49602fb317df310af7d19ff21604622d4512f4737b57b42510285a7439f96c32f94a495f2c75f67dde3b2eae10f3c937f4d7c577da51fec3fae1d383","ssdeep":"","tlshash":"a2118c721c253f3707ad99a4f44637d299f45018f606ae9c15ed8508035ce8dbed3d26","size":999,"data":"","first_seen":"2026-09-30T19:01:15.862199Z","last_seen":"2026-09-30T19:01:15.862199Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-09-30T21:35:13.517094Z","times_seen":248130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/js/popper.min.js?ver=1.1.3","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2457ff14b8092f06f6d6610b202ec7f","sha1":"6465bce461e777d6871c2d8dead3f6cfbbfab664","sha256":"c86333d79746bb469e7d3fd957b4e58f05fc2e2c22033a9f523653aae6142591","sha512":"b0efc178fda43e51519e078989f0207102cb99b132d715a6e275abf485612c17cf8aa7c249aede0fcd1619f69d19d9bd8f4a81ff2193e1c556715260b131cdfc","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb96P:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3c","tlshash":"9f82a4cc3291b06643a79167a06f960eb2339979614e9410f199f2d87c70ef9513fc7a","size":19150,"data":"","first_seen":"2023-03-07T01:03:27Z","last_seen":"2026-09-30T19:01:15.699032Z","times_seen":536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/essential-addons-elementor/eael-2315.js?ver=1757519183","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"879aca302d28ec6db1eeb41f503f1cb9","sha1":"fda05a4865ac6a0e24c3ee80341591d0f3852c3d","sha256":"6bc37313732405c9e6fb7bad2e3d7715b99cbf83ae9871ab6ba2b6efea17b2dd","sha512":"cde3e1b19c32053a4605e96b600377f584533f4d09c27d0c5aebd54b3c89335b12539e8c13c2812aab7f326ba84b6fd23eacafd23b4cbe9e011d514deffa4cda","ssdeep":"96:T01OIsEeCLiO7MQvLBVQYBVMcsuazjub96:kC2VTYeI","tlshash":"32d132947fa3a7a5d3aff16aa0ebe02417720518db05c8c0b2f4c1a05d589da35d3f2d","size":6540,"data":"","first_seen":"2025-08-16T23:38:18.822019Z","last_seen":"2026-09-30T19:01:15.723827Z","times_seen":420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-messenger-components.es-CXRrtReg.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ed6ca00f1050102e4e4ce885305432fd","sha1":"d6104b463664341a070f5d9f5af146097d4d5eb5","sha256":"f6dd6cee58e0ca61447eef9bcb6b752f2f088532a03505219576ef56c108fa68","sha512":"8d2eb35e39c78bf82763f82f64dd6454bb328d7e2769490aaa80e04ed1d08afb1597d08852868ba9c834fd774ae26cb88842cab4683aa06540771ac0aa02a9c8","ssdeep":"3072:ee+mto1mo5Ar6VKkOPnsM5KiYXAIoOoc5shON:ee+mto8o5Ar6kfKicoOoc2QN","tlshash":"d1245bd4f68796f8d5e6db98948ba202336e12766df4c4c0d0a4cfd922d0e78259ff18","size":215095,"data":"","first_seen":"2026-09-25T08:45:54.035123Z","last_seen":"2026-09-30T21:47:54.226074Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/marquee-main.js?ver=1.0.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"38cf1efd3af828942692f619be330bcd","sha1":"c7836fb3eb61f96e6c8bc0344d77cf5618798315","sha256":"feade23a47f6041e6d1008885642dd7ab7cc4f12d94b0c7191c9cf8ca55df97d","sha512":"24726ffcbe3cb351e8776e22488d2ef5b705fc99548be61ac6588a75b6ac9f0fd4d4ba7dc715a4699dcee4eb903cc915c0e557785905e27e35efaa2e03a3f2dc","ssdeep":"96:v7zVMfcftw6RO0c4xwW5uO/kFzFYejD4CHDvDAFWa3QMy9mtlHxHf2KAHfqWVHfT:vX6fcf5P5tkFz1BaWoROjiSFx/7T","tlshash":"311221d2aa613450c7db13bfd44f46864e349932251e4d7fb472c099ae60b08ab97f3a","size":9029,"data":"","first_seen":"2023-03-07T12:21:25Z","last_seen":"2026-09-30T19:01:15.672605Z","times_seen":4820,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/js/waypoints.min.js?ver=2.0.1","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"76b960ba77ac2f9a389ec251863f63c5","sha1":"f11855df8c5d301ebacda71fb767279b4b06197a","sha256":"36da2aeb58cf13dcf0e0968898a635a652b1ebad215cb49e9e9edc3a41d599e9","sha512":"96551274d9afe2010ce1d680c7692d4b141d79ddc2e31e91dfedae887d8fd0bbd53cb17a1cccf47b25060a0ba41d79144db812536f5635da521f90b76f73f4b9","ssdeep":"192:cKasXzHz9D5/6J8bvctcfqqTaEsvfikrCeexsvfip9Y8pYxprQHyQ8m8Fwmtrk7:1jzHz9Dpm8L2cfqqTaEsvCeexsvfip9p","tlshash":"6d027289760174221baf50f9d91f434aa337582cb40580bdb0d8d4ee29f252d636bfba","size":8846,"data":"","first_seen":"2023-05-07T10:09:02Z","last_seen":"2026-09-30T19:01:15.814445Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-includes/js/jquery/ui/core.min.js?ver=1.14.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffb9792c762c28c883fbda04cb87bfd7","sha1":"1d142a621d684714fd78aa415b1d13adca03fd13","sha256":"b7a27a4b4abfc300eaf7d9151afeef8df2663d98586e38f59f91bbe98ef30af7","sha512":"5605218f2ca25c9bbd553aef21adcdab3819eb7a5ce0081a411d3ca82b26bffa129b8aa7013f6d18f933fc9e526380e1b92da6c87938eb3cfa660a05b3a7a98e","ssdeep":"384:379nP8FkFv28i8WVVnh5GX0Ci+Q8LMSAQT/hSd:9P4k0vfSA4g","tlshash":"4a82e64db2467851c6e7a1a5102f520fb132a59cf00ac89ef47ccde93c7aa996073f79","size":18674,"data":"","first_seen":"2026-08-08T12:00:35.066846Z","last_seen":"2026-09-30T21:49:24.41814Z","times_seen":11208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/megamenu/js/maxmegamenu.js?ver=3.8.1","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2ef30e8542379a7859f7c8fa83c5152","sha1":"a2def334ad58ccb9ac04936af341bc9b71984c72","sha256":"a0bbeec04c54179e6f5a60b48d82b659a68f193cb3acde89fe1957cf193c6503","sha512":"dfeea716e6489e790bd15f56f954031e44c34d8eda7bf3a86a4f09b2fb145929324676131f0bf73aa12e557f580f08dea44d20186ec84d9fd6311d3dcc7891ac","ssdeep":"768:rwzhQIFi67YxisFIe27w4+TW/RyR0RMRRRERkRjRCRw:PiWW/wyuve2RUK","tlshash":"51134d8974ea19e340bfba78dbdf9064727a45a31109ce503cfc86845f8742456f7fa8","size":41854,"data":"","first_seen":"2026-03-16T23:31:18.760384Z","last_seen":"2026-09-30T19:01:15.6106Z","times_seen":1874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/bdt-uikit-js-extra","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a141d0476cfa6e9140a21e63c43fcacd","sha1":"cc500b308d944eca1379dbb493a1306885e79dba","sha256":"707634a36332b5ee42423ab6aa2f59b1468cdedc37a032dc3bebb22f31af9a13","sha512":"aa13dd7c341d8d0d7d345239c2bb188865b58a18df76f910cfc20c27b894b03e9f7303cf58e417101cde1390098f9c1753cf083daecc995c7723155498316cef","ssdeep":"","tlshash":"d9515862dc253e3707ad99b4e44637d299f45018f606ae9c15ed8508035ce8dbed3926","size":2848,"data":"","first_seen":"2026-09-30T19:01:15.863302Z","last_seen":"2026-09-30T19:01:15.863302Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/gsap.min.js?ver=1.0.6","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"47da594cbece0e34a656e6bf2490b7c3","sha1":"2d26f4c060491ac980d09ca687388d3610256eb7","sha256":"28033e449a31ebcc396e5be8b13b63152bf03094288fb5867034321927bce087","sha512":"ede1d1c1c6d890ae1df60ffab43fe68647fef9ea131f0a4d33dc28071b4f5015a6ebbcde01f142f87adda04d866a729ea1c972fd5c5e2ef22ac2f09d93ba9272","ssdeep":"1536:auJ29KBROpgAEQ9a1tgwA6NSZW3ytdKTdIwEp28Ywz7CDE:f29CakgwdNSQ3yt8eNp28YqCA","tlshash":"d063e8d93292f423039a51a1447f094bf337a958640f0918f269e4ce7d3c9ad52bbe7a","size":72214,"data":"","first_seen":"2024-01-19T15:55:20Z","last_seen":"2026-09-30T21:47:14.827866Z","times_seen":11194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/aos-js-js-after","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e57bd9818ffba1e2f2dcb6d4f2550189","sha1":"303e797f6ea97a3780cba7755ad32fc7ec7e60ed","sha256":"0adff0ad5ad44bc9182212d6cd61db2663d3615cede4ecc447979366665ce9c5","sha512":"88c679b397d141792f9880ea2fbcaef0d804736b6c0147b1737d529e7ca17a74eeb487718f4ba248fbd5722397f282452a9940a14fb7398bc17bf88fa38d7c5f","ssdeep":"","tlshash":"b541123fd4d71c54377708789437c71274337404e0751449c15e906029388b5514a8c0","size":1909,"data":"","first_seen":"2026-09-30T19:01:15.864534Z","last_seen":"2026-09-30T19:01:15.864534Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/js/jquery.magnific-popup.js?ver=1.1.0","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-30T21:40:17.485217Z","times_seen":76607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.8","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"73c07e9630db2adbba0c6bc0bf568719","sha1":"dbeb1065ce0ea1fc9fa6b9df9e5e1700a8dee09e","sha256":"f4bdadf362076967230901fdfc69c8df84957f6615dec226b99ad2abb64c2c76","sha512":"d48774149b65604aeee68cf2936bfe5c84714bab61a46a190952b595ee79ce8aa2c0549a3755768b3a3615c2b6abe0cfdc69c398a77296b8ceebc69bfea8f8dd","ssdeep":"1536:yuyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:C+uhIAu","tlshash":"cf33d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","size":50503,"data":"","first_seen":"2026-01-29T11:04:52.803648Z","last_seen":"2026-09-30T21:40:07.984093Z","times_seen":31267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/bdthemes-element-pack-lite/assets/js/common/helper.min.js?ver=8.4.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7acb205ca5baa604a6619ebbfa52f598","sha1":"bdf20eab2eb9b2c10d507902a02ec8a86ba90466","sha256":"1041b2fec542406ff8eb166529ea73d8c6bfc97e6e2feb6c760fcc412e796dd4","sha512":"86d44fcdccb8a31d681dce30fb9c2a26ec8d10023f3338233600b458499e7e118abec4146fb8e2f0db5088ffb097ecf322f4c8abe043bef9fd28f9cdd677df9f","ssdeep":"96:DLBk/UPMKAihjNnasZr7RZbWg2mu5u1X1DY8Cecpl9lHVRipFQcGN15hS86lnsvn:a/UPMXihjNnasZr7RZbWg2mu5u1XNY8+","tlshash":"59a10201b95f24f51ab71052d57fa7297caa2ac5f1404ec0d6f9e0711bad6c62122f2f","size":4714,"data":"","first_seen":"2025-10-26T18:50:50.363467Z","last_seen":"2026-09-30T19:01:15.49375Z","times_seen":1260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.8","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cd57e8cc70f6a9fc319c4c45fef6134","sha1":"883fa4ed0f0e114f04e7af8a8ad3a0964156c690","sha256":"fd9ae84b4655a6ff4bc18628d0dedaa835d10b5d6ea48455d73523c8b34e34f6","sha512":"57d47442aa77d546eb854717c1c9c30c1197f3aba0948709dd1ad3528c50d17d0b61e7b791fecfeff9e4d7c2ceeb370b3cc7fdd6eea563ce3db609c7ec2d896f","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDy9l8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNW65RmH0IW9v7G/2","tlshash":"f7c172941a54fc2b21e139d8e00ba735252ec0373c1af981fa32eced54e4fd183aa531","size":5722,"data":"","first_seen":"2026-03-03T15:30:23.231417Z","last_seen":"2026-09-30T21:41:57.283444Z","times_seen":51804,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/essential-addons-elementor/eael-2119.js?ver=1759499134","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"879aca302d28ec6db1eeb41f503f1cb9","sha1":"fda05a4865ac6a0e24c3ee80341591d0f3852c3d","sha256":"6bc37313732405c9e6fb7bad2e3d7715b99cbf83ae9871ab6ba2b6efea17b2dd","sha512":"cde3e1b19c32053a4605e96b600377f584533f4d09c27d0c5aebd54b3c89335b12539e8c13c2812aab7f326ba84b6fd23eacafd23b4cbe9e011d514deffa4cda","ssdeep":"96:T01OIsEeCLiO7MQvLBVQYBVMcsuazjub96:kC2VTYeI","tlshash":"32d132947fa3a7a5d3aff16aa0ebe02417720518db05c8c0b2f4c1a05d589da35d3f2d","size":6540,"data":"","first_seen":"2025-08-16T23:38:18.822019Z","last_seen":"2026-09-30T19:01:15.723827Z","times_seen":420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/cookieadmin_js-js-extra","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd22df9b9d26d02c87d3d709fe8715e4","sha1":"66a74af1c2bdec98eb62b579591f1e8b5e580c1f","sha256":"3d5e50ff2e9c0477201d449de3c2f0efafbe94746f61ffcf18198a4d5c8769f8","sha512":"4b936ddb666c7e74861f6e0c8c837e04e9785d7b8ee8cc5cd7c677a0354b6920483912de9e17cc2ea06d756d52f853257805307662442f3ce532a9eaa7cf2bc1","ssdeep":"","tlshash":"aa515836fadd966da68303f4d5219e8d4009a114f2e84d5daa3de47ca1c1fd3adc220b","size":2845,"data":"","first_seen":"2026-09-30T19:01:15.866133Z","last_seen":"2026-09-30T19:01:15.866133Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","size":5791,"data":"","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-09-30T21:49:24.410574Z","times_seen":15658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/elementor-frontend-js-before","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d112f65c4a2493f3ad1871a45be5d1d0","sha1":"a8776d65683836e288abcfe0cd2a9a9ac98b6372","sha256":"d8a0622bbaba9e721717fc8238168896e36e6166fcc4f1b9f45372afbad57f3f","sha512":"3d258b18388a27766c5ca0baa3767749aa9458045b3cf23c0b5b979f71b1aea44b9ccf6f98e60454ae34208911aa43f251ceb5ceb40d4de6925aa8558ca24fc2","ssdeep":"48:q4AFkPuRv/1rOZ4dXHpMut3IZPeCWP5JixJBtTHP/U7/qzGRHuDOMWELHhyHnyRN:q5qPCuUUeXRJwJBZPMDROLFyS+s","tlshash":"a7919321f9455a7f83e39bf03a1bba17697c0626c041b8e5f4ed48bc04f5965320be4b","size":4553,"data":"","first_seen":"2026-09-30T19:01:15.871565Z","last_seen":"2026-09-30T19:01:15.871565Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/bdthemes-element-pack-lite/assets/js/bdt-uikit.min.js?ver=3.21.7","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9a3f6f2eb439a49c5a5d3bddc9c1322","sha1":"5a665ee35237f6311105e27493a8fcf700e5f5b2","sha256":"8a86da2c64b0385b1cf8388405ba9f3bf0a38a69e931430bd455a239393eb657","sha512":"7a0977fd1ed07ec4adcdfa9e0427cd04834ee88c63dc772f79ecd764ce45c27079898d936a14e1459d6dd9507b76a494dee4fdff87c357a22f4933f8111d454b","ssdeep":"1536:sUUImH5rcQANFkizG8wSdBPDNHSC68BdThNqt6IEYi5tywT3AYNSJKxfpEldXvXH:ZF+Id/NN0E+YNSJK8R/y9ngXPVCXW","tlshash":"f0e31b9733a5b01243e741f650ab4a06f33a5588b40784dcf67ca9ca38aa44671bff7d","size":147237,"data":"","first_seen":"2025-06-30T21:15:58.325484Z","last_seen":"2026-09-30T19:01:15.722952Z","times_seen":2761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"40b190197972f90952ef739ee14f399f","sha1":"5e01ad08c9f3f0ba4ac713659b50bc16d9b7b30c","sha256":"31221af1d83929893b9af21230ee74db9a54246e0d77579f892500b86ebf9d5d","sha512":"4b4f40cf51b704b972d2da13a86de4f911d558e0f2cd53469ce6f77ee9bf614f46c544e861eac698f21c7a1820fcb9a76b3d44e63978809c86097e0b8ee4b6f4","ssdeep":"96:IrsjXHtHRANNTDmgMjE0+eWjQPHgRhRU4omJq:8s7NAME0+eWjQvJBX","tlshash":"f2a18559eb7938db33fa01f2653a4d47eb614436e684d038c9ae631424b1893c375a5a","size":4912,"data":"","first_seen":"2026-09-30T19:01:15.876488Z","last_seen":"2026-09-30T19:01:15.876488Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-30T21:35:23.704475Z","times_seen":982234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/aos/2.3.4/aos.js?ver=2.3.4","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3718e34eeb0355be8e3179a2e2bccb7","sha1":"850ee2e5c9fba610840137c6c4e92b5abbc428fe","sha256":"a5005b2e414770fd5ccb40bc221a12771966d02b5c1f9c89da48bd8e3811d377","sha512":"03b0189357c6297e92d92b07cb098f92b9f34d91eb822553ec671090b1837b67afd1a59bf337a3cadcd2f308e8ecf1845caa893ab8d0e28391b678a6211641b7","ssdeep":"384:3IJfNa+yGZHbXPgJT7UKEgMt1sH6GCZy54:4JfNa+yGZHbfgJT7URgesaGCZy54","tlshash":"d162e8dc3691f0a617a790f782bf600ff2f04874245d9090d269c4e63eb58ae8673e5e","size":14690,"data":"","first_seen":"2023-03-07T01:19:08Z","last_seen":"2026-09-30T21:54:33.23151Z","times_seen":11037,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-BrandingWidget-MJiLQkQP.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"09a8a4df0fbc87c70a3579eb083e45cb","sha1":"eaadb2ae4b49e5ce917ddeaf7fc859c6bbfb8dd9","sha256":"e51ee752f7c29f39ca4f4a911150c3345f92808c4fd3ae18a0b58d7a3d473f4d","sha512":"f08ae1af034284ca5f5c0a6d3474f1e10289281a915f5955648bb1a51edae305c44dca5a6ac9f43efac504837d44ec8d919f00aaf17f980a62f57939ddc40177","ssdeep":"","tlshash":"a671e70ff0eab4e5f335510440eb663e947e1b0887758df5823baca22354dc290b7a76","size":3526,"data":"","first_seen":"2026-09-25T08:45:54.071971Z","last_seen":"2026-09-30T21:54:54.662769Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"83e9b29f0086bba50d653f1cb8dedc3c","sha1":"f8f89387c9aca9d524bb638eae457d4659efca52","sha256":"2ac3af00c283c0b2ae6108fa83a2053e51274a2a812fb063916cbe19bc4f96b5","sha512":"c8018876ee96b4600ae32342ec6d21b452ad4109d605fb838f146b734de274ef5e37179567a2c67ec828dc1b673364637fc82e7dfe8f7adbb18e20555577160c","ssdeep":"3072:pJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/Yvr:pJLC4dkEUYnafpl9v8cIWybV4y+oGMMG","tlshash":"fce3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","size":143709,"data":"","first_seen":"2023-03-14T09:12:04Z","last_seen":"2026-09-30T21:41:57.275592Z","times_seen":110232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/ScrollSmoother.min.js?ver=1.0.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8bac2d9304f00cd4e0d1917f9ce56b5","sha1":"79966c006a110e37edeafaf7813d5a27076e7cab","sha256":"fe5b1daeeaa988a60746bf2b1dd060f4921cfc20e8b9c939c8162a8d1677ed21","sha512":"bddce9b188be3ccd7f75aad1bf2c980db7f886f584b6c91a6e86c840af85cbdcd537fb17318ef9262cedb07b7b4d1deaafc2ee25b57e268ea582bd39d91b336c","ssdeep":"192:XVcjw7J0A+d6JEh0DATFAT2KACXp40IFwdljI8w89SjL3VbpJqyQ7R1cTPHM:b2QjDWxKAC46M3FBpNQ71","tlshash":"e342c6a93245b0220bdf017ac56f6706737154994a1e4424ea28bcec3c7c62d5bbbfad","size":12059,"data":"","first_seen":"2025-08-07T20:48:21.725654Z","last_seen":"2026-09-30T19:01:15.811177Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","size":8481,"data":"","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-09-30T21:40:07.884108Z","times_seen":164664,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MinWidget-DFrnenzP.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"792fff828f71afcb92d017b5421e20e5","sha1":"3609d3920c7c8b297a3283b81748e35ee0dfeb6b","sha256":"0f7b7085c1b8777d04101b7c35ded70447916b7265e2e57c6ef56a5226c27b2b","sha512":"f393ababd92b25ced8d206d2404a54bc8157eb47cf7afd9fd29ddff7b23b8c39d4aa27e0ebf521eff48496b681eeece2acf6e2350a0e113c2d5f1663fbe13455","ssdeep":"384:hA5ZA6nHofI+waonyDkyqnisaDf8R3G5xlXkuEm8ZOqs:65u6nIAHvyDkwUAbk9Oqs","tlshash":"54421966f288a169c734c28590c56d7c222d03b58f908dfaf0b5ae7703d5dc8647ab7d","size":13016,"data":"","first_seen":"2026-09-25T08:45:54.098851Z","last_seen":"2026-09-30T21:54:54.53598Z","times_seen":272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/counterup.min.js?ver=11.1.14","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffa1c1c1632e8b1ef25ae00ed94385c0","sha1":"d41504626fcbcd03e5b44b4c8f7d8b02d56ea1af","sha256":"896688d966de7f514e72b6c5b156de3fb6dbfcd61436e6db46ce3b0e4f52426a","sha512":"df18cde2a7c51bbc3bbb1496291cb8977e3e1d565f7316b85b94719fc4017ab3d3edf1e18292d8314b902187e3eac4477f8ff5c585ddb66520fdf7db223696b0","ssdeep":"","tlshash":"1a4172f17e1478f30b6b24aa04390042e9305ab4227364c0ff9ea92614652677dfff39","size":1928,"data":"","first_seen":"2023-03-09T22:10:28Z","last_seen":"2026-09-30T20:03:36.39948Z","times_seen":2914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.8","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"070048edd0950b156f2884cc6be49958","sha1":"f7df7a3692aae24b0d9bcfce4f436f9154fc4478","sha256":"a06367414e21ca690b7be3bad14cd62dcd8c35683b88cdee2050aaea11f703db","sha512":"aea4a92b1164697d2d808b46fa87d5dc35a4237afd7b4adee7f92da9b51f3ab1119a9375ca7ec62f2624d7fbb89d4cc77fb034486f80dc75b42e0f8c6d9b15b9","ssdeep":"768:D1c+6idHZRdzM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5GlT:ZcURdzMMBOBjmFatJR8RjD8/xHVlEEnp","tlshash":"69e208523296e866069f48a3f0231119f3765dd9b80af0d5b2bcdce6a471e877362b34","size":31928,"data":"","first_seen":"2026-03-03T15:30:23.234129Z","last_seen":"2026-09-30T21:41:57.266998Z","times_seen":48627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/custom-gsap.js?ver=1.0.6","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"13483305be01bd0ecf26fa6fb17e662c","sha1":"4493013c2fed6bcf2a3fd92e10c2be5dc300f7f0","sha256":"145f699f625b158aa1dd3c5ba8b0e5a986e6bb0fc01b21455069aa9ec867ba67","sha512":"7a5bc05c12289733bb8ab592d8426aa41cf36c313641b9dbdb5ef028a151dd2fef1711a4235ce693cc2b67c1903fb7288d628710b0d6b43c849c729c29f373df","ssdeep":"192:QCwCp2GgG7MGhoRP48VHNd7AGedgZ90TF:/wLlR7td7fZY","tlshash":"a402ed6d95fa1c32017b27ae0b9f96ca323150475c06ed183e5cbb841f8d7ac56b0bb5","size":8281,"data":"","first_seen":"2026-09-30T19:01:15.773796Z","last_seen":"2026-09-30T19:01:15.773796Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/eael-general-js-extra","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6cbe696a42de6bbbe6cb019465ed32c","sha1":"11423fc30c4a032c2e4318496b2f79b978d2800a","sha256":"6a3f46627fd870ab3cb100baa2e44e501402e828f5d3cb0b5cf34bb3ffac0657","sha512":"c52b45277c2149cfc9962270205b07006b2ecdc292077b2e5fc0587d0363860f6b4d9174a814789c96997b1ba91f96ea5857cecdad49cd98beb45425b1dbbd32","ssdeep":"","tlshash":"0351be31f1d6aaf74893eff139677413b0584434e044bdfee5798ca92c77864260ac1a","size":2956,"data":"","first_seen":"2026-09-30T19:01:15.878435Z","last_seen":"2026-09-30T19:01:15.878435Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/elements-handler.min.js?ver=4.11.70","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb14fbc161529fa03c8910b5e561f07e","sha1":"df77c7eb4f07d038332e30bc0bf577eef4c9b630","sha256":"a579dc809cde287a3e4c63918771749c641702a4e1256bdc2ffaa5e7fd91091a","sha512":"9f9937a5fab900e1c7b5ec5dc598d7cd662329a42f3b0ab64004a75beb683cd4ff4ab52b6249b3df309b9a5b61fc2c5aa5b5c77a5b27148728552475615319bc","ssdeep":"","tlshash":"85c0ca8dbac8b20d80ec008e0613320f33228a20a0a81a6062ba00183d30ecb9a241c4","size":179,"data":"","first_seen":"2025-12-30T02:26:59.878774Z","last_seen":"2026-09-30T20:05:11.294537Z","times_seen":5954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0932bfcbc6f24c14db6ecf6a40c237b","sha1":"ca93c1dadc8581327bcf1566f1ea65125668bb0e","sha256":"f0cc6e5637c9a4770c234b6572fce7619a43ae07744c6b5b7b46bf54dd4782f4","sha512":"f542105bc75e6856f311b124d727e05eeb762d539e385316b12ea653681771807fd7642f377be1a9768b26e5c43c444731e34577fb808843d4b5cbc3a4a1078d","ssdeep":"6144:w1on1J2gFAAPvkV3ymzXLXkCQTei40OFAyN9d/y0b:wC2FAPvktTDkCQTA0O6yN9d/y0b","tlshash":"25645cd871a2743103fa59e120bb1106b33969193409c4acf61deeea3e7ad4a5277f7c","size":325187,"data":"","first_seen":"2026-09-25T08:45:54.043189Z","last_seen":"2026-09-30T21:54:54.626988Z","times_seen":340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-message-format-DKJXm_pH.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3b65489e3df378341353ddc879819d4a","sha1":"a8547609851fc4f6e9adfc85d3672c84cac94aee","sha256":"ca93c85d600a921de5746273d9bc0e73bed8be60db0232371c2f95cd9dab1a0e","sha512":"e23cec57ff2cdafbc120676028fb4afe24112f66ec86a3263c9994032a595897715885d4018fdc81afaf0d5cb8c3e7b3babf9f64e909dd6c772500dfee984472","ssdeep":"96:vEE1QwTybFyqrWvTArxxmCeac6tBXKvC2CaLsCawwD7CZfdME2IIo:vr1QwatWvTArxxm2c6tBXKvKu9LZiE6o","tlshash":"d591d682f190a04243b03a1079da4921f07bea4badd59b15d659b813ba36b0b58f7bdc","size":4539,"data":"","first_seen":"2026-09-14T08:43:43.633565Z","last_seen":"2026-09-30T21:54:54.795351Z","times_seen":762,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-30T21:35:23.658137Z","times_seen":1075068,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/elementor-frontend-js-extra","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7455e41133098c1d404eb44674c265b","sha1":"e7e20f2a86bc9a4ed1cabd2dba750387903581c3","sha256":"a0ca50dc47ac9ff65b9e30213a2ff08e772c8fe7e494ba1a9bbd35be42d76cb6","sha512":"4622c6939747cecab63fa91648cd4af210b1271382597b4b2f00eda900b176561aa0e678e6b61fa867e3b41037356cba15cd848fdc7d7c66a3c216a0e3f1df47","ssdeep":"","tlshash":"70417d36f89c0e434e611ef8991f2a56c440a173d496989c593bc40852acd6137d9418","size":2146,"data":"","first_seen":"2026-09-30T19:01:15.881563Z","last_seen":"2026-09-30T19:01:15.881563Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5107,"data":"","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-09-30T21:49:24.291136Z","times_seen":15872,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/SplitText.min.js?ver=1.0.6","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a154fe1f45d095e1f418f5fdb0fe9958","sha1":"74137608e6a8a64bff9d23b405a1c270201497f5","sha256":"ab6e9e2f7f2905057042654d20be71f458ef4e8391c39940596a3710707d8dff","sha512":"4fd0c74793cd770534e3afed42aa2306b92ef395399e88d16dc27c4b91a37284ccddc9c44f48773c91842709aefd125743f64c96742c296db1571518e0005acf","ssdeep":"384:trEawZ1w8LNjr4lQWszZus4/CaCKgiLE6:7wvRmj+aCKgiLR","tlshash":"5a62a5b010316f216572125789561b1ff0a8490be923da37dbacf0ad7340935ebd7af9","size":15588,"data":"","first_seen":"2025-07-09T14:33:26.481681Z","last_seen":"2026-09-30T19:01:15.808365Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","size":1348,"data":"","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-09-30T21:41:57.273597Z","times_seen":139649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-30T21:42:11.028056Z","times_seen":65456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MessagePreview-KbNQqIX-.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ec0736224b16cd4c3c1504f06b8b79fe","sha1":"b05896bd4f8df58b5606dee7965f4d13de1100a1","sha256":"4c02dab373a3b0ba5a24f333cf4a83538c9a9c756cc776d52acb000e4b831043","sha512":"d50f077c11522ab690f78cfde45f9cb91014dd4ecbfa0ecbf830c414f8aaea93e0d538de4d6a2b89bf85c4d0d5e85fd328a42afb18701e01dc379a6fa122bcb2","ssdeep":"192:8cfBABqWkgk3rOQeOF0N30SbX3kXSKC4qUuKQfvrYXL8vNRywfCfxVYEx5uhbQ30:8YBtxya0NNbXuC4qUufsXAv7ywfjGwxd","tlshash":"25323b1ab2a8683c933786cab1cb6625731c1f305612d4e3f06d5f9f1365da810d6f2b","size":11206,"data":"","first_seen":"2026-09-25T08:45:54.033119Z","last_seen":"2026-09-30T21:54:54.585514Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-iframe-styles--AKXn-6M.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a5911fd0628b3cf5cec05686e05ab9d9","sha1":"8425eca2130d070fa14f6c4f10a598114b55e059","sha256":"1201d8d289332d47312fab8f697cef54c6d442ba048130d8a5da9072b3573105","sha512":"fa28703ea9d3cc47a30ccf066ce8b7af7e372c145148df990a6caa89ab727c79acf72b293d13b0cd36a2f7b73bcbd18b25e3705eace8d6ea7df2aa1d2cb33f9c","ssdeep":"192:VJLb83BvkHM9NiEJqisgZLvk+5/+qsqXf8utWAEIU5UyWkS7D/7df26G2Ld8AAH:vb8xwMTqils7UWAEIU5jWkS7DzdNG2LY","tlshash":"e302c522f3df3065b2148a4855f7fbb83e2d61216f518df129a4bb391b84ac62021f7d","size":9008,"data":"","first_seen":"2026-09-14T08:43:43.604039Z","last_seen":"2026-09-30T21:54:54.803744Z","times_seen":780,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/cookieadmin/assets/js/consent.js?ver=1.1.6","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a47e8386854876856ef0e587a2e6782","sha1":"2cc29717506b087dda1be28152b68574daef44a0","sha256":"532fc201251dfb0c7d015b20f64c3e6b595fd291be0fc78ec971247b12baa2fa","sha512":"0588fc4e8e6b5468a9e327d00838960533e1290cf751b87e28fee61cf764bdfffed7b252bbe368fad5be7125d415e3a1b4db7d3f79be6442a49ab49e10abaeb1","ssdeep":"384:tIsxr+Jymi2vIR/iF/iiO45iJfiT3iqJklrzKCNXd4w/ibfie2ij8ivfiW7Bfijh:t7rFLR6F6R4AJaTyqJklrzKCNXd4w6bG","tlshash":"3592ffa4fedc962c00e912f9d56a5689b52c5032f845a89e3f3cb4f48ad0fd38cc5a57","size":20872,"data":"","first_seen":"2026-03-15T03:53:51.074317Z","last_seen":"2026-09-30T19:01:15.68755Z","times_seen":473,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/68ca719fba858d1923b1135e/1j5bcnm6s","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"63f678a6736f08b6e29da444d2d20644","sha1":"c693cb4560718b700293c2ef9643fa0ea2c798f1","sha256":"a2f83c8fe35ad9d2eeda8eaf230ab3b869dd8ff2c4061098d40b43e57a25da34","sha512":"710d10c307c97b55d2e49d1b48c7680f120966aae11b39f3ab3f43c0bb7083c056ba67217dc3636837998e1325b9825634df1ceaaf94be68ea7731424bc36795","ssdeep":"","tlshash":"15216af57e1a2137ea3140d91faafe083472429b040c1cc9460dd8d53a5077a171aded","size":1159,"data":"","first_seen":"2026-09-30T19:01:15.543792Z","last_seen":"2026-09-30T19:01:15.543792Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dd361b7473936c5c8f5bf661c323973","sha1":"5c8f2bcac20956a31c9cff999d50b99f9ee8f9fd","sha256":"55922883b583583787dd3e36a6ee97b5bedc12eec38a24b6bd271d53b8ebf1c2","sha512":"4181a000ecc679d08f6cad5ddac0283744c6dcb07822a19d2552105e4a9191f1baa4a1590975a71325c56714a37084f8122afe463170ce54b5a56d1a1c7780c4","ssdeep":"","tlshash":"a4f05c7a70d278ff200b44520a97105de6a81cf5012961417fbd44382a75ea4a23139f","size":449,"data":"","first_seen":"2025-06-30T23:09:48.860419Z","last_seen":"2026-09-30T21:40:07.894457Z","times_seen":101126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-i18n-js-after","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a7e805949119918942aeda4cdfcd44f","sha1":"fe21e1169aca9c0e3fb7c1f8d80a35220eaf7ef9","sha256":"482767d91cf96a73a0c2d8039d052cd127acb9ce8f5a3d768d958131bbe02bcd","sha512":"6b94acdf6f94aa96730cbcb1674db4b044c9a86573a2d74b340d5c79d3b2de24000b6ee67fa409e8142ec9d908bc894b0ff64ff36999c52cf582d2eed29625f7","ssdeep":"","tlshash":"f04112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":1883,"data":"","first_seen":"2025-12-05T03:07:50.956857Z","last_seen":"2026-09-30T19:01:15.897717Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/main.js?ver=1790794259","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d73f3216698e6fe044ea6e60862e4df9","sha1":"854680624f5b83ed3acd71e38a7f5f2cc337ea74","sha256":"a3b28e09341edfb3baa999cd289ae779b6248679d4246712c46af0948ba70b82","sha512":"48d3dc18dafafc1185abe7dd4142b15aa589f8c0888eb778054f44c306363c1f4c7b595ecf291790633dede706af412c84194b969e012858f1f29e389810c3fb","ssdeep":"192:A0MeXl44kpw9yccWjU9M/iCBKVSHkCcCvxqfPlcSj0avtaLqXCqsv:A0MeXl44v9z9Cj0Wt+","tlshash":"94521149a0b32071057b742e2f8fa1107476114b66a8dd34389d47d90f6e72e43babef","size":13479,"data":"","first_seen":"2026-09-30T19:01:15.747261Z","last_seen":"2026-09-30T19:01:15.747261Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://heliostb.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981},{"level":"error","text":"[Tawk/Session]Unable to store cookie","filename":"https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js","line_number":25,"column_number":25052},{"level":"error","text":"Unable to store cookie","filename":"https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js","line_number":25,"column_number":25655}]},"http":[{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/payment-method-img1.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.964Z","timestamp":1790794257964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/payment-method-img1.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3352\r\ndate: Wed, 30 Sep 2026 18:51:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3352,"size_decoded":3637,"mime_type":"image/png","magic":"PNG image data, 161 x 108, 8-bit/color RGBA, non-interlaced","md5":"0fa5d0b304cb37327ecf21853ca21e6c","sha1":"dff0f94cbeb4a414fdc1dffb8b856d51797579ca","sha256":"d6d7ed48aca52193224b393554404ae3f80c111b9be2fd700433556bee61e2d9","sha512":"7ecee7fa9a21be136307a3057b1707af994c7b33318b869374c87aff3b82e58efb548f531c8ce03a9513c71ebeb75633398aa887dc75dd3b56aa3088a7c0592b","ssdeep":"","tlshash":"2c611bc2cd02b5a135e60ed19ad541b779ae70fef075de921f052103c4a69bc07427eb","first_seen":"2026-09-30T19:01:15.486066Z","last_seen":"2026-09-30T19:01:15.486066Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7158,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":7048,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.1/src/thin/style.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:01.269Z","timestamp":1790794261269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 18:43:31 GMT","end":"Mon, 07 Dec 2026 19:43:28 GMT"},"fingerprint":{"sha1":"C3:5B:D6:E9:86:06:91:EE:6D:00:E5:15:F5:23:66:F0:7C:0C:E6:46","sha256":"0D:52:A5:47:28:79:E1:05:1C:8E:DB:39:17:95:F3:D8:05:10:86:FC:5A:70:B8:B3:84:AB:34:1E:E0:63:DE:18"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.1/src/thin/style.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: a4356aa50a171525-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nage: 583766\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 30 Sep 2027 18:51:01 GMT\r\nlast-modified: Tue, 22 Sep 2026 14:43:37 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:QeDq5RJFfL748BBhCPv7mVlSwks+YA3KOFFpkLRBwq8=:\r\nfly-request-id: 01M0GPKK4VHMM6EKHZ06B3MVTX-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85821,"size_decoded":12824,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8da44bea4949cc1139a518660885c864","sha1":"23eace9bee8d4bd6ba795b88615a789962df919b","sha256":"41e0eae512457cbef8f0106108fbfb995952c24b3e600dca38516990b441c2af","sha512":"54f5b87886bf98d90f76074dc83e0617445e0b6e709052ac09012edd1af4d8ffc02014a2e84d2797be11fd249c8e8752ffa907d4ee8f2b94493e32030e278fe2","ssdeep":"768:ziCfRFurGvcZZsAbW/whmSfO7SkYP4gXNLNdUzDtrMzeP:ziCfR4bVbhhfG+kkJNc","tlshash":"7183e0e4f5bf1a901b21d1d0238a1620bb2f922c9a461c5eeb6379cdfdca118c58dddd","first_seen":"2024-04-04T21:10:47Z","last_seen":"2026-09-30T19:01:15.487912Z","times_seen":2152,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.1/src/bold/style.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:01.272Z","timestamp":1790794261272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 18:43:31 GMT","end":"Mon, 07 Dec 2026 19:43:28 GMT"},"fingerprint":{"sha1":"C3:5B:D6:E9:86:06:91:EE:6D:00:E5:15:F5:23:66:F0:7C:0C:E6:46","sha256":"0D:52:A5:47:28:79:E1:05:1C:8E:DB:39:17:95:F3:D8:05:10:86:FC:5A:70:B8:B3:84:AB:34:1E:E0:63:DE:18"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.1/src/bold/style.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: a4356aa50a0f1525-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nage: 1162911\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 30 Sep 2027 18:51:01 GMT\r\nlast-modified: Sat, 12 Sep 2026 10:03:45 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:yKMt9n+L1X9wxjceFewjLfJd3ro+uQYNeqpoEBps4kA=:\r\nfly-request-id: 01KW4QR750ZAKZVZVPWVRAXDV3-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85821,"size_decoded":12825,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"debe807490c196adde15ebeb37781fba","sha1":"3701767a353d9270181cbc294b822cce5f47d50e","sha256":"c8a32df67f8bd57f70c6371e15ec232df25ddeba3eb9060d7aaa68101a6ce240","sha512":"0e10ab3c302ef9f99ebff03943a574f02a99def68211bc0f4fb0e5219d9e8b98d0633c4e83751e46f7bf2e9cdd50cabfd3718edc432f0460efd2e72c9366fb51","ssdeep":"1536:XeaKqhzERv84EqLCDmu3Oug/mH89BUkr6WfzA3LVUr5T5FX2aIoNlY:XeaKqhzERv84EqLCDmu3Oug/mH89BUkW","tlshash":"dc83bae4f5bf28921301d1d0330b1a61bb0d9324a946ec79c9e37ead61c2999c58e7df","first_seen":"2024-04-04T21:10:47Z","last_seen":"2026-09-30T19:01:15.488896Z","times_seen":2393,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.35.8","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.738Z","timestamp":1790794257738,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.35.8 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Mar 2026 12:15:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 928\r\ndate: Wed, 30 Sep 2026 18:51:02 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10255,"size_decoded":1256,"mime_type":"text/css","magic":"ASCII text, with very long lines (10255), with no line terminators","md5":"1c6df716953f870be76c3e88a69a326f","sha1":"55001bbb898eb7636eabd0418275a9f5aa96ac51","sha256":"1b34d4c7324321e36db5d35f05bb011238a1326f89058a4399d028d1f6c47dd5","sha512":"d2cb3f58b7f5b83fac1744e81367e6ef4e350a073aee634b85a2ad87b4676cb78561db329bb4c9da20617a1be770b0d399ca731d0dc6792fd1f37e2ca116432d","ssdeep":"192:eKTrGZCLG+tlR3080ur1R6gxrcazf7fneLG6AHRJSJ/JwJp+XuknI0:eyv0","tlshash":"a52283917d83814e1aff651b141b2a4ca1c9c4dee8b6ecd6e866130782ffec53772528","first_seen":"2025-12-13T14:03:51.781572Z","last_seen":"2026-09-30T21:42:10.942668Z","times_seen":61453,"resource_available":true,"data":null}},"time_used":2352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=6.5.13","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.740Z","timestamp":1790794257740,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=6.5.13 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Mar 2026 12:15:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1420\r\ndate: Wed, 30 Sep 2026 18:51:02 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7746,"size_decoded":1749,"mime_type":"text/css","magic":"ASCII text, with very long lines (7745)","md5":"84e9faf79071506b26972607fba4a77b","sha1":"ed2f91660e67dd1f5abe015bebede7605e8989cf","sha256":"96102022182a1acb5f4755104dd3f246c5826140767d6da628271ba0e2b0068e","sha512":"198dceda6384eb0b6f2f853252d4aa1c2e874555bc51aacff67f4158cb95a1da7c04bd3de7d460838975824d9a177312d48e8ae78f6a3e12412794449bfdd54f","ssdeep":"192:8USu7icfgjw1aGbXIOjS5MLE88slOhyga5wX2cd:Z/Dzp5wX2cd","tlshash":"b0f1dd237b37b3481567e53ea2ce2bb87275c2a5d2030dd9e4f1a218d3de9d4172258c","first_seen":"2025-09-18T15:25:21.725716Z","last_seen":"2026-09-30T22:08:59.748172Z","times_seen":32395,"resource_available":true,"data":null}},"time_used":2350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/bdthemes-element-pack-lite/assets/js/common/helper.min.js?ver=8.4.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.887Z","timestamp":1790794257887,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack-lite/assets/js/common/helper.min.js?ver=8.4.2 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Mar 2026 12:15:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1749\r\ndate: Wed, 30 Sep 2026 18:51:04 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4714,"size_decoded":2006,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4689), with no line terminators","md5":"7acb205ca5baa604a6619ebbfa52f598","sha1":"bdf20eab2eb9b2c10d507902a02ec8a86ba90466","sha256":"1041b2fec542406ff8eb166529ea73d8c6bfc97e6e2feb6c760fcc412e796dd4","sha512":"86d44fcdccb8a31d681dce30fb9c2a26ec8d10023f3338233600b458499e7e118abec4146fb8e2f0db5088ffb097ecf322f4c8abe043bef9fd28f9cdd677df9f","ssdeep":"96:DLBk/UPMKAihjNnasZr7RZbWg2mu5u1X1DY8Cecpl9lHVRipFQcGN15hS86lnsvn:a/UPMXihjNnasZr7RZbWg2mu5u1XNY8+","tlshash":"59a10201b95f24f51ab71052d57fa7297caa2ac5f1404ec0d6f9e0711bad6c62122f2f","first_seen":"2025-10-26T18:50:50.363467Z","last_seen":"2026-09-30T19:01:15.49375Z","times_seen":1260,"resource_available":true,"data":null}},"time_used":4397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:03.581Z","timestamp":1790794263581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1.2 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 26 Sep 2026 20:34:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4974\r\ndate: Wed, 30 Sep 2026 18:51:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22752,"size_decoded":5231,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-30T21:42:11.028056Z","times_seen":65456,"resource_available":true,"data":null}},"time_used":1817,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1817,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/bdthemes-element-pack-lite/assets/css/ep-helper.css?ver=8.4.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.743Z","timestamp":1790794257743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack-lite/assets/css/ep-helper.css?ver=8.4.2 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Mar 2026 12:15:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6305\r\ndate: Wed, 30 Sep 2026 18:51:02 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43903,"size_decoded":6634,"mime_type":"text/css","magic":"ASCII text, with very long lines (43903), with no line terminators","md5":"a679715fe2188e29c3bc614e5269979c","sha1":"c4f9eabf9e55e4ec762060a2b5b800e883026d7c","sha256":"52f08fc02587699982e2d7d867538855562a7a65f1de7ed21d866a3a9e84f444","sha512":"b8947f49919972e2ac47222d27dc511c0521bdf6121f7bfc36cb8e94cada8a84ff3684d4069de164e0354ca5580f4351150d9edb37c9fc095ffa9a56d9ab3b5c","ssdeep":"768:O2VVT+AgCdBeDu0ISc+R0hOFx+fCGcvcctTD8JSti+NdzrszV0GOzoiAn2ZJ:KDuc4+NdzrszV0GOzoiAn2ZJ","tlshash":"f713d0067f432068755b092fe7eb965da074b8c1f5428d9ca6e1683686fbcd8233e53c","first_seen":"2026-02-25T05:40:59.854679Z","last_seen":"2026-09-30T19:01:15.49743Z","times_seen":101,"resource_available":true,"data":null}},"time_used":2348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.743Z","timestamp":1790794257743,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"GET /css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 18:50:57 GMT\r\ndate: Wed, 30 Sep 2026 18:50:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100764,"size_decoded":3497,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"9e6b9ba92c3c07c25c3a64a82c98afc3","sha1":"3ddff674c5f9cd149de491cf5df81c1074eaf397","sha256":"3d675aa2a0daa5e5b0080f14f3335f2d7a15275badcc418deba1e740a5ea55ab","sha512":"097289d7ac1a663cb14fa54e87356c82d88f82ae9574fa4cdd23333e1a98d3e9241d11fbb3d3cf34b52bfa7aac3d625d2bccefeb40fae26970f0e20d0b4751ab","ssdeep":"768:yDdD9DADNDgBDUKD7DnDdAgTQgUUhaWWHncXgLUahdPuOJ+gaULUIIV1ClghUULD:GZQDSVUvWtALyl83uRf","tlshash":"e2a30e91041b5440ab834ce223cebf35fe1f92507141d0b9abfc9b6baddbca6526835c","first_seen":"2026-02-19T22:36:20.76028Z","last_seen":"2026-09-30T21:59:40.153316Z","times_seen":20599,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":24,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:03.380Z","timestamp":1790794263380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Mar 2026 12:15:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2511\r\ndate: Wed, 30 Sep 2026 18:51:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8481,"size_decoded":2768,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8481), with no line terminators","md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-09-30T21:40:07.884108Z","times_seen":164664,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.749Z","timestamp":1790794257749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jun 2023 04:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4678\r\ndate: Wed, 30 Sep 2026 18:51:02 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":4935,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-30T21:35:23.704475Z","times_seen":982234,"resource_available":true,"data":null}},"time_used":2341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Syne:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.846Z","timestamp":1790794257846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"GET /css?family=Syne:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 18:50:57 GMT\r\ndate: Wed, 30 Sep 2026 18:50:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5575,"size_decoded":1152,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dae80d60a41c6f9caa22ee61c8697680","sha1":"2437f04126bfea650845911690c1eff6da409230","sha256":"fb2078a48ca930d719bb8d274f512d78fdf271dc7ec05c71d657e736331bcce3","sha512":"fd3aba41ea08017a56738228ab99e9f5898921722e58180646b393a3926a4e574781a91aaeb479c0be318042d755733864a566afd0ec32f942c22a354c64166b","ssdeep":"96:aOEadePOEaMFJc+ueOEaKNnOXadePOXaMFJc+ueOXaKNnOxMadePOxMaMFJc+uex:9deYMt0YdefMtbxdeCMt+CdexMt9rdes","tlshash":"37b19bd1056ba404eb530dc227ca7d32ee4e71556499d5ba9ffe1c8cbcaac261321b0e","first_seen":"2025-09-21T05:24:14.290344Z","last_seen":"2026-09-30T19:01:15.514368Z","times_seen":521,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/gsap.min.js?ver=1.0.6","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.857Z","timestamp":1790794257857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/payone-core/assets/js/gsap.min.js?ver=1.0.6 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 27502\r\ndate: Wed, 30 Sep 2026 18:51:04 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":72214,"size_decoded":27760,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65255)","md5":"47da594cbece0e34a656e6bf2490b7c3","sha1":"2d26f4c060491ac980d09ca687388d3610256eb7","sha256":"28033e449a31ebcc396e5be8b13b63152bf03094288fb5867034321927bce087","sha512":"ede1d1c1c6d890ae1df60ffab43fe68647fef9ea131f0a4d33dc28071b4f5015a6ebbcde01f142f87adda04d866a729ea1c972fd5c5e2ef22ac2f09d93ba9272","ssdeep":"1536:auJ29KBROpgAEQ9a1tgwA6NSZW3ytdKTdIwEp28Ywz7CDE:f29CakgwdNSQ3yt8eNp28YqCA","tlshash":"d063e8d93292f423039a51a1447f094bf337a958640f0918f269e4ce7d3c9ad52bbe7a","first_seen":"2024-01-19T15:55:20Z","last_seen":"2026-09-30T21:47:14.827866Z","times_seen":11194,"resource_available":true,"data":null}},"time_used":4229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/banner-slider-img6.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.943Z","timestamp":1790794257943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/banner-slider-img6.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1958\r\ndate: Wed, 30 Sep 2026 18:51:05 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1958,"size_decoded":2243,"mime_type":"image/png","magic":"PNG image data, 168 x 60, 8-bit/color RGBA, non-interlaced","md5":"1b88000f2223400d844cba397d03f15d","sha1":"1c928202ae197e3b2a699d9e73228f4188cf7b06","sha256":"b615d2be7816e45fad95028142b9c0d9afabfd73d3c88338a53d05a2aa9e17de","sha512":"b2c07cb9b36fa4d00917f9b04d75154cf7cae46115b2417b3a9ad9ba49389eb078274f31a73b6e3da308dec88724cf5239ed60e33a4a0f9e75dc287e7831da96","ssdeep":"","tlshash":"d341ea6c6419089de18fcf90c8874fd0d9d9e757a04756443bb0781ae663fd46e373a4","first_seen":"2026-03-18T17:38:17.426087Z","last_seen":"2026-09-30T19:01:15.518304Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-message-format-DKJXm_pH.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:10.126Z","timestamp":1790794270126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-message-format-DKJXm_pH.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MessagePreview-KbNQqIX-.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:51:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"3b65489e3df378341353ddc879819d4a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 35\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4356adc49018be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4539,"size_decoded":2605,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2159)","md5":"3b65489e3df378341353ddc879819d4a","sha1":"a8547609851fc4f6e9adfc85d3672c84cac94aee","sha256":"ca93c85d600a921de5746273d9bc0e73bed8be60db0232371c2f95cd9dab1a0e","sha512":"e23cec57ff2cdafbc120676028fb4afe24112f66ec86a3263c9994032a595897715885d4018fdc81afaf0d5cb8c3e7b3babf9f64e909dd6c772500dfee984472","ssdeep":"96:vEE1QwTybFyqrWvTArxxmCeac6tBXKvC2CaLsCawwD7CZfdME2IIo:vr1QwatWvTArxxm2c6tBXKvKu9LZiE6o","tlshash":"d591d682f190a04243b03a1079da4921f07bea4badd59b15d659b813ba36b0b58f7bdc","first_seen":"2026-09-14T08:43:43.633565Z","last_seen":"2026-09-30T21:54:54.795351Z","times_seen":762,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/css/nice-select.css?ver=2.0.1","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.522Z","timestamp":1790794257522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/payone-core/assets/css/nice-select.css?ver=2.0.1 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 873\r\ndate: Wed, 30 Sep 2026 18:51:00 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3647,"size_decoded":1201,"mime_type":"text/css","magic":"ASCII text","md5":"0ef969f18a4b8d450eccd4eb248f29ea","sha1":"49764c411c9137aa155ce688b76142fb678097ed","sha256":"8e07506b90e53115f30029706f7cae8afccd55ccbcbd825ac44c9a586eda9a6e","sha512":"be68dc2e2d4b325500d419f0655b19c6c7f33ca97944108892ba8b2ac6fad734a447984289658021b317fd4d2bb72ba38d1edf77f70b415b08684a5e9da78584","ssdeep":"","tlshash":"9671f0799b514505313e86afabc23f69233dd1026826c8acf7e1950f0f4e6cc889635b","first_seen":"2025-06-01T09:33:39.132616Z","last_seen":"2026-09-30T19:01:15.520676Z","times_seen":24,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/css/responsive.css?ver=1790794259","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.731Z","timestamp":1790794257731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/themes/payone/assets/css/responsive.css?ver=1790794259 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:39:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4338\r\ndate: Wed, 30 Sep 2026 18:51:02 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23224,"size_decoded":4667,"mime_type":"text/css","magic":"ASCII text","md5":"b89f8dd0243d69a97ccc5b16810414a5","sha1":"42bef1229e57a0078797fb0a60d4b4a1e3cea0af","sha256":"3efb9bd30acf1bebbb624c89b1829b7c5a38f7f61b5f4217710c740762d8fa7e","sha512":"c3eebe46bf3d638c79fb8a20b094819428e2e1ed2acdeb46b7157cdf16ff9668c133216a544dda7a6877050145d4357922c158fc1658a8818a3308bafc8754e4","ssdeep":"192:GxEPyUDLc8kamdnzEBABC7fgV69ALOIcN0GEcN0+GFLx/McITJLfIHk0cNzcN0oz:6mCRd8pmF1Z","tlshash":"eda20e8f7af231683826717a9cbd2651a606e003e25ddda77dd1937ccf892d948e1b0c","first_seen":"2026-09-30T19:01:15.522162Z","last_seen":"2026-09-30T19:01:15.522162Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.35.8","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.733Z","timestamp":1790794257733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.35.8 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Mar 2026 12:15:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6613\r\ndate: Wed, 30 Sep 2026 18:51:02 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54666,"size_decoded":6942,"mime_type":"text/css","magic":"ASCII text, with very long lines (54666), with no line terminators","md5":"4fb5f7fc5e41f736ec0527b162519d52","sha1":"33697641c940c68153509fa7c9d7d0c3c760ce2d","sha256":"0a5d398672e25dc7f020f69df92a985481b248a60e301fee232d0c8afd648dc5","sha512":"5da1e9708bfdbd38beb7cee98d806ebc84b4d8337ce638a363d28461ebd9fda5189618bfa62167a5261ec2e98b02cb88ee4ff7bd5ecdd2d2facd480965e0c7a6","ssdeep":"384:Ws4J/8DEksCoI+SBQYO22/RmRs5Cz9TQXPTkvmGkvmCFldtraiIks05ArOk:dFLh5mP3RbrlDdps05Xk","tlshash":"17330da23d13b269226f442b82c7364c526499c1ee0375d9f944c523dafece63b36c5b","first_seen":"2026-01-29T13:38:24.653388Z","last_seen":"2026-09-30T21:42:10.897591Z","times_seen":83016,"resource_available":true,"data":null}},"time_used":2356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.47.0","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.840Z","timestamp":1790794257840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.47.0 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Mar 2026 12:15:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4064\r\ndate: Wed, 30 Sep 2026 18:51:03 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21641,"size_decoded":4393,"mime_type":"text/css","magic":"ASCII text, with very long lines (21595)","md5":"343a9e8b53b8e6cfee45153dbc0cd711","sha1":"a6922f54dd0c5209f870d16495b026e1b1aac0fb","sha256":"71ef4851bd7779a1d1749d8a07b3a89db72a6d07ccf5f1504a298da847ca5024","sha512":"316e488b781ad9cf91cf6b4b7ca066e556a75ad2f9dc4607c09f05a785fc4113fff8e3a8e9394a728f3cddd7d842ae59de122ff62386fac74d7e83cba5c0936a","ssdeep":"192:A6N877iN3iCOy2bvGIdpJkhugk8/H6qiMs7HqnFTSZq7RXDlCdkgIYSMV:Ap7iNyqEpSk8/aq8uFucbrgIYJV","tlshash":"69a2d9e4e46923c87b32c413e744f64c64daf920cac99d59fa6f850c1de16a70686fb8","first_seen":"2026-02-02T11:00:17.509213Z","last_seen":"2026-09-30T21:40:07.983302Z","times_seen":16054,"resource_available":true,"data":null}},"time_used":3350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/elementor/css/post-2315.css?ver=1790454918","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.843Z","timestamp":1790794257843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-2315.css?ver=1790454918 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 26 Sep 2026 20:35:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 854\r\ndate: Wed, 30 Sep 2026 18:51:03 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8422,"size_decoded":1182,"mime_type":"text/css","magic":"ASCII text, with very long lines (8422), with no line terminators","md5":"9c13ab1e8e2d2f2928734ebfe7d1bbce","sha1":"0bd615b8505dd0a212986ba904931cd8e37c2cd8","sha256":"48679564f0e09e298aeeb7abeaa730276be9520b466015acf02ce233e33aa486","sha512":"d9a05b09d47f77b4dff38c5ef85b5c57e73e87d20053cda055b81ed70a47e8b25eaef7f83dfb8142ebcc330ba52cd42dfa4da790cf3e29fc7c493cfd05936fd8","ssdeep":"96:OrLAnB2CQC4CW4efWiZUZ6Zy4vPXHnJWsPL:s0oCRiZUZ6Z9fHnJWsPL","tlshash":"e202b3937ea3a319f32f912fa0e3a5fc525004c48769aed6f5ba51327874c8633d3649","first_seen":"2026-09-30T19:01:15.524512Z","last_seen":"2026-09-30T19:01:15.524512Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/payment-mathod-img2.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.960Z","timestamp":1790794257960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/payment-mathod-img2.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5491\r\ndate: Wed, 30 Sep 2026 18:51:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5491,"size_decoded":5776,"mime_type":"image/png","magic":"PNG image data, 161 x 108, 8-bit/color RGBA, non-interlaced","md5":"b7e4b11c861a9b05929710deb018c699","sha1":"57af56b9e17d9f2821c866fabe6c8c737dbc5b9b","sha256":"278829a6c82b54fad4fcf727e0fbcd9e841042e19849077090968a15e9023e4e","sha512":"f39238090572c2c19212c7a273769091ef693c6ea1f473e0b2d53ef9f40cf2afbca58b42981fad93e7305d867bc56e1159e8113ba5b7479c7905281ec50482d5","ssdeep":"96:pSFyihpPzyAxF/I5AGhE6YAqKzlBPYnh7j4WSQ6q+Xdp0jgYB6Ax+9Y:pSkmNnA5AGuKzbPa/SPhXdp0lB6EYY","tlshash":"eeb18b8cccb1bacd567b29da460282711cded27a044120369566e9800eebad2034eb6a","first_seen":"2026-09-30T19:01:15.525675Z","last_seen":"2026-09-30T19:01:15.525675Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/b6.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.966Z","timestamp":1790794257966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/b6.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 314193\r\ndate: Wed, 30 Sep 2026 18:51:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":314193,"size_decoded":314480,"mime_type":"image/png","magic":"PNG image data, 1296 x 600, 8-bit colormap, non-interlaced","md5":"f4c661a94ee50311cf9cc48f2703c05a","sha1":"6c68e78763443f6867522b60968aa123fcd0b19b","sha256":"8342c86839e55b2b2d63c350e039384b21971950cdba006d8340118afeb29655","sha512":"822928c311b5a212a75330ae2b0f32ec6b6cfc56168c59301202ea03f30adef22d397b30c05d6edaafe5af68bc29d3911c8a77d6dd61ca1d1cd1c9ff0ea30245","ssdeep":"6144:UZ0iLyzzQ0Z+xZq34XKhxWHiPQqJcOsOtTTwSZU2NNRf9E0SNh5645:I+zsnM4XIUC7JZJbBf9+NH6q","tlshash":"cc6423bb43e2bf94cf320b57f410846cc4b13f9b2a669b9a199ff580be28d510947467","first_seen":"2026-09-30T19:01:15.526618Z","last_seen":"2026-09-30T19:01:15.526618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7481,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":7359,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:10.210Z","timestamp":1790794270210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:51:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"fca40181c727cc29b69045ec5589f638\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 470162\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4356adcddbfb4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23816,"size_decoded":6019,"mime_type":"text/css","magic":"ASCII text, with very long lines (23816), with no line terminators","md5":"fca40181c727cc29b69045ec5589f638","sha1":"83aaec5320016a15845195eb1d3fbb8982b66fa3","sha256":"a8c70c82d9bd2a2ef3e4edbe3cdb060bdcca80a3351307d066eee3df4be8a8d0","sha512":"32f6a558154dede9ec9cad1177d1142b7c949d431d8a3e9ed7cfc31ac62bb8ffe2cc501c18a86a26523bba0b0d61f6ea1238e8fec3ab5cf531531a5b6990140e","ssdeep":"384:gZBMbrYbv+esY2jcWlnrCxN82TNSixi7rOPJh3L:giUAEh3L","tlshash":"a2b21da3b5d714dce657c236c0d5f67ca82b4a60c753c6a3b9037bb886c1ad73641a4c","first_seen":"2026-09-14T08:43:43.747289Z","last_seen":"2026-09-30T21:19:11.373367Z","times_seen":751,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Inter:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.746Z","timestamp":1790794257746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"GET /css?family=Inter:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 18:50:57 GMT\r\ndate: Wed, 30 Sep 2026 18:50:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45675,"size_decoded":2066,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a34f88f00b3b275162b90a5f4166b99c","sha1":"30522f09ae080dbc76f3ad81bbdf542fd8303a56","sha256":"e5e5f92d1543747b23c1658baa72b3bc102fc849e87012e0c8ef182510108940","sha512":"331de80f1de982f363d9777510073861e5337db94b413b26cf0d5038d0fbc3ffc97a9fd031e1f7dd665d5a07368175e4baa1eaf973ed48e0d4e73b3e043c5954","ssdeep":"384:v3nf353s3Lg3Y3X3xOfQRUgvM2Rf3yJgaBfofefygBu0DftwHgM7V6f01QgTg6NA:/P1AwsHsSXokZIj","tlshash":"8723cd92002be500aa931dc233cf7e3aadce10a97486d5b95ffd0cc96cdad27526875d","first_seen":"2025-09-11T17:19:41.547996Z","last_seen":"2026-09-30T19:47:17.625381Z","times_seen":5355,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":23,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/aos-animation.js?ver=1.0.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.866Z","timestamp":1790794257866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/payone-core/assets/js/aos-animation.js?ver=1.0.2 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4194\r\ndate: Wed, 30 Sep 2026 18:51:04 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14239,"size_decoded":4451,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-09-30T21:09:35.87492Z","times_seen":25018,"resource_available":true,"data":null}},"time_used":4418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4321,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.1/src/regular/style.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:01.268Z","timestamp":1790794261268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 18:43:31 GMT","end":"Mon, 07 Dec 2026 19:43:28 GMT"},"fingerprint":{"sha1":"C3:5B:D6:E9:86:06:91:EE:6D:00:E5:15:F5:23:66:F0:7C:0C:E6:46","sha256":"0D:52:A5:47:28:79:E1:05:1C:8E:DB:39:17:95:F3:D8:05:10:86:FC:5A:70:B8:B3:84:AB:34:1E:E0:63:DE:18"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.1/src/regular/style.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: a4356aa509e61525-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nage: 32748\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 30 Sep 2027 18:51:01 GMT\r\nlast-modified: Sat, 15 Aug 2026 21:56:45 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:hzdhuHERR9xRa2ECk26a0AXzowFTSe/N4aSW8DJvEFE=:\r\nfly-request-id: 01KRK1J8GF4DKWS282ETV18R8Y-arn\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78131,"size_decoded":12890,"mime_type":"text/css; charset=utf-8","magic":"troff or preprocessor input, ASCII text","md5":"7fe7108986e8596a197c607b2d989d89","sha1":"9feab57e5c948507134250af34e342e753fc029d","sha256":"873761b8711147dc516b6102936e9ad005f3a3015349efcde1a496f0326f1051","sha512":"73b14fe9422707df4bdfd7fe031a94f3826d8e48e250188f934cfcd61a050c994790f21da68ca1914d87703e4886b71b54817e030c5a6843b480d55144a8dec8","ssdeep":"768:xy23Hzs74dchpGALQhS3cmfGtA6g7i4zzx9/yLR1rkzSX:xy23HIznLj35e66S9ze","tlshash":"8173f0e4f5fd18d05389e1d123072661bf0da329994a2c69cab3bd8df1c2219c78e6dd","first_seen":"2024-04-04T21:10:47Z","last_seen":"2026-09-30T19:01:15.532707Z","times_seen":2809,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":14,"connect":7,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/aos/2.3.4/aos.css?ver=2.3.4","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.711Z","timestamp":1790794257711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/aos/2.3.4/aos.css?ver=2.3.4 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:50:57 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 599140\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:05:49 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q4TKCS%2FFnhw9msQSUfuoj75%2FGkQnLU%2BuvlWOWgiysdBMHX1Tg%2BmGwAIDsTMR%2B8Lp8jT6wvmlsdSofm%2BdO59TAGsa230o84Ww9Z3Wr0V3zCeo%2BVdG6Av6cLyFppHhPN43c%2FVt2bQj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4356a8ecb95b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1438\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26053,"size_decoded":2451,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-09-30T21:49:24.415704Z","times_seen":46717,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":4,"connect":14,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/bdthemes-element-pack-lite/assets/css/bdt-uikit.css?ver=3.21.7","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.742Z","timestamp":1790794257742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack-lite/assets/css/bdt-uikit.css?ver=3.21.7 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Mar 2026 12:15:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15571\r\ndate: Wed, 30 Sep 2026 18:51:02 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":102926,"size_decoded":15901,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"a1aeed80c604a3836ab2d5dae55eb2db","sha1":"d04a96c8626b442d80cb9e12713383728b2f6bb9","sha256":"344f2b070ea7f156e4155fc65cedd9ae9bb066381dc449038ce7c456cc2a8f72","sha512":"02213ae4c8acfdbd8152807c2a902969548c535dccd80194d6d8161d0fba1b9cba4d6110e79eef328bbd6b5fe14411da439957aa2847067220ad51ffe51cf251","ssdeep":"1536:dPkcRm5YTMFoDBUn7WNmJPMFCQYKcOzMiN04O+IieZ0oVvkp:YYz1afXib","tlshash":"dba3a4895d5030adf12b8512dbd0f66cf3295c82f7170beab5d2a3668bc7ad11633a1c","first_seen":"2026-03-03T14:47:35.133995Z","last_seen":"2026-09-30T19:01:15.535509Z","times_seen":96,"resource_available":true,"data":null}},"time_used":2349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Sulphur+Point:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.848Z","timestamp":1790794257848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"GET /css?family=Sulphur+Point:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 18:50:57 GMT\r\ndate: Wed, 30 Sep 2026 18:50:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2644,"size_decoded":1118,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4566c763171445953e1daec5b6a5f835","sha1":"dc1d80697dea1c11a4b39c87be675620dfd664c7","sha256":"252e3055210ad7d5841b4c2b421b39440290ddfcbc8254a6a2764d89ee059eda","sha512":"2739ee782b8693c11b74b45fc45fde544794d5ca709989be88a808da8ffebb48d30c72ce52ebeb3b81fd55067fb2984e8ad484acc5197d2bf420a941c5f7c0cc","ssdeep":"","tlshash":"d151ef86089ba504db930dc122ce7d33ee5e62517881ea39affd1498bc9fc565362f0d","first_seen":"2025-09-30T15:27:57.643011Z","last_seen":"2026-09-30T19:01:15.537457Z","times_seen":11,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.851Z","timestamp":1790794257851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 26 Sep 2026 20:35:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2379\r\ndate: Wed, 30 Sep 2026 18:51:03 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5791,"size_decoded":2636,"mime_type":"text/javascript","magic":"data","md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-09-30T21:49:24.410574Z","times_seen":15658,"resource_available":true,"data":null}},"time_used":3339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/circle-shape-img1.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.931Z","timestamp":1790794257931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/circle-shape-img1.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1492\r\ndate: Wed, 30 Sep 2026 18:51:05 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1492,"size_decoded":1777,"mime_type":"image/png","magic":"PNG image data, 55 x 53, 8-bit/color RGBA, non-interlaced","md5":"7c68a90ee22e56370242c587d33c6470","sha1":"5426dc00237a872d63ff255daa677a9d7a59d016","sha256":"a325ace4325ef1ed7da842f068655d0d8da54aa1b74d216759ad490de6f5f306","sha512":"1b5783416369ff2e81ba4d5dca01fc823ad7f554a7234d81ed70faff4647b5fb029cb0b1d1ea21a5316c1ce4c92684ea681c20c5088d2da6ef0d7e1593672421","ssdeep":"","tlshash":"bb31f9d05bd8340e56df601112eb3cc4c476314ae79633582f54cac209f24307b87f6a","first_seen":"2025-10-29T16:32:19.680028Z","last_seen":"2026-09-30T19:01:15.540491Z","times_seen":6,"resource_available":false,"data":null}},"time_used":5152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/68ca719fba858d1923b1135e/1j5bcnm6s","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:00.242Z","timestamp":1790794260242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /68ca719fba858d1923b1135e/1j5bcnm6s HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/x-javascript\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-6ab62d2918b\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 30 Sep 2026 18:51:00 GMT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 39\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a4356a9ead838be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1159,"size_decoded":1200,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"63f678a6736f08b6e29da444d2d20644","sha1":"c693cb4560718b700293c2ef9643fa0ea2c798f1","sha256":"a2f83c8fe35ad9d2eeda8eaf230ab3b869dd8ff2c4061098d40b43e57a25da34","sha512":"710d10c307c97b55d2e49d1b48c7680f120966aae11b39f3ab3f43c0bb7083c056ba67217dc3636837998e1325b9825634df1ceaaf94be68ea7731424bc36795","ssdeep":"","tlshash":"15216af57e1a2137ea3140d91faafe083472429b040c1cc9460dd8d53a5077a171aded","first_seen":"2026-09-30T19:01:15.543792Z","last_seen":"2026-09-30T19:01:15.543792Z","times_seen":1,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":14,"connect":10,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MessagePreview-KbNQqIX-.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:10.094Z","timestamp":1790794270094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-MessagePreview-KbNQqIX-.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:51:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"ec0736224b16cd4c3c1504f06b8b79fe\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 35\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4356adc18ed8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11206,"size_decoded":5031,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (6129)","md5":"ec0736224b16cd4c3c1504f06b8b79fe","sha1":"b05896bd4f8df58b5606dee7965f4d13de1100a1","sha256":"4c02dab373a3b0ba5a24f333cf4a83538c9a9c756cc776d52acb000e4b831043","sha512":"d50f077c11522ab690f78cfde45f9cb91014dd4ecbfa0ecbf830c414f8aaea93e0d538de4d6a2b89bf85c4d0d5e85fd328a42afb18701e01dc379a6fa122bcb2","ssdeep":"192:8cfBABqWkgk3rOQeOF0N30SbX3kXSKC4qUuKQfvrYXL8vNRywfCfxVYEx5uhbQ30:8YBtxya0NNbXuC4qUufsXAv7ywfjGwxd","tlshash":"25323b1ab2a8683c933786cab1cb6625731c1f305612d4e3f06d5f9f1365da810d6f2b","first_seen":"2026-09-25T08:45:54.033119Z","last_seen":"2026-09-30T21:54:54.585514Z","times_seen":268,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/js/preloader.js?ver=1.1.3","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.874Z","timestamp":1790794257874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/themes/payone/assets/js/preloader.js?ver=1.1.3 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:39:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9288\r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28119,"size_decoded":9545,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (27253), with CRLF line terminators","md5":"78089d80119e2bc6d05d847111a4c4c0","sha1":"c4b5d04eaa1e4491bd89a187592318847701bb21","sha256":"cd6f60d498f53962a87dbac998db7382b03380f7bd8156032caa5a6ae85c3458","sha512":"f6a902bcd877852cc131793a9479d65783b5feafbd4f1c999e6d7729224823b2fff158467ef85cdd31505c699f61ac734e8fa1d9894417874900d858a6dcd0fc","ssdeep":"384:hlRTfWNC/ikuTRaXhEQZ0jTY51MHNVNUEM7IjaPMHCfYrXyA4m5FZugNR:fNfeC/SakTnHupQakifYjx4mBxNR","tlshash":"2ec274d87182f0d68bc25125493f930bf27aad11344ed440e16af5e1bc78aef91a7e2d","first_seen":"2025-05-06T13:45:08.247935Z","last_seen":"2026-09-30T19:01:15.549588Z","times_seen":61,"resource_available":true,"data":null}},"time_used":883,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":883,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/line-shape1.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.933Z","timestamp":1790794257933,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/line-shape1.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1040\r\ndate: Wed, 30 Sep 2026 18:51:05 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1040,"size_decoded":1325,"mime_type":"image/png","magic":"PNG image data, 413 x 20, 8-bit/color RGBA, non-interlaced","md5":"962993732f285f43abcc636d6dd5d1b5","sha1":"b7149b742c1991c29a821686d33c0954a781f252","sha256":"f043b56834cac33f75fcdcb0381f9a2df5f91562b8ca8b3c8bbf8e8418b4ff40","sha512":"b73fa2edb0a4531a34f0670e03330598e418e302aedebf24ee62bf8376607d7506db159518b02a70ff91ef01e229df774751e8bd677f4ab8ce6423eb546be4a6","ssdeep":"","tlshash":"1d1175da0e5a8aab5d270828902b3e13d49b181dc0d82b08d82d7ad545e4df64e30b91","first_seen":"2026-03-18T17:38:17.39811Z","last_seen":"2026-09-30T19:01:15.555313Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone-child-theme/style.css?ver=7.1.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.733Z","timestamp":1790794257733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/themes/payone-child-theme/style.css?ver=7.1.2 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:39:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 281\r\ndate: Wed, 30 Sep 2026 18:51:02 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":520,"size_decoded":609,"mime_type":"text/css","magic":"ASCII text","md5":"e281be34346904f2d47b95706ee9de5f","sha1":"06259bc84f0ef9c2bb37573e5275430cf19856cb","sha256":"db8f5ceee2d4d65cb9a8506845f72162207531ad359facc39ca79866b7855960","sha512":"1f3512d951852576e4071c84ae1984a9a75fbb5923c491ef462accae08a90af0077a6aa76583f382bd1ae1de6ba25f7296fbcd94d4b635a82b4c5f08402f5d74","ssdeep":"","tlshash":"c9f0598a9521512231e5c203f872f60aa36ab3097b9d88b0f5df47450362769d15ea0a","first_seen":"2026-09-30T19:01:15.557799Z","last_seen":"2026-09-30T19:01:15.557799Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/js/main.js?ver=1790794259","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.877Z","timestamp":1790794257877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/themes/payone/assets/js/main.js?ver=1790794259 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:39:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1622\r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8728,"size_decoded":1879,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"296f70b1cccbfa18033a43519717b4a6","sha1":"a7c76a2d92a73cdb610a6a0ec7fd875e7059b8a8","sha256":"917e21164b67a6ae82c462b99001be145b0076aac913cdcb928fcc24cb1589ce","sha512":"45b8d5a32299a8b237c79fb8b9013e5c01bcf0b0759681d95f5ccfdf7501848b8675ffe9e6418106e340a32a1e6ca9963adb730e0525d7a365f1d4f4bffbd50a","ssdeep":"96:2gNE2lN7Sds+IKAPHajSKAPAL/r446olNmFIvGspEhO7xi+/R+ltXl/shUm4+gED:PIsNHkcALD48Nmrl9lUhUm4+gFcd","tlshash":"610299167cf265a1207ff02d6befa554ea26010f8209db117d9d4bc40f14374a9eeade","first_seen":"2026-09-30T19:01:15.559795Z","last_seen":"2026-09-30T19:01:15.559795Z","times_seen":1,"resource_available":true,"data":null}},"time_used":881,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":881,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/banner-shape-1.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.936Z","timestamp":1790794257936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/banner-shape-1.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 619\r\ndate: Wed, 30 Sep 2026 18:51:05 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":619,"size_decoded":903,"mime_type":"image/png","magic":"PNG image data, 36 x 54, 8-bit/color RGBA, non-interlaced","md5":"800989e9aaf97b65fe4a9fb3fcf3651a","sha1":"d89f89be07209051f10e6bbdaf06934cd462621f","sha256":"2468ce55f6a503170ff0eca6baca74242782094b44d1ee0945eba9893c703ebb","sha512":"8e4b07471e79344356c46dceddfaaf0f74393ff045a838dd29f32a5b56a3c5a95e5e4d6ec2181ac9398318b3c3ccd97b8f1c3823fa6438b7c903a2596dd11d81","ssdeep":"","tlshash":"f7f062cb7db050eaa9a9086e02f2c4997c7b30373a81b018843ce031584480c4d72393","first_seen":"2026-06-06T18:23:48.751825Z","last_seen":"2026-09-30T19:01:15.561825Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/testimonial-img2.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.957Z","timestamp":1790794257957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/testimonial-img2.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3197\r\ndate: Wed, 30 Sep 2026 18:51:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3197,"size_decoded":3482,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"6424a5a819a0fb7d63f577b61c5bff30","sha1":"01d402b6585b8aa3167e69ba38da329688639657","sha256":"3ecb521dccf754659de347af5a189924d007f31151f54cbdc7882bb27478e74d","sha512":"a96303f3d2784c3481f4f193b107953a0d579a0f3b4b228ba6544404b45090aaf890c70eafda6241024d79377ad11dcfc307eeb3e16da2be74be653552287995","ssdeep":"","tlshash":"4f614d5467bd4c8eeb055b266e36333e01534fd844afc9a96a23b41a4b300d425fdaa6","first_seen":"2026-09-30T19:01:15.563582Z","last_seen":"2026-09-30T19:01:15.563582Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC53FwrK3iLTcvneQg7Ca725JhhKnNqk6L5UUMbm9wUkHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:00.229Z","timestamp":1790794260229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC53FwrK3iLTcvneQg7Ca725JhhKnNqk6L5UUMbm9wUkHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 51640\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 17:14:28 GMT\r\nexpires: Tue, 28 Sep 2027 17:14:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 178592\r\nlast-modified: Tue, 09 Sep 2025 18:33:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51640,"size_decoded":52453,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51640, version 1.0","md5":"4a1dec4fe55af205131962c81c7d9e43","sha1":"00dae6552691229718117b97f7bfcf5f932acb9f","sha256":"4a2b0c886b2ea2e178108084a03404fe2d66db2baf7f5815e9067b96810d5827","sha512":"07b19c81887797b349f76dd091ac52fb9ba9706f037fc4793f044d43b88152ccf1717b60f00de0136275ae568060bdef7b300b95398c5bcdb802bfa46dace300","ssdeep":"768:ch5FogfQO8LcFb1nCp2TfvacieFgTghN7skf4NMGBP33QcNBbYJmSLK8bVE1KBai:czFoCmmbxAGbingrExPQcNCJ/dKo3l","tlshash":"42330235d30d2c5eb982acb01e6b32fde01493552e1aab36ac45759682858e5fe3e4c3","first_seen":"2025-05-29T18:38:05.678236Z","last_seen":"2026-09-30T20:16:18.694777Z","times_seen":5762,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/tauri/v20/TwMA-IISS0AM3LpSUnQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:01.256Z","timestamp":1790794261256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/tauri/v20/TwMA-IISS0AM3LpSUnQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15032\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 19:12:30 GMT\r\nexpires: Tue, 28 Sep 2027 19:12:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 171511\r\nlast-modified: Tue, 09 Sep 2025 19:02:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15032,"size_decoded":15845,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15032, version 1.0","md5":"c1f5e182d431014e3278c24531bc557a","sha1":"57f3e199e18e7b4071dbf193924bee8dad478b73","sha256":"8c96fc99b6bccee583242354bf974a90b9bc3a267851718d2f3e22c0b215e7a9","sha512":"60e4332740a7c3610d8e5a44d37019f969d3437ae232957ca6789b63d96a2cb44aea0d302eea835568a352958062aaad97925fc8e9c6af42aa2132f59b4389bc","ssdeep":"384:ZmVRryf1nhfm7uw92gNTdAAM2C0bpG5HDnz+5X8IXlKXIba8DHQ5:Oryf1hfXg2gjAAkv5HTz+5X/X+dIHo","tlshash":"6662d0f2d7042c1443635a2aadfcf0ca97c7ca5e54498a65c1cfabe4a45cdeac44809f","first_seen":"2023-07-02T11:37:14Z","last_seen":"2026-09-30T19:01:15.568733Z","times_seen":122,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.1/src/bold/Phosphor-Bold.woff2","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:01.395Z","timestamp":1790794261395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 18:43:31 GMT","end":"Mon, 07 Dec 2026 19:43:28 GMT"},"fingerprint":{"sha1":"C3:5B:D6:E9:86:06:91:EE:6D:00:E5:15:F5:23:66:F0:7C:0C:E6:46","sha256":"0D:52:A5:47:28:79:E1:05:1C:8E:DB:39:17:95:F3:D8:05:10:86:FC:5A:70:B8:B3:84:AB:34:1E:E0:63:DE:18"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.1/src/bold/Phosphor-Bold.woff2 HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://unpkg.com/@phosphor-icons/web@2.1.1/src/bold/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 150052\r\ncf-ray: a4356aa5bc061525-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 37\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 30 Sep 2027 18:51:01 GMT\r\nlast-modified: Wed, 23 Sep 2026 04:31:38 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:IVO1LOqeBvwMyElgSL5IWzgaD4vxMK3qWpdW/I8QC4c=:\r\nfly-request-id: 01M2H567GC1SB6XY7MGMS0EYPN-cdg\r\npriority: u=3,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150052,"size_decoded":150894,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 150052, version 1.0","md5":"dd3e7d7c6f336dc11da0b3df4795b9b1","sha1":"1731a45698fc08cc34267e0caa7dd53f196e106e","sha256":"2153b52cea9e06fc0cc8496048be485b381a0f8bf130adea5a9756fc8f100b87","sha512":"b16041296ed46f68a16c6b526cb7b8c39ed3a72fc8c7c91e7eb2702e678f61aa2df08f1ad7ac719ec9003704ae916592c04a999c30718ebf4972eae43ca54664","ssdeep":"3072:pcMblNHoNwKDtZkSAmn8x6evxankgfHB4DLs/Yu1+YdrPHRavU+7r:9blh4LcZxaWI/0srZ27r","tlshash":"f2e312b6c3839b5a124e7afc83d40f1f78bf951893900d9c28d727e9f8ad1e129471a5","first_seen":"2024-07-20T04:11:49Z","last_seen":"2026-09-30T19:01:15.570953Z","times_seen":624,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/banner-img1.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.934Z","timestamp":1790794257934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/banner-img1.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 71871\r\ndate: Wed, 30 Sep 2026 18:51:05 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71871,"size_decoded":72157,"mime_type":"image/png","magic":"PNG image data, 544 x 684, 8-bit colormap, non-interlaced","md5":"81974f4a7c369fe4d9934890218f3fbb","sha1":"9d03a8a3c3e5bd42846e0582d1cd7beb3fcc25c1","sha256":"f12d9ab5c7d05979e01a8ef1d84f735ddb219298f87b122d3299193ea52eddbf","sha512":"1cc533fda9320c7004fe4740794a9168aee782d70250a193f87eaa6aec7ba0c301dee790670c88376fef3fe7403aeef22f3b7f1bbb3dd21921afa9f23d08a377","ssdeep":"1536:m6r/MxaQOqqhf7BJPphP5zB0U1TtsMRZP4FC+vD8dTn:m6rIMjBJBhxzDxSMj4FVIRn","tlshash":"8e63024fea8e84d4bbb5c6b3be152f0ddc964c56bbdd4388d1ac6c247970240e637854","first_seen":"2026-03-18T17:38:17.379275Z","last_seen":"2026-09-30T19:01:15.576948Z","times_seen":5,"resource_available":false,"data":null}},"time_used":5250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5150,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.5","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.519Z","timestamp":1790794257519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.5 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Mar 2026 12:15:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 899\r\ndate: Wed, 30 Sep 2026 18:51:00 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2947,"size_decoded":1227,"mime_type":"text/css","magic":"ASCII text","md5":"64ac31699f5326cb3c76122498b76f66","sha1":"cc0a5a1741b8257001f89b331378d8aa7c30094a","sha256":"4048fd0e6c44412465449ba4f5c7272349ee1574401cec755d6b8d9c0ccc28dd","sha512":"23ad865e63544ee039221161083510346b01b8be56fa7a83540036c51dceb3f0171adf8f932cf77a457240427c0c3ccbad1f9f371e977c5b6a01e9fe316a878f","ssdeep":"","tlshash":"d0510164660028504bff92db6ea9db047b6e7481cd1faf97b0c21a7c5b782851223e5e","first_seen":"2025-06-26T12:36:15.124007Z","last_seen":"2026-09-30T20:57:56.681458Z","times_seen":142132,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/maxmegamenu/style.css?ver=bfec71","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.714Z","timestamp":1790794257714,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/maxmegamenu/style.css?ver=bfec71 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 13 Sep 2025 02:51:27 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 203\r\ndate: Wed, 30 Sep 2026 18:51:00 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":279,"size_decoded":531,"mime_type":"text/css","magic":"ASCII text","md5":"0512134f4afcfcc5642ddd5fba308d6d","sha1":"ebfab83549edef4944e206ac79fe341c99545cac","sha256":"5b46c65117c4381f2187e8c17603e1e0e251faf1b54f73c2a5b91b6108d42495","sha512":"041e25f1ee6e7bb40a28269a98b0d5eea1e93e30c7b016c2b2ea323bedda321328b7bf1d73f5e06d6f3db2e99830c933584f44e96f610a5b742e9ba0b726407c","ssdeep":"","tlshash":"42d07dc218b729d106389612e3bbac102a81c20187d43d4872e6809c844805084e7c09","first_seen":"2026-09-30T19:01:15.58732Z","last_seen":"2026-09-30T19:01:15.58732Z","times_seen":1,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/ScrollTrigger.min.js?ver=1.0.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.863Z","timestamp":1790794257863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/payone-core/assets/js/ScrollTrigger.min.js?ver=1.0.2 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17173\r\ndate: Wed, 30 Sep 2026 18:51:04 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43380,"size_decoded":17431,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (43088)","md5":"ba1fa78eb4bb49f8a0eeaf8e61708840","sha1":"489bcf6d9c69f0f29f871e0323510c5197859bf5","sha256":"ad33c2df9ada8a663c2147357828f980d0b7ca731ef33eb3c6e4f327c3b2cda5","sha512":"a2731344a2412b3f0cd539eaa83b86065a30947d28845ccc5d844d79bcfec8e71ce5342bff300ab2d87386ebf4862c942848901105c4ca79d70af3533a4e7476","ssdeep":"768:L+5LHpwfVyb83wG/B/nE306RAHdAIsxmAK31horUp45:apqgo3wKB/nKRAHOIKS3TjK","tlshash":"741309ca3244b03267df627aa52f030a733654d9291e4464f266e4e83c7d5bc873be6d","first_seen":"2024-01-19T15:55:20Z","last_seen":"2026-09-30T21:47:14.828624Z","times_seen":9227,"resource_available":true,"data":null}},"time_used":4323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/js/bootstrap.min.js?ver=5.0.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.871Z","timestamp":1790794257871,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/themes/payone/assets/js/bootstrap.min.js?ver=5.0.2 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:39:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22886\r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80672,"size_decoded":23144,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"3d7cb18be275bcc1f33324620dca9517","sha1":"cb71df7f175c1b3ee8d642a0efde2e742a142f46","sha256":"c938e1227260834371896291dd5d28e98b5743ec952b721bdf791744ab06810d","sha512":"032d8a984981de805b197e8377aacf6296fc33491b035015d892d13d5922b811dca07ad1eae87f185d28252f0c04a76bcc8acadd508db6f25e8fa0a3b38b886b","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU07P:HwORx3YCD45wZbDZTb0gP","tlshash":"3a73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-08-06T22:16:53Z","last_seen":"2026-09-30T19:01:15.590164Z","times_seen":1070,"resource_available":true,"data":null}},"time_used":886,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":886,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-includes/js/jquery/ui/core.min.js?ver=1.14.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.880Z","timestamp":1790794257880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.14.2 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 26 Sep 2026 20:34:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6276\r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18674,"size_decoded":6533,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8489)","md5":"ffb9792c762c28c883fbda04cb87bfd7","sha1":"1d142a621d684714fd78aa415b1d13adca03fd13","sha256":"b7a27a4b4abfc300eaf7d9151afeef8df2663d98586e38f59f91bbe98ef30af7","sha512":"5605218f2ca25c9bbd553aef21adcdab3819eb7a5ce0081a411d3ca82b26bffa129b8aa7013f6d18f933fc9e526380e1b92da6c87938eb3cfa660a05b3a7a98e","ssdeep":"384:379nP8FkFv28i8WVVnh5GX0Ci+Q8LMSAQT/hSd:9P4k0vfSA4g","tlshash":"4a82e64db2467851c6e7a1a5102f520fb132a59cf00ac89ef47ccde93c7aa996073f79","first_seen":"2026-08-08T12:00:35.066846Z","last_seen":"2026-09-30T21:49:24.41814Z","times_seen":11208,"resource_available":true,"data":null}},"time_used":976,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":976,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:00.215Z","timestamp":1790794260215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 183515\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-30T21:35:54.176117Z","times_seen":311376,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/assets/images/attention-grabbers/168-r-br.svg","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:10.263Z","timestamp":1790794270263,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/assets/images/attention-grabbers/168-r-br.svg HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:51:10 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 22 May 2021 07:25:19 GMT\r\netag: \"f66e029841759471d2ec78b86760dca7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 67956\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4356add5dd1b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22356,"size_decoded":7327,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f66e029841759471d2ec78b86760dca7","sha1":"d9db67738984efee3dd63cb144759ac0521c7dda","sha256":"5108ef00c54e1f6ce859852834135447457cf19ee19aa7b0fb55b64b425cb526","sha512":"56ec42c707f42339dc21f9bbba6465e75fbfb92c42b4ea180c7f18120e522284b1fa792c63a214fd472ea47f93203af98ce67cc06ac317d945e619e3ba4e87eb","ssdeep":"384:yNDpPg81DH4/8j2CDFmKIk+pv4osVQ37MTNDsPa2vFqrXdCImKkkppDX0skQ3sdv:gDY/mxmKSpv4HQ3YcvEAImKJpDXGQ3sR","tlshash":"83a2243d46a0c3fd9ac5d2fdaf619068904da0ced1f7c74283e6869046e39d9f20d4ea","first_seen":"2023-04-11T22:59:01Z","last_seen":"2026-09-30T20:16:08.63272Z","times_seen":40840,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/css/magnific-popup.css?ver=1790794259","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.727Z","timestamp":1790794257727,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/themes/payone/assets/css/magnific-popup.css?ver=1790794259 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:39:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1410\r\ndate: Wed, 30 Sep 2026 18:51:00 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5256,"size_decoded":1739,"mime_type":"text/css","magic":"ASCII text, with very long lines (5256), with no line terminators","md5":"1f846a1238663b23bf82e01c7af42999","sha1":"631f132b9ecc8609f2f24fef31f7def6323357d8","sha256":"5ba1faf87dc57fed942fd91d11240e15ddb5e1137f1ce93ae66bc70bff9a4498","sha512":"eed6b75fc8355e39c60401f6a4bbbdf60eb79618b743936d423abc5b89841b855f43664f9db6d56fc61cad79f0d584459b604d998a3661132c25b7a2a3d2b8a8","ssdeep":"96:Vc2SCO7EyPWNM0yQX8EiUkhudlsbFNm5Mk9rCWhb:V0CO7EyPWNDyQMEiUdCqMk9GWhb","tlshash":"ebb154f3a941313ad633c926d1c3db9d3223a227f663569fdf82a419c6ce4cc1625788","first_seen":"2025-07-17T21:18:21.466719Z","last_seen":"2026-09-30T19:01:15.596056Z","times_seen":7,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/banner-slider-img1.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.939Z","timestamp":1790794257939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/banner-slider-img1.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2433\r\ndate: Wed, 30 Sep 2026 18:51:05 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2433,"size_decoded":2718,"mime_type":"image/png","magic":"PNG image data, 146 x 60, 8-bit/color RGBA, non-interlaced","md5":"70bfb0133769bad7fbf3628142332278","sha1":"82f75921c305f73c32ea362fe720fe144f9de4c1","sha256":"78ef206ea97b61a43c9f7c62e38fad0f876eb2978a38815db3e804205e8007f6","sha512":"7af003ca959dd4263c574b9175c75110903e9f067381e725a07b4296149e5105b5962c651f1f31ed99bf95d9b08e330b3acb68672dbe486867e121a99bff6d41","ssdeep":"","tlshash":"66410a7cab841a7fcabf4eea4902afc1083fd1595a11ee9c66f0f00d9924f44a605b42","first_seen":"2026-03-18T17:38:17.420986Z","last_seen":"2026-09-30T19:01:15.598633Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC53FwrK3iLTcvneQg7Ca725JhhKnNqk6L5UUMbm9wUkHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:00.231Z","timestamp":1790794260231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC53FwrK3iLTcvneQg7Ca725JhhKnNqk6L5UUMbm9wUkHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 51640\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 17:14:28 GMT\r\nexpires: Tue, 28 Sep 2027 17:14:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 178592\r\nlast-modified: Tue, 09 Sep 2025 18:33:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51640,"size_decoded":52453,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51640, version 1.0","md5":"4a1dec4fe55af205131962c81c7d9e43","sha1":"00dae6552691229718117b97f7bfcf5f932acb9f","sha256":"4a2b0c886b2ea2e178108084a03404fe2d66db2baf7f5815e9067b96810d5827","sha512":"07b19c81887797b349f76dd091ac52fb9ba9706f037fc4793f044d43b88152ccf1717b60f00de0136275ae568060bdef7b300b95398c5bcdb802bfa46dace300","ssdeep":"768:ch5FogfQO8LcFb1nCp2TfvacieFgTghN7skf4NMGBP33QcNBbYJmSLK8bVE1KBai:czFoCmmbxAGbingrExPQcNCJ/dKo3l","tlshash":"42330235d30d2c5eb982acb01e6b32fde01493552e1aab36ac45759682858e5fe3e4c3","first_seen":"2025-05-29T18:38:05.678236Z","last_seen":"2026-09-30T20:16:18.694777Z","times_seen":5762,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sulphurpoint/v16/RLp5K5vv8KaycDcazWFPBj2adf4Yug.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:01.257Z","timestamp":1790794261257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/sulphurpoint/v16/RLp5K5vv8KaycDcazWFPBj2adf4Yug.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16300\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 20:57:23 GMT\r\nexpires: Tue, 28 Sep 2027 20:57:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 165218\r\nlast-modified: Tue, 16 Sep 2025 03:39:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16300,"size_decoded":17113,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16300, version 1.0","md5":"0e04deb0a7c2fb8f0c4c286219fa81a0","sha1":"e58c53dbc4fc71e0daf2d0d0f03bb26c1ad7a489","sha256":"8f4ab9401207c8aad2819f49d7d23961d34008e154b28a95b279f92df5ba5465","sha512":"29921791552cd85ee0672341246fbd5de271496db8033ee3c2f3e803791e5c5d9e8e608e295f936bb80bdca787bdc73c1363af465cdc16ce0935699a0b74aaf7","ssdeep":"384:nxQsQhgAdrHpKaNHneHmOvht8vDLjBqYX+yxrvegj4V:xQsJAXNHneHmkfwJqgrvepV","tlshash":"a072c0792e640d64f6fac1b52d23224399b631cab640376717f6aa007a0a6c946186cd","first_seen":"2025-09-28T08:02:07.411693Z","last_seen":"2026-09-30T19:01:15.60105Z","times_seen":832,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/css/bubble-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:10.213Z","timestamp":1790794270213,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/css/bubble-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:51:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"720e14524f21b150f8b0a7f9f9d9f978\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 470161\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4356adcddc3b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21020,"size_decoded":5395,"mime_type":"text/css","magic":"ASCII text, with very long lines (21020), with no line terminators","md5":"720e14524f21b150f8b0a7f9f9d9f978","sha1":"6e05d7727d0e572d79e5b9b660e84634a95226dd","sha256":"1e270e730a76ba5e8e438bc8c6f263d1b7d69895cbe1565983f68ce9cbe8fa4b","sha512":"e838082c1cb6a17a08e6cf09f30b50f128ec7c4fb6ab53f506d2ab295dcb6b01a59c69770e22f561ba393158390ab4fe1b63e548849ab4c954cdcaa6cc784cba","ssdeep":"384:gwaDBMbrYbv+esY2jcWlnrCxN82TNSixi7rg64gpjnKSp:gwa0UAg+J","tlshash":"1b92ca93b5a314dce297c632d0d1f67ca83f4a20c757c9a7b5037bb88a91ad73641a4c","first_seen":"2026-09-14T08:43:43.682132Z","last_seen":"2026-09-30T21:19:11.38764Z","times_seen":552,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/css/main-style.css?ver=2.0.1","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.709Z","timestamp":1790794257709,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/payone-core/assets/css/main-style.css?ver=2.0.1 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 186\r\ndate: Wed, 30 Sep 2026 18:51:00 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":186,"size_decoded":469,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"bb41ec0fd93dc91fdb1ea0ce85890e93","sha1":"3984e34d9857ceee7a10cbe6df435314afdacf8b","sha256":"e6b29959c56ff8b3f184fbf0834855e3fbd1ea9d81bdf5efa6e145a24d4caadf","sha512":"dcc55076981f4e233c54a7887b8e3b0c90ac915874248a8cfd45aaf2c1646bf51119849656d023a5ecb9905ac3740a5e670fc34b26b2eccf5520232285a90afb","ssdeep":"","tlshash":"91c02b601fc1402500bcc8e303fe0117de25040f0f00007078c62a20cf3024ac05cb2c","first_seen":"2026-04-26T18:49:52.055007Z","last_seen":"2026-09-30T19:01:15.602862Z","times_seen":2,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/theme-builder/assets/css/public-mode.css?ver=1790794259","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.717Z","timestamp":1790794257717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/payone-core/theme-builder/assets/css/public-mode.css?ver=1790794259 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2370\r\ndate: Wed, 30 Sep 2026 18:51:00 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14751,"size_decoded":2699,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"aeae4a3f779bfff9b7aacb68c2cb9ba0","sha1":"9fcb1b54599ecd685b35b3fcefa4463fe3681b03","sha256":"3982006ca23b88c58610b48fc853b07b9b9f6dc6b316f6fd68a5924a86704716","sha512":"442030ec823af64f54b3d8dda32abccae097c44a5069ed3be24ba197502e8bb9a506ed4db6172d8b2e4043e3b176a68810b2b9cb4e580b6b8524038a9499e96e","ssdeep":"192:4PgaDshEhNnZ36Nop8zO1/U6/olJIUNhEJBJje7ZuU+HXdXdnmalFvdaTaplxeie:IH+abMabC","tlshash":"b2621fda4da211519533cb75e7ee166ceb3d01e3ef02099a73cc91894f73b5882e9e50","first_seen":"2026-09-30T19:01:15.604809Z","last_seen":"2026-09-30T19:01:15.604809Z","times_seen":1,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/style.css?ver=7.1.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.719Z","timestamp":1790794257719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/themes/payone/style.css?ver=7.1.2 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:39:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 561\r\ndate: Wed, 30 Sep 2026 18:51:00 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1109,"size_decoded":889,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"0dccb913fbbb8c04143d25f183dc7953","sha1":"780d8109e1e520b38f3fe588108aeacc46480bce","sha256":"25c94653fafcbb389022fce84a158f27d3fb8e76716dfade9e97000e87592a1e","sha512":"96c644005913ac9dba647cb7771c76e5ab9abdc1a77904de9aff06fd9c3af21c123441202724fb59eccdd8417a97a481e6edb1f762ee44755a7cbe8fdd16a1af","ssdeep":"","tlshash":"6111931aa5598077a0d143e3a187b144eb2fc7d9a2c110a4fbef988c53e203c00beb20","first_seen":"2026-09-30T19:01:15.60644Z","last_seen":"2026-09-30T19:01:15.60644Z","times_seen":1,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/css/animate.css?ver=1790794259","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.723Z","timestamp":1790794257723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/themes/payone/assets/css/animate.css?ver=1790794259 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:39:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4097\r\ndate: Wed, 30 Sep 2026 18:51:00 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":61026,"size_decoded":4426,"mime_type":"text/css","magic":"ASCII text, with very long lines (60852)","md5":"056f749ab6876e7c3e5096a8b5247d15","sha1":"2760b2e53d07959cf1027541f3307455f671a2e1","sha256":"5b19a04002bdf696bccb807220b4f0c3c0371c643d40a61b3b967609fe402406","sha512":"b9187b410d3209597036db845c11f3094c279efb8b1b20cb5d45d243ea969a8d474636de5006532755a035497441d82ff66ef062ac2f86704bdcbafc3c72a7fb","ssdeep":"1536:ZkZ9PCwe1uA5kGDj3Cyg5lrcee0qT66j3rwzlr2W:ZkZkwe1uA5kGDj3Cyg5lrcee0qT4","tlshash":"255305ae5851228991274ba6c7dc4e68873dc67314621cde73862c4b8f87f9f33da607","first_seen":"2023-05-07T10:09:03Z","last_seen":"2026-09-30T19:01:15.608037Z","times_seen":79,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.852Z","timestamp":1790794257852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.5 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Mar 2026 12:15:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3369\r\ndate: Wed, 30 Sep 2026 18:51:03 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12512,"size_decoded":3626,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-09-30T21:35:13.516474Z","times_seen":241331,"resource_available":true,"data":null}},"time_used":3338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/megamenu/js/maxmegamenu.js?ver=3.8.1","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.885Z","timestamp":1790794257885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/megamenu/js/maxmegamenu.js?ver=3.8.1 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Mar 2026 12:15:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6278\r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41854,"size_decoded":6535,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (315)","md5":"b2ef30e8542379a7859f7c8fa83c5152","sha1":"a2def334ad58ccb9ac04936af341bc9b71984c72","sha256":"a0bbeec04c54179e6f5a60b48d82b659a68f193cb3acde89fe1957cf193c6503","sha512":"dfeea716e6489e790bd15f56f954031e44c34d8eda7bf3a86a4f09b2fb145929324676131f0bf73aa12e557f580f08dea44d20186ec84d9fd6311d3dcc7891ac","ssdeep":"768:rwzhQIFi67YxisFIe27w4+TW/RyR0RMRRRERkRjRCRw:PiWW/wyuve2RUK","tlshash":"51134d8974ea19e340bfba78dbdf9064727a45a31109ce503cfc86845f8742456f7fa8","first_seen":"2026-03-16T23:31:18.760384Z","last_seen":"2026-09-30T19:01:15.6106Z","times_seen":1874,"resource_available":true,"data":null}},"time_used":1072,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1072,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/banner-slider-img3.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.940Z","timestamp":1790794257940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/banner-slider-img3.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2591\r\ndate: Wed, 30 Sep 2026 18:51:05 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2591,"size_decoded":2876,"mime_type":"image/png","magic":"PNG image data, 168 x 60, 8-bit/color RGBA, non-interlaced","md5":"46279443a2753f7ea979f2ff962faec1","sha1":"e334006397a8a5f37506d8303e65ecc6638f5d61","sha256":"22711a2998cf09b774d7a81c02d93ffc20926857c4a8847dfa27be0b58d7057b","sha512":"fbf07ca79375647bd3f4d1f636b4900d9a6d33c6d1d8059f3c274c87e27ce66e7a528a97c37947f66739bffb50ae197b8adcbdebe0f0b8e958e2d7fee556c656","ssdeep":"","tlshash":"cd514a8af301177bedc7116ed93a1eb66fb2a05e7e01321d63026cc76019f05092197a","first_seen":"2026-03-18T17:38:17.437838Z","last_seen":"2026-09-30T19:01:15.611277Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/banner-slider-img7.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.944Z","timestamp":1790794257944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/banner-slider-img7.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2357\r\ndate: Wed, 30 Sep 2026 18:51:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2357,"size_decoded":2642,"mime_type":"image/png","magic":"PNG image data, 168 x 60, 8-bit/color RGBA, non-interlaced","md5":"7d13604d4595923d07c036631f7ea568","sha1":"8d46fc40183ef1d7160fd4e2210de82bf8e49bad","sha256":"c2c73eceaae906038dcf8bb5e9ae54910aab5112ef1f75f1c9f9cede3d80de01","sha512":"d130c842d2d88e9404a2913474a54a81a750140ea4e815438c4710fd8001bf84210a44ca8cb7fda12eed9682673abfe323cfa27af8d16f85371e30e903a8830a","ssdeep":"","tlshash":"d0411acde7d390281ac548b79cab24a95f7558371000440dda813e796f29fb9db51c2f","first_seen":"2026-03-18T17:38:17.368725Z","last_seen":"2026-09-30T19:01:15.613626Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/phosphor-icon.js?ver=1.0.6","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.855Z","timestamp":1790794257855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/payone-core/assets/js/phosphor-icon.js?ver=1.0.6 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 200\r\ndate: Wed, 30 Sep 2026 18:51:03 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":353,"size_decoded":456,"mime_type":"text/javascript","magic":"ASCII text","md5":"4efd5465ca7bcc7a7a384504c92cfab8","sha1":"bcb946f9be3792ae50a6ba3aef994da1ac30db6c","sha256":"015944145b932205b56cbf0e27eaf916960cbebda3332a212339b4c65031c268","sha512":"37e7fe846b6fedc20676cd460b6914d4946fcbcc65a905f4804389ab518f6d9bca7dbccdf3788cfd33849a0766bf612690379f4d2cafbc1170312fa8bd2f3b8a","ssdeep":"","tlshash":"e9e0262a51f28652aba740c7f4179626f490013da40ded01d1c9c93eee68daa30fa768","first_seen":"2025-10-29T16:32:19.656873Z","last_seen":"2026-09-30T19:01:15.616764Z","times_seen":26,"resource_available":true,"data":null}},"time_used":3335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-30T18:50:55.497Z","timestamp":1790794255497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://heliostb.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://heliostb.com/wp-json/wp/v2/pages/13\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://heliostb.com/\u003e; rel=shortlink\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 30 Sep 2026 18:50:59 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"Essential Addons for Elementor","description":"Essential Addons for Elementor gives you 70+ creative elements and extensions to help you extend the stock features of Elementor page builder.","website":"https://essential-addons.com/elementor/","common_platform_enumeration":"","icon":"Essential Addons for Elementor.svg","categories":["WordPress plugins"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Magnific Popup:1.1.0","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Elementor:3.35.8","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Max Mega Menu:3.8.1","description":"Max Mega Menu is a popular WordPress plugin that enhances the menu functionality on WordPress websites.","website":"https://www.megamenu.com/","common_platform_enumeration":"","icon":"Max Mega Menu.png","categories":["Widgets","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Contact Form 7:6.1.5","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.1.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":239294,"size_decoded":47014,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9291), with CRLF, LF line terminators","md5":"27f326e2ebd6dad626a2b1a093342a5d","sha1":"8211b53db6f75169a1f5af462e3da2c2668be24b","sha256":"1e71ada0fa0f188c01e260c3ebfad76ab023c7bf99e6c45afba3636d582bbc49","sha512":"2cf06ce25000d336039cdb787a545f87bab01451cfc4fbcded8532468c3d4a7061612cfaa6cf417ae32b67d97e1c3ed42ef03210340b2d12e7b7ec9c3f96a4c9","ssdeep":"3072:9QZ6+nJPlBDtcARErLTNdpmz5dwo5Vkmz5dwo5VmeG4ckPj163hnkTXOiZDRANre:M3tcARAA9d","tlshash":"e9343a7038d5117a25ab42ca911f6a0de4c6e697c746c9e076fe42a85ff2ce139c338d","first_seen":"2026-09-30T19:01:15.619675Z","last_seen":"2026-09-30T19:01:15.619675Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1813,"timings":{"blocked":-1,"dns":84,"connect":98,"send":0,"wait":1109,"receive":0,"ssl":522},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/our-feature-shape1.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.951Z","timestamp":1790794257951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/our-feature-shape1.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 961\r\ndate: Wed, 30 Sep 2026 18:51:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":961,"size_decoded":1245,"mime_type":"image/png","magic":"PNG image data, 54 x 54, 8-bit/color RGBA, non-interlaced","md5":"67f29adbffdb8dd430f9cea19392e600","sha1":"8df79121f189924d238a9055788bb42e03cd9b13","sha256":"91679dfd0ced4364d6aa3275fcae97c5a1f179ac5767755d45423af41359020f","sha512":"206bfb46b93e29c4d02b5690287288abe8897ff2a148800852500644fd3734100ee5258c30d7c785be42650e146f9a950bdbd3e8ebfe2f8eadc4a06c719bc856","ssdeep":"","tlshash":"531198dded9ce92def46dc72402675b0b50104ec4606e044b8647fe6459a641450d2bc","first_seen":"2026-03-18T17:38:17.440429Z","last_seen":"2026-09-30T19:01:15.626204Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/payone-img3.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.954Z","timestamp":1790794257954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/payone-img3.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1667\r\ndate: Wed, 30 Sep 2026 18:51:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1667,"size_decoded":1952,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"4842af02f8361acfaa1d221ea47319f8","sha1":"527c3621a54b79240435d17925b2f0d70ff520ba","sha256":"6b547c932d0fe73bbcc54d84a8eacf6d9ff36d4e7aa1e91e6e540a0d64c3a286","sha512":"a9d9049606bdec33e6effbc67585cc00cd2dba14c824ae067e76fe909ee6bfda33bdfd79108c45aa1dfed47c95a11675b37fd3594fca3486956111fda2f392bf","ssdeep":"","tlshash":"f631b8efae3c9a5cbb0d05ab345621143644087b2f431309256cd17259b62b8e26a2c9","first_seen":"2026-03-18T17:38:17.393671Z","last_seen":"2026-09-30T19:01:15.629573Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/testimonial-img3.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.958Z","timestamp":1790794257958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/testimonial-img3.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2947\r\ndate: Wed, 30 Sep 2026 18:51:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2947,"size_decoded":3232,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"250ae38e3cf6f901e81df24257fa4b47","sha1":"d06fb4745d339c6b933c251b6fbb963a9c3e6b04","sha256":"492405447e49d113c54e25384d027c27a203db8b6d0c0c103b6b5d3df04b5a8d","sha512":"86e012a43bf7e7c6ae5c23da010b53514c0a61dd81873e815798326e188fc2ac12e7f5879378eda87fd453f600e8cbbb02f68c3ad67e72b047ab9f14733b9b3f","ssdeep":"","tlshash":"b0514b46295a04b09ada4e2631d20b0ac1698cf81e060e8f61e1fef0cfb77d27a13b51","first_seen":"2026-09-30T19:01:15.633065Z","last_seen":"2026-09-30T19:01:15.633065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/b4.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.967Z","timestamp":1790794257967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/b4.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:46:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1038903\r\ndate: Wed, 30 Sep 2026 18:51:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1038903,"size_decoded":1039191,"mime_type":"image/png","magic":"PNG image data, 1296 x 600, 8-bit/color RGBA, non-interlaced","md5":"cddbe2f0aa2fd7d0141407ca2a36c093","sha1":"22eac48c1def6d58bf3c280877ff420de4189c68","sha256":"12e64ff6ea4523aaaf764b5e692d279ee7a5ce75dc52137843e55e7878d094e0","sha512":"b4075b370512c852ed45dfa7ce9a794c313273e873e2549e3cdb3793dee3eee4cd36ede8b054013773b5e8b2f7fa9c42809cfa4b3622ecab170e763825376dee","ssdeep":"24576:CTil0cJKZtwMTijAzvf1V/ZUE/QVC+gOetAQydwR4SGyjO:CTE06KZWMOjA7f1FZ3O/QydwR4S7y","tlshash":"5125237fdf4ef60f684e88592a1bc94cb1dd47d0a1cdc74c6ae18d704a42cb364b86a6","first_seen":"2026-09-30T19:01:15.640012Z","last_seen":"2026-09-30T19:01:15.640012Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7691,"timings":{"blocked":729,"dns":0,"connect":0,"send":0,"wait":6640,"receive":322,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.1/src/fill/Phosphor-Fill.woff2","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:01.445Z","timestamp":1790794261445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 18:43:31 GMT","end":"Mon, 07 Dec 2026 19:43:28 GMT"},"fingerprint":{"sha1":"C3:5B:D6:E9:86:06:91:EE:6D:00:E5:15:F5:23:66:F0:7C:0C:E6:46","sha256":"0D:52:A5:47:28:79:E1:05:1C:8E:DB:39:17:95:F3:D8:05:10:86:FC:5A:70:B8:B3:84:AB:34:1E:E0:63:DE:18"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.1/src/fill/Phosphor-Fill.woff2 HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://unpkg.com/@phosphor-icons/web@2.1.1/src/fill/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 131744\r\ncf-ray: a4356aa64da71525-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 40\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 30 Sep 2027 18:51:01 GMT\r\nlast-modified: Mon, 17 Aug 2026 23:31:17 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:ZgvWBFwODZdWzduLouzjqthV331KFw7yP3scC/URxDA=:\r\nfly-request-id: 01KZYM1MH9P9JE5H6DNTHA3W6H-fra\r\npriority: u=3,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131744,"size_decoded":132598,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 131744, version 1.0","md5":"e411caf3fd95535654554603071189e7","sha1":"0a35a97f42227b7d165a309d7961fdf7c98321f2","sha256":"660bd6045c0e0d9756cddb8ba2ece3aad855df7d4a170ef23f7b1c0bf511c430","sha512":"efb61c9f0fa654ac2705bee8ddf5daefb3da78f6c37af6312733023eb7602ba626c62e598f3a88dfd322e8a589aec230a9ce5780d6981defa5e8e025a4591aa3","ssdeep":"3072:XX8DiMh5TQHkmjKqoPgS2IzKyyPpFk8/9hfuWufGa73q:XXJMh56cxP4SzgpFk8/+W8GQa","tlshash":"7ad31210e4f14de7e3bc93aabf40304b61975f9260396cbc3d687d2272d94d56d0b269","first_seen":"2024-08-26T12:03:08Z","last_seen":"2026-09-30T19:01:15.642369Z","times_seen":3271,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-BubbleWidget-CrSR8RTB.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:10.092Z","timestamp":1790794270092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-BubbleWidget-CrSR8RTB.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:51:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"0bd462f8b42caa969e21b8e4b2662c5b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 35\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4356adc48ff8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10688,"size_decoded":4557,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (10687)","md5":"0bd462f8b42caa969e21b8e4b2662c5b","sha1":"14f803776bc388a796fbba503d56e01d8ed90ab3","sha256":"dc20107ed9e9fa2023e86efbde021f901da8c33316db2abc44d3453204067564","sha512":"8d538ac489bd5166473f99fc070ab022a1671d60f5460e84de80a3684cc6f739dc99aa4b97bf4c378884dc165d3ad0b2a0a3e490af7b2e2c0bbe622fa35eb95f","ssdeep":"192:RxmLK/JsCR5jGdIt0kFogZWdDuh1oIuDJrTLz7FRMVwG7xgq0THajtmXKV1:KKRHR5jGdIt0iZRuDJrTnBRaDlg5T4PH","tlshash":"a222a44ef4ad34927331898cd19b4a367a2c67116b02edf4b0166fbb039494312b6b7f","first_seen":"2026-09-25T08:59:34.255682Z","last_seen":"2026-09-30T21:54:54.591187Z","times_seen":208,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/css/master.css?ver=1790794259","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.728Z","timestamp":1790794257728,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/themes/payone/assets/css/master.css?ver=1790794259 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:39:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 24101\r\ndate: Wed, 30 Sep 2026 18:51:00 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":189921,"size_decoded":24431,"mime_type":"text/css","magic":"ASCII text","md5":"7f8ab274bf2ec5e97e2cb4c18a3c2987","sha1":"08407e17de558e28329662bbb407941d917dc7dc","sha256":"18c5fc3ad7371a2f8878230df230b0192d29d81222965d2df1d2b92865958af6","sha512":"e318051b8f22b99c5a7c72d7d5be67f1100ebb85081e9295085300346f3be4be0b520fb20842f6975bcc4802d0117266e881465fb9d86943f5c6221e22bc0a47","ssdeep":"1536:vmwnXVOW5rkrLuEQjyjp7HvnK3oqRiqCq43AIofkG/o:vxnXm/p7iCL3HofkG/o","tlshash":"9804434396f318b95d1f92581beed77833ad20934a0d8fa4f788b2544f843fa2562ec5","first_seen":"2026-09-30T19:01:15.648828Z","last_seen":"2026-09-30T19:01:15.648828Z","times_seen":1,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.35.8","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.736Z","timestamp":1790794257736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.35.8 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Mar 2026 12:15:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 126\r\ndate: Wed, 30 Sep 2026 18:51:02 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":560,"size_decoded":454,"mime_type":"text/css","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"c3be9e612baf8fc4af612de8af4c0864","sha1":"f6b1366e30a459deefca035c5563f1c929c8ed10","sha256":"f68e889145cb0e47b7b190b2fdf087a9213a264ad33951512880c9f8bb6d0cd8","sha512":"aee455fe10d8126deb4d1015b6b4450ace4851e5b32890505af619f7863469c56b788b5d822849986759aa85efde260da77ed12bbb236ce2bf6629bf6759f4ca","ssdeep":"","tlshash":"f2f0c0237e4b94aa383f1d571083337c74944ec893a0a8d8e9fa91435cf4cb27330622","first_seen":"2023-10-14T23:00:09Z","last_seen":"2026-09-30T21:40:07.905512Z","times_seen":134550,"resource_available":true,"data":null}},"time_used":2354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/09/HELIOS-2.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.779Z","timestamp":1790794257779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/HELIOS-2.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 16:18:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38806\r\ndate: Wed, 30 Sep 2026 18:51:03 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":38806,"size_decoded":39092,"mime_type":"image/png","magic":"PNG image data, 400 x 150, 8-bit/color RGBA, non-interlaced","md5":"b2e6688d13edb434fdc67baed7608004","sha1":"ddf5001c9eb395d2f1c14585441a776dd6473916","sha256":"b859674e623d1084142603b2365c8b26fa0fa1d2ce97e6ed97425502f3f00665","sha512":"10afab3c22fa9e416c93bc1f0c774c6757930c3adb4c8c1e7479f2420d76dde31a9226b25d3a2f79877a9adbd303d2b0864be095aefa79aa5cb61124b37d8d45","ssdeep":"768:Z9QLnI2NzifIMtBNpTzaDwQQyLtxSYQS+Ym/cq4iAoW+X:ZKNdsBDnalbQYQSHF+X","tlshash":"1c03f180d97257a3e8521042bbfb22c2edbba1b7d494ca429651ffc39dc41a47e423a5","first_seen":"2026-09-30T19:01:15.65291Z","last_seen":"2026-09-30T19:01:15.65291Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3310,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.854Z","timestamp":1790794257854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.5 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Mar 2026 12:15:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4008\r\ndate: Wed, 30 Sep 2026 18:51:03 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13452,"size_decoded":4265,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-09-30T21:35:13.517094Z","times_seen":248130,"resource_available":true,"data":null}},"time_used":3336,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3336,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/blog-details-img1.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.965Z","timestamp":1790794257965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/blog-details-img1.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 246316\r\ndate: Wed, 30 Sep 2026 18:51:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":246316,"size_decoded":246603,"mime_type":"image/png","magic":"PNG image data, 1296 x 600, 8-bit colormap, non-interlaced","md5":"7dfe4d5d6e0ebcc75adf5d7c7d6cccfa","sha1":"3b7c87abecf2a6f9d6af9f33a0d0278b4f475c7f","sha256":"3d40b25d0858962c62d186bc7f826ed06c890625b54e33a8131f8e805872e252","sha512":"9dde66bfc28bbc7bdfde57b8c628b234018561978dae59eccd09c2f1f63339294654ee297f8f6ed830d9204ec7ffe1b4b617725adc11769f315f2771aa8a8b13","ssdeep":"6144:w2r/VfMS5FeA5zkZY5tq4EUhVF5oL4dG1j+3nB:wY/d5X5kC5grUh7w4ExgnB","tlshash":"ba3423a19e6f15350e53d3b2adc87159707e413dcaa631b87deba820a3e50f9bfc5210","first_seen":"2026-09-30T19:01:15.657649Z","last_seen":"2026-09-30T19:01:15.657649Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7370,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":7149,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.521Z","timestamp":1790794257521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Mar 2026 12:15:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6657\r\ndate: Wed, 30 Sep 2026 18:51:00 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":30999,"size_decoded":6986,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"008e0bb5ebfa7bc298a042f95944df25","sha1":"93897ebc560b38a1d2bff43c22dd6a3b7ee90c0c","sha256":"c4047043368afb4baf1aed25d358a5c2a333842a3b436b58491ab36aeee65b9d","sha512":"3f43f1a813b8188e7f8d296999491f99aff9010060f3e26b20ec32502fa76926361eda0644cdd20995661119206376c74516ea2a63ec4087fe88443aa3304022","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8E:wwlr+Klk3Yi+fwYUf2l8yQ/e9v3","tlshash":"b2d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T04:30:10Z","last_seen":"2026-09-30T21:56:54.382336Z","times_seen":45203,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/css/bootstrap.min.css?ver=1790794259","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.726Z","timestamp":1790794257726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/themes/payone/assets/css/bootstrap.min.css?ver=1790794259 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:39:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 28269\r\ndate: Wed, 30 Sep 2026 18:51:00 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":232756,"size_decoded":28599,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65343)","md5":"c0b7dc9c196a35a5e508716e078f813d","sha1":"967cbaa1f6409d7077499173a94926ed2871a750","sha256":"d29ceeca4c489a0f75837f64ee91423d74f6e7477ab1baf6b3bc0b13fc2eb679","sha512":"18c571011c7f03315cca7cb47e3fb513a2505870270e67aeb45b3161633a9a319e1320d23faae58ba7264f9ec0710804132042157207e0e939918dcf2692680b","ssdeep":"1536:O9onIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41A:znIw98fbV986I6V6pz600I41A","tlshash":"463482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-07-22T18:34:28Z","last_seen":"2026-09-30T19:01:15.663552Z","times_seen":155,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Tauri:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.845Z","timestamp":1790794257845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"GET /css?family=Tauri:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 18:50:57 GMT\r\ndate: Wed, 30 Sep 2026 18:50:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":825,"size_decoded":1040,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4298b75d7a34f9d2996686615e3ceda8","sha1":"c741b02d1319dd01009bd78fb749edf9dd897ff8","sha256":"003efa02de9aef636289acc8bfa5f11a20c40dafd459be8c8caefd27fbc0b416","sha512":"c47ebe0a4bd18f5342c533ecebd7919a60009997d9b779464b15e47b96535ec4b392297d8785ba26ea28281dc7a29cde24be90cd9dd4701ca1e67fc965e46161","ssdeep":"","tlshash":"3c01c292082ba504d7431cc112cd7d37ee5e51616445d9759bfe18c8bcabc669322f0d","first_seen":"2025-10-16T07:56:05.905087Z","last_seen":"2026-09-30T19:01:15.665014Z","times_seen":13,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/js/jquery.magnific-popup.js?ver=1.1.0","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.873Z","timestamp":1790794257873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/themes/payone/assets/js/jquery.magnific-popup.js?ver=1.1.0 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:39:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7043\r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20216,"size_decoded":7300,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-30T21:40:17.485217Z","times_seen":76607,"resource_available":true,"data":null}},"time_used":885,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":885,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:03.385Z","timestamp":1790794263385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Mar 2026 12:15:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 592\r\ndate: Wed, 30 Sep 2026 18:51:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1348,"size_decoded":848,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1348), with no line terminators","md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-09-30T21:41:57.273597Z","times_seen":139649,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/elementor/css/post-10.css?ver=1790454917","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.735Z","timestamp":1790794257735,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-10.css?ver=1790454917 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 26 Sep 2026 20:35:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 322\r\ndate: Wed, 30 Sep 2026 18:51:02 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1169,"size_decoded":650,"mime_type":"text/css","magic":"ASCII text, with very long lines (1169), with no line terminators","md5":"80909f100d8aa002d66c421f3078b7ad","sha1":"2abbb21f7fcf640f311c0e3e6c008eec2c031f29","sha256":"2612663e5915e8b25b3afbcf3150e27b2c6369cfb4f74db71cf24421b75691e6","sha512":"cb0e6edac5a83ec25c0060684d3657568e7a7ee5628c9173ceef2975cebbe2d3edc9972bc0c7b6f094518848ba2c4abe968d42789e1eab0bee6001a427064b89","ssdeep":"","tlshash":"022125457a23e432e1bb053f91c3b02c151cd46fa25f8edff41c9249f9bea462228643","first_seen":"2026-09-30T19:01:15.670019Z","last_seen":"2026-09-30T19:01:15.670019Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.35.8","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.737Z","timestamp":1790794257737,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.35.8 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Mar 2026 12:15:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 96\r\ndate: Wed, 30 Sep 2026 18:51:02 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":214,"size_decoded":423,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-09-30T21:42:10.893328Z","times_seen":130577,"resource_available":true,"data":null}},"time_used":2353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/marquee-main.js?ver=1.0.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.861Z","timestamp":1790794257861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/payone-core/assets/js/marquee-main.js?ver=1.0.2 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2160\r\ndate: Wed, 30 Sep 2026 18:51:04 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9029,"size_decoded":2417,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9029), with no line terminators","md5":"38cf1efd3af828942692f619be330bcd","sha1":"c7836fb3eb61f96e6c8bc0344d77cf5618798315","sha256":"feade23a47f6041e6d1008885642dd7ab7cc4f12d94b0c7191c9cf8ca55df97d","sha512":"24726ffcbe3cb351e8776e22488d2ef5b705fc99548be61ac6588a75b6ac9f0fd4d4ba7dc715a4699dcee4eb903cc915c0e557785905e27e35efaa2e03a3f2dc","ssdeep":"96:v7zVMfcftw6RO0c4xwW5uO/kFzFYejD4CHDvDAFWa3QMy9mtlHxHf2KAHfqWVHfT:vX6fcf5P5tkFz1BaWoROjiSFx/7T","tlshash":"311221d2aa613450c7db13bfd44f46864e349932251e4d7fb472c099ae60b08ab97f3a","first_seen":"2023-03-07T12:21:25Z","last_seen":"2026-09-30T19:01:15.672605Z","times_seen":4820,"resource_available":true,"data":null}},"time_used":4325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/arrow-shape1.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.937Z","timestamp":1790794257937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/arrow-shape1.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2686\r\ndate: Wed, 30 Sep 2026 18:51:05 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2686,"size_decoded":2971,"mime_type":"image/png","magic":"PNG image data, 224 x 221, 8-bit/color RGBA, non-interlaced","md5":"590adfaf89132b9c1a5e81a9467fca0d","sha1":"ebad673f1f2a060fe5a416c5c1f543a5ef930093","sha256":"5c5455e7682928ec932e06d739c9893c296599a8d7f6042b3218d4635e921bf1","sha512":"d7463c9a041a62f1f57a59b793af8c83d642f2d7dc612bd97e754434a4429d3e936dbf75f89614c72261bcf1467acd6575e18edd81a33cef14ae25a551d04dfa","ssdeep":"","tlshash":"fa512cd4c2ec61b5d75872f24ec7254aec2d193f4d819c70ad776ce4d0698302752596","first_seen":"2026-06-06T18:23:48.676945Z","last_seen":"2026-09-30T19:01:15.673246Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/banner-slider-img5.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.942Z","timestamp":1790794257942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/banner-slider-img5.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2044\r\ndate: Wed, 30 Sep 2026 18:51:05 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2044,"size_decoded":2329,"mime_type":"image/png","magic":"PNG image data, 148 x 60, 8-bit/color RGBA, non-interlaced","md5":"165003c5f888688ed9be3d315cbafc3c","sha1":"0c79955fc7a256b2a2c33fd2f6261216090af40c","sha256":"9b794f90ce97b66330f493687e76a2e6584b1dfb0ecc3aa92baa2dacd6b0abec","sha512":"53bbb04d3e51031ac503dae1c7aa205e79ec3af2f7177deff9f17f677a693de81c006f7f8e2549227ee2f60606fcce73155be069417187ce817da2d0977381f6","ssdeep":"","tlshash":"2c411ac0074ba93ca4feaa31cc692fe2a813187935a9c6350d54900063b935ef61e9d8","first_seen":"2026-03-18T17:38:17.441647Z","last_seen":"2026-09-30T19:01:15.675085Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/payone-img2.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.952Z","timestamp":1790794257952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/payone-img2.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1748\r\ndate: Wed, 30 Sep 2026 18:51:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1748,"size_decoded":2033,"mime_type":"image/png","magic":"PNG image data, 78 x 78, 8-bit/color RGBA, non-interlaced","md5":"4eae67b9b95895d39d533ec5a5acf5e2","sha1":"dedb62941c95aab1219ccbfa0437a7a624a973d0","sha256":"95b4a45033dff0be055c21e095141347f15d26757a44bae28c7328b7797010a5","sha512":"3cffb9c182d15ceaaa5e46806d954081dcb45da405e8ea2e79214eee17ead1e0b72d70f019c58c6d194b2c14d2850efc4bc44d1aaa212f9b4e30e3de5d9397c9","ssdeep":"","tlshash":"74312bf7aa69a4985386595412a3b9d64e639ce40dc40c3df40d4a3678140b13ba7bc2","first_seen":"2026-03-18T17:38:17.430609Z","last_seen":"2026-09-30T19:01:15.677912Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.1/src/fill/style.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:01.273Z","timestamp":1790794261273,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 18:43:31 GMT","end":"Mon, 07 Dec 2026 19:43:28 GMT"},"fingerprint":{"sha1":"C3:5B:D6:E9:86:06:91:EE:6D:00:E5:15:F5:23:66:F0:7C:0C:E6:46","sha256":"0D:52:A5:47:28:79:E1:05:1C:8E:DB:39:17:95:F3:D8:05:10:86:FC:5A:70:B8:B3:84:AB:34:1E:E0:63:DE:18"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.1/src/fill/style.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: a4356aa50a0b1525-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nage: 79693\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 30 Sep 2027 18:51:01 GMT\r\nlast-modified: Fri, 11 Sep 2026 10:10:45 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:VVmAaDpYLBkQqVRki0rjj1jXbnl/Ar/cLF6BeQHm1Pw=:\r\nfly-request-id: 01M1KEQNY3ZM5M9BE61J6BQ763-cdg\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85821,"size_decoded":12812,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f0561d4b928f3521c1a3a66507052039","sha1":"afb44a713f4dc526e2bffda0535da7bfcfcb44a9","sha256":"555980683a582c1910a954648b4ae38f58d76e797f02bfdc2c5e817901e6d4fc","sha512":"7e1018b04408350683e5913ca90abe30976821b7be2f027af178b9635448d07f975c15965f400092f80c086324ebe51118ded29604a0b70b02fdc13cd0cb2218","ssdeep":"768:Tco1Z16hMNSpfiIxQ3c90yfeLIw89KePvx7N+jLTrWROx:Tco1ZkbRxP9d2cwWFvG","tlshash":"dc83efe8f7be1ad03341d1d0220a1632bb0d9324f986bc59c963798d71ea119d78e5fe","first_seen":"2024-04-04T21:10:48Z","last_seen":"2026-09-30T19:01:15.68013Z","times_seen":2574,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/css/aos.css?ver=1790794259","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.725Z","timestamp":1790794257725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/themes/payone/assets/css/aos.css?ver=1790794259 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:39:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1539\r\ndate: Wed, 30 Sep 2026 18:51:00 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":26053,"size_decoded":1868,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-09-30T21:49:24.415704Z","times_seen":46717,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/js/fontawesome.min.js?ver=1.0.0","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.872Z","timestamp":1790794257872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/themes/payone/assets/js/fontawesome.min.js?ver=1.0.0 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:39:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 428137\r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1194299,"size_decoded":428396,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65350)","md5":"b503fd338c9d76d49b324313c061cbc6","sha1":"15287ab11f071b3295021ed3d3125fb30d2f3fc4","sha256":"2429284e3bc95d9901f8b0a1b3c825fd7cab468c18851ba1c7963708753e0ffe","sha512":"a5077f6525b3c0c7dd9c8ef5b7ca68a68366f20fb68e7ce2d93e085414a6d192a72f3c17f5845e131e4fb568ea744d1d1945a2a17533651656407be47aaf237d","ssdeep":"6144:1yompD5cEYjS2sDVW4o3ch/V2Dnio/NULo9tRtKerVs3O3seX/YJF2S85:qD5cEJh/wtRw/3O3l7","tlshash":"1b25c578d7a4a3bc9d8687b9c62110747a8f90be71a09328937dc6f0b2575dcc2d9cc9","first_seen":"2025-08-04T06:29:49.625176Z","last_seen":"2026-09-30T19:01:15.680811Z","times_seen":172,"resource_available":true,"data":null}},"time_used":1188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":885,"receive":303,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/banner-scroll-img1.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.928Z","timestamp":1790794257928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/banner-scroll-img1.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2382\r\ndate: Wed, 30 Sep 2026 18:51:04 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2382,"size_decoded":2667,"mime_type":"image/png","magic":"PNG image data, 54 x 325, 8-bit/color RGBA, non-interlaced","md5":"30eadd2c02139977f3963f99678f93b0","sha1":"e1bc263587a624da2211ee920e4fdb6e6e555aab","sha256":"f02c172de1ae3c4d2c11e346021a6177c0f38f7be73ddc7d8ca2b6056a6b7b72","sha512":"6edfc92bfec64f2891103f002be0446ee7176a959a87a91307ef25d590d34b18da1c6b3ebfbe6c904591b6c9e0b4206ab281cf13984b453c37104eb921bab76d","ssdeep":"","tlshash":"d4411b9b33fe56788d37226d278087fa9b1f2217a2a06d3ccdc1174750a144441aa129","first_seen":"2026-03-18T17:38:17.429269Z","last_seen":"2026-09-30T19:01:15.682294Z","times_seen":4,"resource_available":false,"data":null}},"time_used":4356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/star-icon1.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.932Z","timestamp":1790794257932,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/star-icon1.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 651\r\ndate: Wed, 30 Sep 2026 18:51:05 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":651,"size_decoded":935,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced","md5":"d9704eb31952cbb231b04da3a4c9bac0","sha1":"13cd4a3d87eb03654d407461c0a0b479a4ea1e2a","sha256":"bd29b96eb62e46913d1a932ace92612ad4348842c694d3a52f673b1ac23b49ce","sha512":"d33996c3bc193bd128bb6b4431ae0d53251c5dc159f6b4455c6fcf3323a2b1b29df5b20473efe11d7d1c206ca35e768a84d84925a6f6c9c25c8447ec8e39c540","ssdeep":"","tlshash":"23f0c8e58fcaa9a86114cf4a6f01cee458cfec010201d347744f88a0c03f9108cb3346","first_seen":"2026-03-18T17:38:17.392329Z","last_seen":"2026-09-30T19:01:15.683529Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:00.219Z","timestamp":1790794260219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:55:34 GMT\r\nexpires: Tue, 28 Sep 2027 15:55:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 183326\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-30T21:33:56.195903Z","times_seen":300713,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:05.850Z","timestamp":1790794265850,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heliostb.com/\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:51:05 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"fb40f488d34d8e500cd5193b6cbf1df5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 38\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4356ac19fd78be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10475,"size_decoded":4377,"mime_type":"application/json","magic":"JSON text data","md5":"fb40f488d34d8e500cd5193b6cbf1df5","sha1":"37afd6b5aafd32a9f0b98843b182aba8cf5ce608","sha256":"e2076eca9c47fe568e55ee6b0f1d9d11ce186576fabecdb8c27fc645b33e8fae","sha512":"22fe865ed894dea88eb72850a15dbfc321356ba6c67e2cdf325170dc19d03c1f0c427e3af6a9e6bd63bc27a024d706dd1ee6c00c02727a27df9140a77b7af2e5","ssdeep":"192:vmdjWl179zTRVUEAHq9iH+TidAg8G+9pPkKVKOetm6ksTAdYPizj1L:ak179zOHq9iH+TK58G+9pGtHLPizp","tlshash":"f422a557cb105adb02c257863e8fb5c2b63841de179425fbec4834bc03cddaa6217b86","first_seen":"2026-09-24T04:33:32.521723Z","last_seen":"2026-09-30T21:54:54.627881Z","times_seen":391,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-iframe-styles--AKXn-6M.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:10.124Z","timestamp":1790794270124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-iframe-styles--AKXn-6M.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-BrandingWidget-MJiLQkQP.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:51:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"a5911fd0628b3cf5cec05686e05ab9d9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 35\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4356adc48fd8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9008,"size_decoded":3917,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4572)","md5":"a5911fd0628b3cf5cec05686e05ab9d9","sha1":"8425eca2130d070fa14f6c4f10a598114b55e059","sha256":"1201d8d289332d47312fab8f697cef54c6d442ba048130d8a5da9072b3573105","sha512":"fa28703ea9d3cc47a30ccf066ce8b7af7e372c145148df990a6caa89ab727c79acf72b293d13b0cd36a2f7b73bcbd18b25e3705eace8d6ea7df2aa1d2cb33f9c","ssdeep":"192:VJLb83BvkHM9NiEJqisgZLvk+5/+qsqXf8utWAEIU5UyWkS7D/7df26G2Ld8AAH:vb8xwMTqils7UWAEIU5jWkS7DzdNG2LY","tlshash":"e302c522f3df3065b2148a4855f7fbb83e2d61216f518df129a4bb391b84ac62021f7d","first_seen":"2026-09-14T08:43:43.604039Z","last_seen":"2026-09-30T21:54:54.803744Z","times_seen":780,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/cookieadmin/assets/js/consent.js?ver=1.1.6","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.751Z","timestamp":1790794257751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin/assets/js/consent.js?ver=1.1.6 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Mar 2026 12:15:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5055\r\ndate: Wed, 30 Sep 2026 18:51:02 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20872,"size_decoded":5312,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (608)","md5":"0a47e8386854876856ef0e587a2e6782","sha1":"2cc29717506b087dda1be28152b68574daef44a0","sha256":"532fc201251dfb0c7d015b20f64c3e6b595fd291be0fc78ec971247b12baa2fa","sha512":"0588fc4e8e6b5468a9e327d00838960533e1290cf751b87e28fee61cf764bdfffed7b252bbe368fad5be7125d415e3a1b4db7d3f79be6442a49ab49e10abaeb1","ssdeep":"384:tIsxr+Jymi2vIR/iF/iiO45iJfiT3iqJklrzKCNXd4w/ibfie2ij8ivfiW7Bfijh:t7rFLR6F6R4AJaTyqJklrzKCNXd4w6bG","tlshash":"3592ffa4fedc962c00e912f9d56a5689b52c5032f845a89e3f3cb4f48ad0fd38cc5a57","first_seen":"2026-03-15T03:53:51.074317Z","last_seen":"2026-09-30T19:01:15.68755Z","times_seen":473,"resource_available":true,"data":null}},"time_used":2340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:05.738Z","timestamp":1790794265738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:51:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"e0932bfcbc6f24c14db6ecf6a40c237b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 39\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4356ac0dfb78be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":325187,"size_decoded":121334,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42299)","md5":"e0932bfcbc6f24c14db6ecf6a40c237b","sha1":"ca93c1dadc8581327bcf1566f1ea65125668bb0e","sha256":"f0cc6e5637c9a4770c234b6572fce7619a43ae07744c6b5b7b46bf54dd4782f4","sha512":"f542105bc75e6856f311b124d727e05eeb762d539e385316b12ea653681771807fd7642f377be1a9768b26e5c43c444731e34577fb808843d4b5cbc3a4a1078d","ssdeep":"6144:w1on1J2gFAAPvkV3ymzXLXkCQTei40OFAyN9d/y0b:wC2FAPvktTDkCQTA0O6yN9d/y0b","tlshash":"25645cd871a2743103fa59e120bb1106b33969193409c4acf61deeea3e7ad4a5277f7c","first_seen":"2026-09-25T08:45:54.043189Z","last_seen":"2026-09-30T21:54:54.626988Z","times_seen":340,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-BrandingWidget-MJiLQkQP.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:10.097Z","timestamp":1790794270097,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-BrandingWidget-MJiLQkQP.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:51:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"09a8a4df0fbc87c70a3579eb083e45cb\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 35\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4356adc18f08be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3526,"size_decoded":2166,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3525)","md5":"09a8a4df0fbc87c70a3579eb083e45cb","sha1":"eaadb2ae4b49e5ce917ddeaf7fc859c6bbfb8dd9","sha256":"e51ee752f7c29f39ca4f4a911150c3345f92808c4fd3ae18a0b58d7a3d473f4d","sha512":"f08ae1af034284ca5f5c0a6d3474f1e10289281a915f5955648bb1a51edae305c44dca5a6ac9f43efac504837d44ec8d919f00aaf17f980a62f57939ddc40177","ssdeep":"","tlshash":"a671e70ff0eab4e5f335510440eb663e947e1b0887758df5823baca22354dc290b7a76","first_seen":"2026-09-25T08:45:54.071971Z","last_seen":"2026-09-30T21:54:54.662769Z","times_seen":271,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://vsb102.tawk.to/s/?k=6abd5a1da35fa2754052173d\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OGNhNzE5ZmJhODU4ZDE5MjNiMTEzNWUiLCJ2aWQiOiI2OGNhNzE5ZmJhODU4ZDE5MjNiMTEzNWUtTnlCZGJiWUhHa1BzS0NCWFZtVkxhIiwic2lkIjoiNmFiZDVhMWRhMzVmYTI3NTQwNTIxNzNkIiwiaWF0IjoxNzkwNzk0MjcwLCJleHAiOjE3OTA3OTYwNzAsImp0aSI6ImpobFYtcDBfcEJjNURucVNETWd6YiJ9.fNfjRAqkbqtJskYKwUH20Jy-HZmsew2f3CsTPjUdPwRHSwV9ik3ifsXPZO8RczhkDei4-GOuCjVmXhq_x7Q_3w\u0026EIO=3\u0026transport=websocket\u0026__t=Q3pg0M5","fqdn":"vsb102.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:10.100Z","timestamp":1790794270100,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /s/?k=6abd5a1da35fa2754052173d\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2OGNhNzE5ZmJhODU4ZDE5MjNiMTEzNWUiLCJ2aWQiOiI2OGNhNzE5ZmJhODU4ZDE5MjNiMTEzNWUtTnlCZGJiWUhHa1BzS0NCWFZtVkxhIiwic2lkIjoiNmFiZDVhMWRhMzVmYTI3NTQwNTIxNzNkIiwiaWF0IjoxNzkwNzk0MjcwLCJleHAiOjE3OTA3OTYwNzAsImp0aSI6ImpobFYtcDBfcEJjNURucVNETWd6YiJ9.fNfjRAqkbqtJskYKwUH20Jy-HZmsew2f3CsTPjUdPwRHSwV9ik3ifsXPZO8RczhkDei4-GOuCjVmXhq_x7Q_3w\u0026EIO=3\u0026transport=websocket\u0026__t=Q3pg0M5 HTTP/1.1\r\nHost: vsb102.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://heliostb.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: QLbrUsYi1+ykglH2Hxr6Og==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 30 Sep 2026 18:51:11 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: oBNDD1V159X3fkMv54R9enscRbE=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nStrict-Transport-Security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: a4356adf5de9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":417,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T21:35:43.045286Z","times_seen":18742679,"resource_available":true,"data":null}},"time_used":1545,"timings":{"blocked":0,"dns":505,"connect":500,"send":0,"wait":535,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.850Z","timestamp":1790794257850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 26 Sep 2026 20:35:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1759\r\ndate: Wed, 30 Sep 2026 18:51:03 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5107,"size_decoded":2016,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-09-30T21:49:24.291136Z","times_seen":15872,"resource_available":true,"data":null}},"time_used":3340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/bdthemes-element-pack-lite/assets/css/ep-navbar.css?ver=8.4.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.837Z","timestamp":1790794257837,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack-lite/assets/css/ep-navbar.css?ver=8.4.2 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Mar 2026 12:15:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 997\r\ndate: Wed, 30 Sep 2026 18:51:03 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4664,"size_decoded":1325,"mime_type":"text/css","magic":"ASCII text, with very long lines (4664), with no line terminators","md5":"59b42decec85b53dcb520744e4d30260","sha1":"63104e80cd3f1d6d428bedce2a3df7c2a3ddc3fd","sha256":"5a3e02078b5c4faf94cbe3e65abfd9238703c9fc87a21a6296b4073794099756","sha512":"78a3f618ad4a4a0122b9bc1d34c47528dbd558338c7af662dc88b9a61311cd70265949b2e28d569d4c15367831927412265de87af43832e60256b54645165741","ssdeep":"96:5sRJozXANmFB6/qtBr0s1vbs2nNOHxdwYXCoqlv8JloM0yz8YBy8d:yRJozXANmFB6/qtBrnbs2nNaaYyoqF83","tlshash":"bca1be069da334d8e117d24ccfd067158f28a222b2198edb92fb63f905eb11b11a9fc5","first_seen":"2026-05-22T02:23:09.389897Z","last_seen":"2026-09-30T19:01:15.691914Z","times_seen":6,"resource_available":true,"data":null}},"time_used":3352,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3352,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/banner-slider-img4.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.941Z","timestamp":1790794257941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/banner-slider-img4.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2784\r\ndate: Wed, 30 Sep 2026 18:51:05 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2784,"size_decoded":3069,"mime_type":"image/png","magic":"PNG image data, 157 x 60, 8-bit/color RGBA, non-interlaced","md5":"4a76a378d9a8111e442ca032d7680d81","sha1":"57aa8bb012ad12b4e796374c45b59a1c3df02ee1","sha256":"907e2b643be3dd0bba883f6e04651fe3739ea8ad6edc86d48389dbe750d55341","sha512":"72a4cae5707344a32f6c6573e36d2f0481c7742ec409abb4f8a130cf7e32c587d1ef79b38e87f37f1d10a49d620a162d7c1a5c5326a6308c331291ada6c6708c","ssdeep":"","tlshash":"95514c8593e5b01d2a7f90930744861397ba0277061ef5af18a1fa966c71937c3709db","first_seen":"2026-03-18T17:38:17.439074Z","last_seen":"2026-09-30T19:01:15.694579Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5243,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.1/src/duotone/style.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:01.274Z","timestamp":1790794261274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 18:43:31 GMT","end":"Mon, 07 Dec 2026 19:43:28 GMT"},"fingerprint":{"sha1":"C3:5B:D6:E9:86:06:91:EE:6D:00:E5:15:F5:23:66:F0:7C:0C:E6:46","sha256":"0D:52:A5:47:28:79:E1:05:1C:8E:DB:39:17:95:F3:D8:05:10:86:FC:5A:70:B8:B3:84:AB:34:1E:E0:63:DE:18"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.1/src/duotone/style.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: a4356aa50a0a1525-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nage: 2985263\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 30 Sep 2027 18:51:01 GMT\r\nlast-modified: Thu, 27 Aug 2026 04:00:32 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:/G039/D3/9zfcUxUGB/dJ5EZaeRzfTFRuXLUuAblrl0=:\r\nfly-request-id: 01KZEZBH2MPJDH5QDEK5DMDTGJ-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":231484,"size_decoded":23268,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"713bc6f267fdd326c6579d5ff1e1343d","sha1":"a929631f2b12dc83dd638c39506c12f22936f025","sha256":"fc6d37f7f0f7ffdcdf714c54181fdd27911969e4737d3151b972d4b806e5ae5d","sha512":"9648284b6f49de754598e28aab54095a76d48c154b769051cd459dddf512ae1d59e5c114a581da298ff53d14edef1993b5c3c875cd384dadab10fe29c96b8b1d","ssdeep":"3072:b/GP5yanAhPUPQIBR0Js+XlS0/xATy6ZDa5aLGVEaXCt7A3C4jevbqjc4nIZqJ6/:DTsGYoohNBdr","tlshash":"5a3474e4b6bf2851a346f5c3118b9124b34ca21dcd5a9c1986e23cefd6d270dc6af18d","first_seen":"2024-04-04T21:10:48Z","last_seen":"2026-09-30T19:01:15.696037Z","times_seen":2230,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":33,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:05.861Z","timestamp":1790794265861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://heliostb.com/\r\nOrigin: https://heliostb.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-w8jw\r\naccess-control-allow-origin: https://heliostb.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Wed, 30 Sep 2026 18:51:06 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: a4356ac1afdb8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":710,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T21:35:43.045286Z","times_seen":18742679,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-includes/css/dashicons.min.css?ver=7.1.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.715Z","timestamp":1790794257715,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css?ver=7.1.2 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Mar 2026 01:17:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 35101\r\ndate: Wed, 30 Sep 2026 18:51:00 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59004,"size_decoded":35431,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-09-30T21:42:10.942093Z","times_seen":75791,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.745Z","timestamp":1790794257745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"GET /css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 18:50:57 GMT\r\ndate: Wed, 30 Sep 2026 18:50:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22365,"size_decoded":1602,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"63c1df95a2b11b7542db5b48c56125f1","sha1":"b4116959b5ecbc00779addd320d98d8863692210","sha256":"7ead28f8032c788137532c3a88e9a7bda1411143e54ed4c066271c29f90340b7","sha512":"a5e42a035be607f6a98d7f73a26c37ad2e03a81dd0b54f2cc7bc5dc94a41b3b80af855ce9604e2b2283a7936df9008f068a8285c4cd8e4e960ab411c9c687d4f","ssdeep":"384:bvWLvKvXvUwvzv+vLWaZOUPSVsWJqtUghWVWInkUBALWWXYjUyvsHWm1iUz+54WD:bv0vKvXv3vzv+vLrZOuSVsMqtNhWV1nR","tlshash":"66a2bdd6486ba405ab870cc163dfbfa2ad9e5151a081c4becbfd2cb86cd6d32136075d","first_seen":"2025-09-17T18:46:03.2743Z","last_seen":"2026-09-30T21:28:26.340066Z","times_seen":24155,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":24,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/counterup.min.js?ver=11.1.14","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.866Z","timestamp":1790794257866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/payone-core/assets/js/counterup.min.js?ver=11.1.14 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 830\r\ndate: Wed, 30 Sep 2026 18:51:04 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1928,"size_decoded":1086,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1928), with no line terminators","md5":"ffa1c1c1632e8b1ef25ae00ed94385c0","sha1":"d41504626fcbcd03e5b44b4c8f7d8b02d56ea1af","sha256":"896688d966de7f514e72b6c5b156de3fb6dbfcd61436e6db46ce3b0e4f52426a","sha512":"df18cde2a7c51bbc3bbb1496291cb8977e3e1d565f7316b85b94719fc4017ab3d3edf1e18292d8314b902187e3eac4477f8ff5c585ddb66520fdf7db223696b0","ssdeep":"","tlshash":"1a4172f17e1478f30b6b24aa04390042e9305ab4227364c0ff9ea92614652677dfff39","first_seen":"2023-03-09T22:10:28Z","last_seen":"2026-09-30T20:03:36.39948Z","times_seen":2914,"resource_available":true,"data":null}},"time_used":4417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/js/popper.min.js?ver=1.1.3","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.875Z","timestamp":1790794257875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/themes/payone/assets/js/popper.min.js?ver=1.1.3 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:39:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6621\r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19150,"size_decoded":6878,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19015)","md5":"c2457ff14b8092f06f6d6610b202ec7f","sha1":"6465bce461e777d6871c2d8dead3f6cfbbfab664","sha256":"c86333d79746bb469e7d3fd957b4e58f05fc2e2c22033a9f523653aae6142591","sha512":"b0efc178fda43e51519e078989f0207102cb99b132d715a6e275abf485612c17cf8aa7c249aede0fcd1619f69d19d9bd8f4a81ff2193e1c556715260b131cdfc","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb96P:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3c","tlshash":"9f82a4cc3291b06643a79167a06f960eb2339979614e9410f199f2d87c70ef9513fc7a","first_seen":"2023-03-07T01:03:27Z","last_seen":"2026-09-30T19:01:15.699032Z","times_seen":536,"resource_available":true,"data":null}},"time_used":883,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":883,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/banner-slider-img2.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.939Z","timestamp":1790794257939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/banner-slider-img2.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2420\r\ndate: Wed, 30 Sep 2026 18:51:05 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2420,"size_decoded":2705,"mime_type":"image/png","magic":"PNG image data, 150 x 60, 8-bit/color RGBA, non-interlaced","md5":"1edb4ffb0c451dd639a204bd8e6a43f0","sha1":"6c28821e326eb4faf43e7125af9e9d78af16febf","sha256":"068523caa178309c4a83b4d6a916f1c5b81c286d2445b0c9c295590b4834bfd4","sha512":"009fc093d0419fd078872e8ba404aef7c68223ce0b11d8830757727406e0bb4a551fc9d9148bf920705e327ded01ec2523bbee737644be940131113d6da8dee2","ssdeep":"","tlshash":"cc412ad6e8b0f4486c9f1d3781ba06e99bee098f4a2401f762601b669d2063d633236d","first_seen":"2026-03-18T17:38:17.37445Z","last_seen":"2026-09-30T19:01:15.699637Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/payone-img1.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.953Z","timestamp":1790794257953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/payone-img1.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 805\r\ndate: Wed, 30 Sep 2026 18:51:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":805,"size_decoded":1089,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"d9a4dafe6190a636a589e829ddbbbe46","sha1":"10f9b7cfd8fef1ecfc9479ae4f871778e760ce0a","sha256":"3b65050c9087397a24a1a8634d6fcd236d3e92b291cbdb4a3b867d2f965866c1","sha512":"8ce4eefc0f697d81203505cc3ead21b88d61b76ac0e7892ee861980b621b02e3ef4261739b421c8904f824d1eeb392d0054310277e020a411469b7456e1e11c0","ssdeep":"","tlshash":"8f0112dcfaa9d993418ac773101b09d65d3bd439a7904014bd84e50c4419b6091ad314","first_seen":"2026-03-18T17:38:17.405422Z","last_seen":"2026-09-30T19:01:15.703553Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:01.387Z","timestamp":1790794261387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 183516\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-30T21:35:54.176117Z","times_seen":311376,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.1/src/regular/Phosphor.woff2","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:01.409Z","timestamp":1790794261409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 18:43:31 GMT","end":"Mon, 07 Dec 2026 19:43:28 GMT"},"fingerprint":{"sha1":"C3:5B:D6:E9:86:06:91:EE:6D:00:E5:15:F5:23:66:F0:7C:0C:E6:46","sha256":"0D:52:A5:47:28:79:E1:05:1C:8E:DB:39:17:95:F3:D8:05:10:86:FC:5A:70:B8:B3:84:AB:34:1E:E0:63:DE:18"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.1/src/regular/Phosphor.woff2 HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://unpkg.com/@phosphor-icons/web@2.1.1/src/regular/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 147380\r\ncf-ray: a4356aa5cc421525-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 37\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 30 Sep 2027 18:51:01 GMT\r\nlast-modified: Sat, 30 May 2026 04:50:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:wupF6gX/XH3xk2dwwQRyXypo9D/TQ/NfPaI6MLJ94yo=:\r\nfly-request-id: 01KRGYNBD3ZM49GBXAR07Z80WD-fra\r\npriority: u=3,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":147380,"size_decoded":148234,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 147380, version 1.0","md5":"527636c38907af87d10e6b15ac392648","sha1":"0d815f14037397ccbfd48fe5dfbef96ed6e66205","sha256":"c2ea45ea05ff5c7df1936770c104725f2a68f43fd343f35f3da23a30b27de32a","sha512":"e8e65252471cb9b85a3f03e128c3d504c7ea73a1123bc40b18dec46cd1b13da83a1313b1606b9a969cb9bb646bade289e5c8b5096a440505113e1652190d2511","ssdeep":"3072:AQbeiU5I7UJEmgfV57cK0jt6lvmT9QiyDsoEmmTHNAk5rsSbro:paF5DKXfVmKRxmKgmmTHNWS4","tlshash":"96e312840a514ca8d08167f795c42b1bdac69bb6f0b1e94d941f9eecd3bcf90f2d4a14","first_seen":"2024-07-01T20:12:46Z","last_seen":"2026-09-30T19:01:15.709596Z","times_seen":4980,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/banner-shape2.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.938Z","timestamp":1790794257938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/banner-shape2.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 812\r\ndate: Wed, 30 Sep 2026 18:51:05 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":812,"size_decoded":1096,"mime_type":"image/png","magic":"PNG image data, 78 x 78, 8-bit/color RGBA, non-interlaced","md5":"bb50100f955ec7cdbe965183271ab121","sha1":"0b8b840653bd9d5c6532af3149be4c1c235e170a","sha256":"4acf214874465df5ee9305096c63489b2e976216d4fc4e557c08c71dd114f46b","sha512":"03dace471aabf4897ec3ed5c474e0a7d5a4879636e48daf318314e1d96b4b7a2af2838b1762af3419d865dece88a6b1e7fa49805f213d221d399ee4bbe074512","ssdeep":"","tlshash":"7b0186db5b461456401fcc634e4f418dd842b22bb0042a49d104b5edb50d06d2e8e0e3","first_seen":"2026-06-06T18:23:48.728049Z","last_seen":"2026-09-30T19:01:15.71042Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/our-feature-icon1.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.948Z","timestamp":1790794257948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/our-feature-icon1.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1494\r\ndate: Wed, 30 Sep 2026 18:51:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1494,"size_decoded":1779,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"7a84f2879114e79268183bc92c53e881","sha1":"0c5fe7625e3e4849524e3f0c04138b5a39d7c000","sha256":"4cdc9336f55c61ea550d6559b28487171ae8260fc07292942a69d072afa51f89","sha512":"258e1f49fde44433229280f009983938578059d9f1a46053fc2a6eb72de1371576e84e36f3bfe4a1660dab76290df8847cad61e358d3753246c830dae5124b31","ssdeep":"","tlshash":"d931299b5445f8946b4065f040fac232c8cf7004c1351482c0eda93df7d96ec698f19f","first_seen":"2026-03-18T17:38:17.351899Z","last_seen":"2026-09-30T19:01:15.712405Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/cookieadmin/assets/css/consent.css?ver=1.1.6","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.713Z","timestamp":1790794257713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin/assets/css/consent.css?ver=1.1.6 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Mar 2026 12:15:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2439\r\ndate: Wed, 30 Sep 2026 18:51:00 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9278,"size_decoded":2768,"mime_type":"text/css","magic":"ASCII text","md5":"e4e95da070257a03f0792b27fc52ae2f","sha1":"4a747e290294c2a95d4adc374272e3ceffc55242","sha256":"108453a264e95f3e7c04bedd6ffe5f1d17a6a331e297f3341cae595b367ba80b","sha512":"2ae13819654d19401f55803663f0d20e98ece4e03f4a157a503aea2b33a1848ea765d4dfdcaaa95a89b1e599505c2b9b0e40fc0fb7502e7c49f4cba85d45aac4","ssdeep":"96:F4s1BGxG6rCZL5XyOmHQikEciAP6iHQm20S5wkLACq9LZRczmDIh6iM7ABF:F4s1yCM5ciAmm235+LZuO77ABF","tlshash":"e91224163e9c560c621b80d8f994db46953e4552fa0f0d9e56b238bcc2c87d74ce2ede","first_seen":"2026-03-15T03:53:51.088023Z","last_seen":"2026-09-30T19:01:15.714525Z","times_seen":871,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/mobile-app-img-1.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.822Z","timestamp":1790794257822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/mobile-app-img-1.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 53902\r\ndate: Wed, 30 Sep 2026 18:51:03 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53902,"size_decoded":54188,"mime_type":"image/png","magic":"PNG image data, 636 x 562, 8-bit colormap, non-interlaced","md5":"c10a3a84cea2613386c84a8cd39dee87","sha1":"a96f6e8fe98dadaed983f05208e3d22481065986","sha256":"f4a475fc9b1610e313e1544e22e230dee17218f97437cbee6e9ee5c0f9619a71","sha512":"ae2c81ed610468eabc3db6454b0062a755673ecf1821b4877af660900db5449cd2148a29d6a1c1db5b60528635aaa2df96d262b064fdd6ce0a22073571f70a21","ssdeep":"1536:LPgCwTF2EMj3+EmTdjH1+umuLEITpsdxa+FY5:LofI6bBFQIdX6Y5","tlshash":"b83301e71f4692d9cfdef11a1d8a9dc1d8e378089789b50719a5c4b7ac0c8780cbe663","first_seen":"2026-09-30T19:01:15.716872Z","last_seen":"2026-09-30T19:01:15.716872Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3265,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.860Z","timestamp":1790794257860,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Mar 2026 12:15:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 38152\r\ndate: Wed, 30 Sep 2026 18:51:04 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":143709,"size_decoded":38410,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65279)","md5":"83e9b29f0086bba50d653f1cb8dedc3c","sha1":"f8f89387c9aca9d524bb638eae457d4659efca52","sha256":"2ac3af00c283c0b2ae6108fa83a2053e51274a2a812fb063916cbe19bc4f96b5","sha512":"c8018876ee96b4600ae32342ec6d21b452ad4109d605fb838f146b734de274ef5e37179567a2c67ec828dc1b673364637fc82e7dfe8f7adbb18e20555577160c","ssdeep":"3072:pJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/Yvr:pJLC4dkEUYnafpl9v8cIWybV4y+oGMMG","tlshash":"fce3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2023-03-14T09:12:04Z","last_seen":"2026-09-30T21:41:57.275592Z","times_seen":110232,"resource_available":true,"data":null}},"time_used":4325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4226,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/aos/2.3.4/aos.js?ver=2.3.4","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.870Z","timestamp":1790794257870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/aos/2.3.4/aos.js?ver=2.3.4 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:50:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 818568\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:05:49 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fHEs3atm4MEMg6sKb6jyOip44mBBd%2FiBsldDcRpcldYup3MrxDLnQJuBk0BDpEei002cArCr9yGGkSK2GnW8k76wS1nBEY8rsba8WRWOed8pe%2BxHaT7Ejibyh%2BnSGD7JVd3lRrCv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a4356a8fbbddb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4109\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14690,"size_decoded":5126,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14690), with no line terminators","md5":"d3718e34eeb0355be8e3179a2e2bccb7","sha1":"850ee2e5c9fba610840137c6c4e92b5abbc428fe","sha256":"a5005b2e414770fd5ccb40bc221a12771966d02b5c1f9c89da48bd8e3811d377","sha512":"03b0189357c6297e92d92b07cb098f92b9f34d91eb822553ec671090b1837b67afd1a59bf337a3cadcd2f308e8ecf1845caa893ab8d0e28391b678a6211641b7","ssdeep":"384:3IJfNa+yGZHbXPgJT7UKEgMt1sH6GCZy54:4JfNa+yGZHbfgJT7URgesaGCZy54","tlshash":"d162e8dc3691f0a617a790f782bf600ff2f04874245d9090d269c4e63eb58ae8673e5e","first_seen":"2023-03-07T01:19:08Z","last_seen":"2026-09-30T21:54:33.23151Z","times_seen":11037,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/bdthemes-element-pack-lite/assets/js/bdt-uikit.min.js?ver=3.21.7","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.887Z","timestamp":1790794257887,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack-lite/assets/js/bdt-uikit.min.js?ver=3.21.7 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Mar 2026 12:15:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 47966\r\ndate: Wed, 30 Sep 2026 18:51:04 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":147237,"size_decoded":48224,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65445)","md5":"b9a3f6f2eb439a49c5a5d3bddc9c1322","sha1":"5a665ee35237f6311105e27493a8fcf700e5f5b2","sha256":"8a86da2c64b0385b1cf8388405ba9f3bf0a38a69e931430bd455a239393eb657","sha512":"7a0977fd1ed07ec4adcdfa9e0427cd04834ee88c63dc772f79ecd764ce45c27079898d936a14e1459d6dd9507b76a494dee4fdff87c357a22f4933f8111d454b","ssdeep":"1536:sUUImH5rcQANFkizG8wSdBPDNHSC68BdThNqt6IEYi5tywT3AYNSJKxfpEldXvXH:ZF+Id/NN0E+YNSJK8R/y9ngXPVCXW","tlshash":"f0e31b9733a5b01243e741f650ab4a06f33a5588b40784dcf67ca9ca38aa44671bff7d","first_seen":"2025-06-30T21:15:58.325484Z","last_seen":"2026-09-30T19:01:15.722952Z","times_seen":2761,"resource_available":true,"data":null}},"time_used":4398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4397,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/essential-addons-elementor/eael-2119.js?ver=1759499134","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.914Z","timestamp":1790794257914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/essential-addons-elementor/eael-2119.js?ver=1759499134 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Mar 2026 12:16:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1844\r\ndate: Wed, 30 Sep 2026 18:51:04 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6540,"size_decoded":2101,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6540), with no line terminators","md5":"879aca302d28ec6db1eeb41f503f1cb9","sha1":"fda05a4865ac6a0e24c3ee80341591d0f3852c3d","sha256":"6bc37313732405c9e6fb7bad2e3d7715b99cbf83ae9871ab6ba2b6efea17b2dd","sha512":"cde3e1b19c32053a4605e96b600377f584533f4d09c27d0c5aebd54b3c89335b12539e8c13c2812aab7f326ba84b6fd23eacafd23b4cbe9e011d514deffa4cda","ssdeep":"96:T01OIsEeCLiO7MQvLBVQYBVMcsuazjub96:kC2VTYeI","tlshash":"32d132947fa3a7a5d3aff16aa0ebe02417720518db05c8c0b2f4c1a05d589da35d3f2d","first_seen":"2025-08-16T23:38:18.822019Z","last_seen":"2026-09-30T19:01:15.723827Z","times_seen":420,"resource_available":true,"data":null}},"time_used":4371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/essential-addons-elementor/eael-2119.css?ver=1759499134","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.832Z","timestamp":1790794257832,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/essential-addons-elementor/eael-2119.css?ver=1759499134 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Mar 2026 12:16:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4372\r\ndate: Wed, 30 Sep 2026 18:51:03 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71329,"size_decoded":4701,"mime_type":"text/css","magic":"ASCII text, with very long lines (57790)","md5":"10031eae14c7f4dd0b78ba8568b9d945","sha1":"7087fcf34ed8d47df9f6b4e6ce08628b6240053b","sha256":"ea44a82d53e5c1241fa18f3d83035c877cb04738ab27174de23bcfd171fb99cf","sha512":"f7ee9d6490008669c1b981ccb762b6a16155632d1f9bcf1c2aae590267e38b22586d3def000fb2d25a31950373fb8b689b9d8c6c1ccc7b83c3d82b1b0e450395","ssdeep":"384:Z/Dzp5wX2cwMKkfONeiUAQdWbiO0k4WE8U7OBLRPq6f:Zvp5wXn6f","tlshash":"4863cd856fe73714d35df019f8e3a6b5176082989769dca8b0f28270ae859ce35e3d0c","first_seen":"2025-09-21T10:22:23.046923Z","last_seen":"2026-09-30T19:01:15.72962Z","times_seen":565,"resource_available":true,"data":null}},"time_used":3357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.8","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.878Z","timestamp":1790794257878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.8 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Mar 2026 12:15:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2280\r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5722,"size_decoded":2537,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5722), with no line terminators","md5":"9cd57e8cc70f6a9fc319c4c45fef6134","sha1":"883fa4ed0f0e114f04e7af8a8ad3a0964156c690","sha256":"fd9ae84b4655a6ff4bc18628d0dedaa835d10b5d6ea48455d73523c8b34e34f6","sha512":"57d47442aa77d546eb854717c1c9c30c1197f3aba0948709dd1ad3528c50d17d0b61e7b791fecfeff9e4d7c2ceeb370b3cc7fdd6eea563ce3db609c7ec2d896f","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDy9l8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNW65RmH0IW9v7G/2","tlshash":"f7c172941a54fc2b21e139d8e00ba735252ec0373c1af981fa32eced54e4fd183aa531","first_seen":"2026-03-03T15:30:23.231417Z","last_seen":"2026-09-30T21:41:57.283444Z","times_seen":51804,"resource_available":true,"data":null}},"time_used":880,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":880,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.8","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.881Z","timestamp":1790794257881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.8 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Mar 2026 12:15:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10050\r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31928,"size_decoded":10308,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31928), with no line terminators","md5":"070048edd0950b156f2884cc6be49958","sha1":"f7df7a3692aae24b0d9bcfce4f436f9154fc4478","sha256":"a06367414e21ca690b7be3bad14cd62dcd8c35683b88cdee2050aaea11f703db","sha512":"aea4a92b1164697d2d808b46fa87d5dc35a4237afd7b4adee7f92da9b51f3ab1119a9375ca7ec62f2624d7fbb89d4cc77fb034486f80dc75b42e0f8c6d9b15b9","ssdeep":"768:D1c+6idHZRdzM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5GlT:ZcURdzMMBOBjmFatJR8RjD8/xHVlEEnp","tlshash":"69e208523296e866069f48a3f0231119f3765dd9b80af0d5b2bcdce6a471e877362b34","first_seen":"2026-03-03T15:30:23.234129Z","last_seen":"2026-09-30T21:41:57.266998Z","times_seen":48627,"resource_available":true,"data":null}},"time_used":975,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":975,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/payment-mathod-img3.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.960Z","timestamp":1790794257960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/payment-mathod-img3.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3204\r\ndate: Wed, 30 Sep 2026 18:51:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3204,"size_decoded":3489,"mime_type":"image/png","magic":"PNG image data, 161 x 108, 8-bit/color RGBA, non-interlaced","md5":"66a4a03def9aeb887955c240c1ea76cb","sha1":"6af375feb709b71178be3716d4744e761f98709d","sha256":"db36437205e418da817f6ae79aae5cb5cbed3dcbb013fd06d16ae53af5525035","sha512":"85ba9b4510ba85345f4ce49cbdfca6376a6671a34a1b3d670ca3b031bdcfd461a4390cd692b580683e6725a4ba9ec5fd71630885e4a31695b02603057e414275","ssdeep":"","tlshash":"44611ab35792259b0b7f82d21d461d5ca5394e70a0d0235fae4e4877fd4c2d463d4be8","first_seen":"2026-09-30T19:01:15.733531Z","last_seen":"2026-09-30T19:01:15.733531Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7057,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":7048,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/payment-mathod-img4.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.961Z","timestamp":1790794257961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/payment-mathod-img4.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3157\r\ndate: Wed, 30 Sep 2026 18:51:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3157,"size_decoded":3442,"mime_type":"image/png","magic":"PNG image data, 161 x 107, 8-bit/color RGBA, non-interlaced","md5":"2549e2dba710292192422e0a8005fd40","sha1":"de55ece071ecc01154300f8cf399877f9744aa45","sha256":"e03f8beda27b44dc67833faeed80a9a85dd3b62512f738a7c8f45cea64daea26","sha512":"8be127b16eaacc1481a9dbf5efa7be246e525552fb8b0fa6744878fc0bb2dd1be5afcd59d8c1b30200dcf1e17ffe2087ba97fc91e718e022d4b0b5f79ed39748","ssdeep":"","tlshash":"d4515cf827c3d2564b672ac194e8120995395f3efcb9241ad8eff8c108170611c79a46","first_seen":"2026-09-30T19:01:15.735019Z","last_seen":"2026-09-30T19:01:15.735019Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7058,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":7048,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/payment-mathod-img7.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.964Z","timestamp":1790794257964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/payment-mathod-img7.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3591\r\ndate: Wed, 30 Sep 2026 18:51:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3591,"size_decoded":3876,"mime_type":"image/png","magic":"PNG image data, 162 x 108, 8-bit/color RGBA, non-interlaced","md5":"485eea62fd2eb36fc48e28baa2a5f48e","sha1":"583506e7f93df12b1ffbe4d90d0c619db9f4b04b","sha256":"56054b6f8a2ef4e70a37f54d536a744b629b1fc54240771a969912fae2b2997e","sha512":"c3cd7845843afa3e5af1305084c4b548c4f7bf1db7802b3cd0926bed7c8c45190059702a0fdc62d5a48bdd41bb0fcc563b7e644362cb01ad3b7bdbfe511a21e5","ssdeep":"","tlshash":"bc716df46ade68a8360c6347f18d53716d75f37b1c3b9ddfa96040602720c283215526","first_seen":"2026-09-30T19:01:15.737388Z","last_seen":"2026-09-30T19:01:15.737388Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7058,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":7048,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:00.216Z","timestamp":1790794260216,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:55:34 GMT\r\nexpires: Tue, 28 Sep 2027 15:55:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 183326\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-30T21:33:56.195903Z","times_seen":300713,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/syne/v24/8vIH7w4qzmVxm2BL9A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:01.259Z","timestamp":1790794261259,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/syne/v24/8vIH7w4qzmVxm2BL9A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34608\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 16:04:58 GMT\r\nexpires: Tue, 28 Sep 2027 16:04:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 182763\r\nlast-modified: Tue, 16 Sep 2025 13:27:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34608,"size_decoded":35421,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34608, version 1.0","md5":"559e8363d74f653c3f4f0a70caed2053","sha1":"0f50393efc7790d897e00024335d2c3398c13916","sha256":"68b623f0e45b905041b2edb9b2e4f563a505f13db1cd06b5f1946eb2e1f47048","sha512":"52fa63b0757b446e366b062b11b38fd9e81c5f752541b265d358d0e8a789eeb36bc322deb3e2719717401d91f9c3fa1f5cfb80a26ad9ae7451b068a88f3d5d3a","ssdeep":"768:VCLAKNFxbb9iPf3U0gTLKtAE54FB+6sfkxEpIX5yNz0zRjcUfgg:VCcgeHmTmL54F16a2aVpfB","tlshash":"d3f2f19ad9096d0dd938077603a230e6ec95197b3150f19e313a34231e7fae0a7dd6bc","first_seen":"2025-06-03T14:30:46.285622Z","last_seen":"2026-09-30T19:01:15.739788Z","times_seen":7448,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/essential-addons-elementor/eael-2315.js?ver=1757519183","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.930Z","timestamp":1790794257930,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/essential-addons-elementor/eael-2315.js?ver=1757519183 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Mar 2026 12:16:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1844\r\ndate: Wed, 30 Sep 2026 18:51:05 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6540,"size_decoded":2101,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6540), with no line terminators","md5":"879aca302d28ec6db1eeb41f503f1cb9","sha1":"fda05a4865ac6a0e24c3ee80341591d0f3852c3d","sha256":"6bc37313732405c9e6fb7bad2e3d7715b99cbf83ae9871ab6ba2b6efea17b2dd","sha512":"cde3e1b19c32053a4605e96b600377f584533f4d09c27d0c5aebd54b3c89335b12539e8c13c2812aab7f326ba84b6fd23eacafd23b4cbe9e011d514deffa4cda","ssdeep":"96:T01OIsEeCLiO7MQvLBVQYBVMcsuazjub96:kC2VTYeI","tlshash":"32d132947fa3a7a5d3aff16aa0ebe02417720518db05c8c0b2f4c1a05d589da35d3f2d","first_seen":"2025-08-16T23:38:18.822019Z","last_seen":"2026-09-30T19:01:15.723827Z","times_seen":420,"resource_available":true,"data":null}},"time_used":5153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/payment-mathod-img5.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.962Z","timestamp":1790794257962,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/payment-mathod-img5.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3319\r\ndate: Wed, 30 Sep 2026 18:51:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3319,"size_decoded":3604,"mime_type":"image/png","magic":"PNG image data, 161 x 108, 8-bit/color RGBA, non-interlaced","md5":"74cf449f249bf25167b9223fa3074984","sha1":"51cdd41461e4ed89959d8c7d4014824539b9fd82","sha256":"6ada2ce3f76ea7c648b1b8719fb721a4c5c48f9a61426f4c3d3e0448e2922598","sha512":"536ee43545e6da7a17bf51c48595bdd93933792f3860e766f554c64d4eb5e0d52ae98b6e9a1c5de77eed3d451a71d6dfa6c9c1602e0c1a8a851153f7b0e90de1","ssdeep":"","tlshash":"53615d8943694d1f514f09f8c38f7a5f0452b19191079151042bfffea079e5d5c31dd1","first_seen":"2026-09-30T19:01:15.741528Z","last_seen":"2026-09-30T19:01:15.741528Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7058,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":7048,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/our-feature-img1.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.949Z","timestamp":1790794257949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/our-feature-img1.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 99467\r\ndate: Wed, 30 Sep 2026 18:51:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":99467,"size_decoded":99753,"mime_type":"image/png","magic":"PNG image data, 746 x 705, 8-bit colormap, non-interlaced","md5":"c2f162951dd74b9dbfb260ebb4b0d66c","sha1":"0d15e37dd2d97cc1cb898b0ca329a44ec6827ff3","sha256":"e1967a4a7605cdfbc285da5fda40750934b8817de6d3f5de363d1c801a23426b","sha512":"8d0f57f3d6abfb42ebed7093c63e1e8de3213d3fe926e456de9daf5bbd2ecf9204b036c52c16940d56ea62787ce90a4d585e5441e2a9644b86bfdb38de02cede","ssdeep":"1536:VpgT/PNuOMYhPWumyjYSXYLKeEynaHR7JYCCN6EiwS6myusNIXkEP+/hKju/fiz8:PO/oY8yYT+eErRmCCN5iwSSCX1P/uyz8","tlshash":"74a302457673fc648c042dc2288967ea9963bfbf41cabdd1a552f81a5b30dc2b617306","first_seen":"2026-03-18T17:38:17.370296Z","last_seen":"2026-09-30T19:01:15.74279Z","times_seen":5,"resource_available":false,"data":null}},"time_used":6239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6135,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/elementor/css/post-2119.css?ver=1790454918","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.834Z","timestamp":1790794257834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-2119.css?ver=1790454918 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 26 Sep 2026 20:35:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1928\r\ndate: Wed, 30 Sep 2026 18:51:03 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18545,"size_decoded":2257,"mime_type":"text/css","magic":"ASCII text, with very long lines (18545), with no line terminators","md5":"2aedbe5b00ac3306877d37aab65742c1","sha1":"ea6a0cd4db5d5e1bfd9c51043c7bcfb60db0f120","sha256":"072c34e1ec5e2a07ae1a46cd068f34e86ff81cfaf0f64f4d9f935b056b0844c3","sha512":"057a68617c366044d104f3462e7fc3910fc7af40e9cc42bd77a8bc7a6b04e03ac51ef15876914cc9f8097fa9ed954f67167b2715ee2a94d64692dc551cbabbee","ssdeep":"192:D2uJM0LznJWZNqiduU08VEilVuPqUFKsYc0qi0TYMT+PA+I+Fu7YxoiNMTqEE3tX:D2uJaXurVN8Sw3VhmCSW5gOhY6","tlshash":"0282fb927f639329f32f606fa043a5ac172458c9963d6ad3f57b5023b879ec1b3d1508","first_seen":"2026-09-30T19:01:15.745532Z","last_seen":"2026-09-30T19:01:15.745532Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/main.js?ver=1790794259","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.868Z","timestamp":1790794257868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/payone-core/assets/js/main.js?ver=1790794259 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2714\r\ndate: Wed, 30 Sep 2026 18:51:04 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13479,"size_decoded":2971,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"d73f3216698e6fe044ea6e60862e4df9","sha1":"854680624f5b83ed3acd71e38a7f5f2cc337ea74","sha256":"a3b28e09341edfb3baa999cd289ae779b6248679d4246712c46af0948ba70b82","sha512":"48d3dc18dafafc1185abe7dd4142b15aa589f8c0888eb778054f44c306363c1f4c7b595ecf291790633dede706af412c84194b969e012858f1f29e389810c3fb","ssdeep":"192:A0MeXl44kpw9yccWjU9M/iCBKVSHkCcCvxqfPlcSj0avtaLqXCqsv:A0MeXl44v9z9Cj0Wt+","tlshash":"94521149a0b32071057b742e2f8fa1107476114b66a8dd34389d47d90f6e72e43babef","first_seen":"2026-09-30T19:01:15.747261Z","last_seen":"2026-09-30T19:01:15.747261Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.5.13","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.882Z","timestamp":1790794257882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.5.13 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Mar 2026 12:15:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3898\r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11619,"size_decoded":4155,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11619), with no line terminators","md5":"2994d9f50b0c37ffe180e9ad8d4756c6","sha1":"f7c8662f4d02e20611c07ec820cabaeec6e5fe58","sha256":"fc5476bc2167aab6445fe97af36555c70f2cd9dfc5374b68b1f3b77f6427f5c8","sha512":"c4bf8e3e750c04e16270327f18549b62604d33333b031473f95983c888c1b361e1741d19a9f325a6cf942b1329a9ab84005aff78d93de4e62b262020f1824dd9","ssdeep":"192:4v6PbN3SLFNjilRm5ReHKj2H8gH+gwnmMQwco/0MbYrdpb9pPkx:4v6PbNiVii2KnpcLpb9p8x","tlshash":"9032f988378776f052b36025947f761ab136ab34741c8850a21ad8e06db9d8fe073f3e","first_seen":"2026-02-09T15:18:15.621029Z","last_seen":"2026-09-30T21:14:13.621105Z","times_seen":8078,"resource_available":true,"data":null}},"time_used":1075,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1075,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/mobile-img2.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.955Z","timestamp":1790794257955,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/mobile-img2.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2260\r\ndate: Wed, 30 Sep 2026 18:51:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2260,"size_decoded":2545,"mime_type":"image/png","magic":"PNG image data, 135 x 44, 8-bit/color RGBA, non-interlaced","md5":"5487f2f24a59f9102f5c25e64feae544","sha1":"83310a329895ccc7dad75568707f745c95ea8827","sha256":"b4f3e91885834f75869e498638e79d5d67d7e63c001575fab410b80082bf6a87","sha512":"4ce16d0fe7ebec968f59e992ccb0ab48bba2a73774b32187c15964bb49f9642c86b27bad57145cc945851a70d22db7f9483b340e16f64e337c6524e20c0280d6","ssdeep":"","tlshash":"6f41f96a322b557fd8d6ea0b61fbd01c0c21c1b40cd01f5160a99c7a760bb226982a39","first_seen":"2026-09-30T19:01:15.749243Z","last_seen":"2026-09-30T19:01:15.749243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/testimonial-img1.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.959Z","timestamp":1790794257959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/testimonial-img1.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2553\r\ndate: Wed, 30 Sep 2026 18:51:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2553,"size_decoded":2838,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit colormap, non-interlaced","md5":"8f86aa1bf703371a3fb7a1265e8ee297","sha1":"6578985d0ea6ef3468abfb8ca917e889ed86b8f1","sha256":"e922c3773849f62aa05ee50a4f0898d917ed057ffa271b94a2b91bbd94badd27","sha512":"8ab7f954d38b5122103cb1e55b0e61e83097c7db523205b3e5d6eb6d30147a40b8ddaa9586636a595ad995b4d30491247f41ebbbf13251556b99164af8b07903","ssdeep":"","tlshash":"ea513cdc9f252bcee0448b5f5e199c62644be500c5f93d04775c5f57e3ab0e059ace0a","first_seen":"2026-09-30T19:01:15.750531Z","last_seen":"2026-09-30T19:01:15.750531Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:00.154Z","timestamp":1790794260154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:55:34 GMT\r\nexpires: Tue, 28 Sep 2027 15:55:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 183326\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-30T21:33:56.195903Z","times_seen":300713,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":12,"connect":41,"send":0,"wait":16,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sulphurpoint/v16/RLpkK5vv8KaycDcazWFPBj2afUU9r64PUQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:01.386Z","timestamp":1790794261386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/sulphurpoint/v16/RLpkK5vv8KaycDcazWFPBj2afUU9r64PUQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16840\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 29 Sep 2026 12:03:41 GMT\r\nexpires: Wed, 29 Sep 2027 12:03:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 110840\r\nlast-modified: Tue, 16 Sep 2025 03:39:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16840,"size_decoded":17653,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 16840, version 1.0","md5":"6a05e29271dffee952cc3e43ecefd6a1","sha1":"c318f1de7739cce2ea06812efdc96a8bce5c9084","sha256":"e322b062615f8e4c6312b97e1c943c8c52bc7d4148497f37da5076ef72416791","sha512":"e592b53542e0f8cf5dcddfa73e2f0a48c90d93a57d3548eecd0d80e4e80efeb995b6b4887a64f96d0f180f5817b8d7a1dc8d44c2694d62ca3bd72a712f9b2f22","ssdeep":"384:MVhC9HpN6DNPZ+wuhXI7ttgPpBlNiKBK4W+zdlZePJDFqUMQGI+:7NKshXmttKpBDiKBW+zdUpqUMQGI+","tlshash":"8a72d170c977d8984b8e0c3175496567e4e06fe80f7a84a80984294b2fed1698e30ef6","first_seen":"2025-09-30T15:27:57.545419Z","last_seen":"2026-09-30T19:01:15.751709Z","times_seen":85,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.8","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.879Z","timestamp":1790794257879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.8 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Mar 2026 12:15:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15420\r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50503,"size_decoded":15678,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50502), with no line terminators","md5":"73c07e9630db2adbba0c6bc0bf568719","sha1":"dbeb1065ce0ea1fc9fa6b9df9e5e1700a8dee09e","sha256":"f4bdadf362076967230901fdfc69c8df84957f6615dec226b99ad2abb64c2c76","sha512":"d48774149b65604aeee68cf2936bfe5c84714bab61a46a190952b595ee79ce8aa2c0549a3755768b3a3615c2b6abe0cfdc69c398a77296b8ceebc69bfea8f8dd","ssdeep":"1536:yuyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:C+uhIAu","tlshash":"cf33d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","first_seen":"2026-01-29T11:04:52.803648Z","last_seen":"2026-09-30T21:40:07.984093Z","times_seen":31267,"resource_available":true,"data":null}},"time_used":977,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":879,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/Screenshot_13.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.935Z","timestamp":1790794257935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/Screenshot_13.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:05 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:29 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9571\r\ndate: Wed, 30 Sep 2026 18:51:05 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9571,"size_decoded":9856,"mime_type":"image/png","magic":"PNG image data, 114 x 59, 8-bit/color RGBA, non-interlaced","md5":"1ea78f7dfc798aedd0357d90459f5c33","sha1":"6101d9505df0d4d172855386555ae2d57e5a5722","sha256":"35af6054419875f0aafdce334a6c80a514829a3185c66fd9e4d85f6df3a073ff","sha512":"c151d437606d010d1ad29ae29501b7da8562aebd0388718444f4c88f4c2d9f6cbfcb5d31210ebce5c54fa5b45e9d517f2d0096245c10b0c5958b502991f4aebe","ssdeep":"192:Kp3rmWqMv/sapDtL7ywi3i2LmwlBFaLlgrMW71KMNApHVdYf62mubIq8:4rmynsapp/ywmdqYMTWYHwy2musq8","tlshash":"6712be7ade1d0b919a6c8ef8e221e850f9cd00e3467481f9ac518a09759cc2a8f70e2c","first_seen":"2026-09-30T19:01:15.753566Z","last_seen":"2026-09-30T19:01:15.753566Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/our-feature-icon2.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.947Z","timestamp":1790794257947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/our-feature-icon2.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1006\r\ndate: Wed, 30 Sep 2026 18:51:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1006,"size_decoded":1291,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"190f15e54af3f9649594dcc78782815f","sha1":"5ae8a288b887caed3867bce7defe7d75b335ad3d","sha256":"48a98e9b37c830870e234b7873d7a790a6dfe510fa4ea7a2ca0ac52ca8bcf3fb","sha512":"32add8fbdd65f2340f687513db38bd990bf549b16f30219734be56ef5e1bd0f7a6f74d107e8215df8524198409e78604b84c0ffe842ac2b92a877d950bbd8d76","ssdeep":"","tlshash":"5611c8c15ebe460fe6ef61c1a7e400c5eefc1a5a021755106a3514383f17c5402953db","first_seen":"2026-03-18T17:38:17.376221Z","last_seen":"2026-09-30T19:01:15.754938Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/mobile-img1.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.956Z","timestamp":1790794257956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/mobile-img1.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2999\r\ndate: Wed, 30 Sep 2026 18:51:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2999,"size_decoded":3284,"mime_type":"image/png","magic":"PNG image data, 135 x 44, 8-bit/color RGBA, non-interlaced","md5":"5997a6974525df6ca6ee6181a0023112","sha1":"3195d604381ab2c8910ea1f40033377abbc2b2d9","sha256":"70e1404c9c10158c14534d07d0a74aed8080cbf21fa86380a89b44e5d5254cd3","sha512":"a3be8c09d33c70466b06cc5028aa1bd2d084aafc840506480b94cdd7713918e65b96654431b8daaa18c62b7891cd00f1e10a69f400278ac20f6016a84dbaddc7","ssdeep":"","tlshash":"f45129dea7ed099a22eb41a64289886d63dd380c616d640d3a3d420016a02ebdf7f286","first_seen":"2026-09-30T19:01:15.756575Z","last_seen":"2026-09-30T19:01:15.756575Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-json/contact-form-7/v1/contact-forms/348/feedback/schema","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:03.098Z","timestamp":1790794263098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-json/contact-form-7/v1/contact-forms/348/feedback/schema HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, */*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heliostb.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json; charset=UTF-8\r\nx-robots-tag: noindex\r\nlink: \u003chttps://heliostb.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\nallow: GET\r\nvary: Origin,Accept-Encoding\r\ncontent-length: 72\r\ncontent-encoding: br\r\ndate: Wed, 30 Sep 2026 18:51:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":75,"size_decoded":586,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"36e3873c64831d6431666d3a78068cc0","sha1":"9902b1279f713b27c4d317092506b7bf24c793b7","sha256":"49ef432404e4b7a5aaaf63e3bbc10590273cc7b8bf67b5705356f3c613ed36e1","sha512":"8a85ce329d5e515c7cbbe1f610f3795975befb11e25564a13c99d3bdec1b1aa3dc84ee7a53a61c0613fbb100101bf8784908e4c253e886af344592a84306de21","ssdeep":"","tlshash":"77a02200200ce033030823c0cc3c8e00eb880280008b0ce0a022e38acbba33e8c82003","first_seen":"2024-11-16T23:56:30.488419Z","last_seen":"2026-09-30T19:01:15.757638Z","times_seen":6972,"resource_available":true,"data":null}},"time_used":790,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":790,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/09/cropped-logo-300x300.jpg","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:05.621Z","timestamp":1790794265621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/cropped-logo-300x300.jpg HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 18 Sep 2025 12:22:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11503\r\ndate: Wed, 30 Sep 2026 18:51:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11503,"size_decoded":11790,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"9ea286d9eadf90eda507c8a767412919","sha1":"57594d0ddf473474f9bca35c359a6ba4f5b6753a","sha256":"a418a9fd7024df2c0b7c947512766a25dcbd07fe6c9cca73bfbabd2fbe073aad","sha512":"cca08f90e7a352590ceda0e3e5f38fc72af9ec3f7f990ca5d23d3250da6537e1f75b8ef40ae8fb39a5894c0168e9417b9df172a4646624b1c936ef6de4e0a939","ssdeep":"192:/fQ9pHPt2vZivDNvpYTULIcdB/pz5tPSNnsRjiblHGTimSTE1PsSMH3ibAK:HQPHwvZuhkcH/l/qZsRj0lHpmCE1PsSH","tlshash":"a2328e535e6bc7d3f8324dbd6e410d1c68488328ec11b3a86a76cdf5e9942f82c4785d","first_seen":"2026-09-30T19:01:15.758169Z","last_seen":"2026-09-30T19:01:15.758169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=68ca719fba858d1923b1135e\u0026widgetId=1j5bcnm6s\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:05.840Z","timestamp":1790794265840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=68ca719fba858d1923b1135e\u0026widgetId=1j5bcnm6s\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heliostb.com/\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-z2wv\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-4-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 30 Sep 2026 18:51:05 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 38\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a4356ac19fd88be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3208,"size_decoded":1974,"mime_type":"application/json","magic":"JSON text data","md5":"2f270c53f2e814482c3917aa54108b6f","sha1":"652f97f2d1bd33f710b366b4d47f8b4b4dc2ef04","sha256":"d2ffac8cd2f068a8692a2843da50b71e2a6b275044773e22a35f98dea11eeb68","sha512":"68f8f111afc437f474f641d5adabb8a6638bc7bf89744eeaa1c21e7b7b5466273aa9a07bdafc41606955f412da0f5d71f2fe4e86fce56fdbe20c23b4248320e2","ssdeep":"","tlshash":"4061352a9815dd7953c9d24760de3627b93dd023e384591ce098ae78c3efacd321274b","first_seen":"2026-09-30T19:01:15.759586Z","last_seen":"2026-09-30T19:01:15.759586Z","times_seen":1,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":12,"dns":12,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-messenger-components.es-CXRrtReg.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:10.122Z","timestamp":1790794270122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-messenger-components.es-CXRrtReg.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-BrandingWidget-MJiLQkQP.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:51:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"ed6ca00f1050102e4e4ce885305432fd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 35\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4356adc48f98be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":215095,"size_decoded":74896,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65527), with no line terminators","md5":"ed6ca00f1050102e4e4ce885305432fd","sha1":"d6104b463664341a070f5d9f5af146097d4d5eb5","sha256":"f6dd6cee58e0ca61447eef9bcb6b752f2f088532a03505219576ef56c108fa68","sha512":"8d2eb35e39c78bf82763f82f64dd6454bb328d7e2769490aaa80e04ed1d08afb1597d08852868ba9c834fd774ae26cb88842cab4683aa06540771ac0aa02a9c8","ssdeep":"3072:ee+mto1mo5Ar6VKkOPnsM5KiYXAIoOoc5shON:ee+mto8o5Ar6kfKicoOoc2QN","tlshash":"d1245bd4f68796f8d5e6db98948ba202336e12766df4c4c0d0a4cfd922d0e78259ff18","first_seen":"2026-09-25T08:45:54.035123Z","last_seen":"2026-09-30T21:47:54.226074Z","times_seen":269,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/css/main-style.css?ver=1790794259","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.730Z","timestamp":1790794257730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/themes/payone/assets/css/main-style.css?ver=1790794259 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:39:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21622\r\ndate: Wed, 30 Sep 2026 18:51:02 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":163256,"size_decoded":21952,"mime_type":"text/css","magic":"ASCII text, with very long lines (436)","md5":"76b7718a3c4151d60e04b088b8b01816","sha1":"f631a38fa505f12b8dfa1920eb600d688790efec","sha256":"3d6a3bfac0c1b6817d351be0ffb6f98620a4538d8f0303cd98825268b893e7dd","sha512":"d92d0106a046f8cebd70bcafd6187a71e62800c4a3b1656876719872cf347899abfb1b866b2c42cdcd2044e5f173ef3f82ac57025ca1b2045167a3bfecf9c3d1","ssdeep":"3072:F1bwer0yUlicDWnvt41S7gLPAr3WTdirQ6KGo/atbq2F+2FQ2FCovz:F1bwerHUlicDWnvt41S7gLPAr3WTdir5","tlshash":"06f363916ff13624342bd1ad6599a624f76d8043880edeedbaf6614c8fc92c9106ff0d","first_seen":"2026-09-30T19:01:15.762264Z","last_seen":"2026-09-30T19:01:15.762264Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2357,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:10.215Z","timestamp":1790794270215,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:51:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"95fa576ff32490baa52652a17f62e04c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 470161\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4356adcddc1b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39935,"size_decoded":9747,"mime_type":"text/css","magic":"ASCII text, with very long lines (39935), with no line terminators","md5":"95fa576ff32490baa52652a17f62e04c","sha1":"16359dfeaee9eac6142541fb857ef49c790f9196","sha256":"103867cb284cc821fa8e3a9fcb38f938eeea660e8efdef3950f5324428cebca7","sha512":"d3e19999896c457ab78b0c8df6b748b3fe7c2ffb0dd09dafa6569fe2f6d8a4d363c2a8747b6cbe143fd1b88fc73954998d86305682d3b85c9e719b7f56969057","ssdeep":"384:gwaRBMbrYbv+esY2jcWlnrCxN82TNSixi7riPftTQUifm7kUdwddCri43V64gpjJ:gwaKUAgMUifm7kUdwddCri43V+SffQ","tlshash":"920374a2b59720ccb197c33290d1fabc642b9670d753c6a6f5137bb98ac25d63612f0c","first_seen":"2026-09-14T08:43:43.753483Z","last_seen":"2026-09-30T21:19:11.363841Z","times_seen":733,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.748Z","timestamp":1790794257748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 28 Aug 2023 16:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Wed, 30 Sep 2026 18:51:02 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":30002,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-30T21:35:23.658137Z","times_seen":1075068,"resource_available":true,"data":null}},"time_used":2342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/bdthemes-element-pack-lite/assets/css/ep-search.css?ver=8.4.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.839Z","timestamp":1790794257839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack-lite/assets/css/ep-search.css?ver=8.4.2 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Mar 2026 12:15:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1087\r\ndate: Wed, 30 Sep 2026 18:51:03 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5367,"size_decoded":1416,"mime_type":"text/css","magic":"ASCII text, with very long lines (5367), with no line terminators","md5":"52f7597f61e1313b5f0d703139933f37","sha1":"a899712116fd6b7550aaeeb533d50ef28ecefd53","sha256":"e19228ada76f4dc221b029a2d8cd6000bfed817063403a829a10ed2d9e328a4c","sha512":"e00fc7731567421e360e67f6c5e872478f6cea3291ff5243a1f7bfbb80a1cde95d7a6fd3483fa00e9424ed95c7fc639c78f90bdb756c69711dfc1ae3cd1e79fc","ssdeep":"48:u9TlNMfaDXnbiN/R4r/FMvrYsLXpVgoE/ngusUngnbnDZDQcBn6rjH8/NkGwRbdL:ulco3W4usITNf6/8/twRhsCJvVT","tlshash":"14b1bd936d51d1cd703b8306e7d17f942068ab42bc254fe8eb99923585cfc663e2f606","first_seen":"2026-04-06T13:10:42.048317Z","last_seen":"2026-09-30T19:01:15.771231Z","times_seen":41,"resource_available":true,"data":null}},"time_used":3351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/essential-addons-elementor/eael-2315.css?ver=1757519183","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.841Z","timestamp":1790794257841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/essential-addons-elementor/eael-2315.css?ver=1757519183 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Mar 2026 12:16:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4372\r\ndate: Wed, 30 Sep 2026 18:51:03 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71329,"size_decoded":4701,"mime_type":"text/css","magic":"ASCII text, with very long lines (57790)","md5":"10031eae14c7f4dd0b78ba8568b9d945","sha1":"7087fcf34ed8d47df9f6b4e6ce08628b6240053b","sha256":"ea44a82d53e5c1241fa18f3d83035c877cb04738ab27174de23bcfd171fb99cf","sha512":"f7ee9d6490008669c1b981ccb762b6a16155632d1f9bcf1c2aae590267e38b22586d3def000fb2d25a31950373fb8b689b9d8c6c1ccc7b83c3d82b1b0e450395","ssdeep":"384:Z/Dzp5wX2cwMKkfONeiUAQdWbiO0k4WE8U7OBLRPq6f:Zvp5wXn6f","tlshash":"4863cd856fe73714d35df019f8e3a6b5176082989769dca8b0f28270ae859ce35e3d0c","first_seen":"2025-09-21T10:22:23.046923Z","last_seen":"2026-09-30T19:01:15.72962Z","times_seen":565,"resource_available":true,"data":null}},"time_used":3348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/custom-gsap.js?ver=1.0.6","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.868Z","timestamp":1790794257868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/payone-core/assets/js/custom-gsap.js?ver=1.0.6 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1647\r\ndate: Wed, 30 Sep 2026 18:51:04 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8281,"size_decoded":1904,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"13483305be01bd0ecf26fa6fb17e662c","sha1":"4493013c2fed6bcf2a3fd92e10c2be5dc300f7f0","sha256":"145f699f625b158aa1dd3c5ba8b0e5a986e6bb0fc01b21455069aa9ec867ba67","sha512":"7a5bc05c12289733bb8ab592d8426aa41cf36c313641b9dbdb5ef028a151dd2fef1711a4235ce693cc2b67c1903fb7288d628710b0d6b43c849c729c29f373df","ssdeep":"192:QCwCp2GgG7MGhoRP48VHNd7AGedgZ90TF:/wLlR7td7fZY","tlshash":"a402ed6d95fa1c32017b27ae0b9f96ca323150475c06ed183e5cbb841f8d7ac56b0bb5","first_seen":"2026-09-30T19:01:15.773796Z","last_seen":"2026-09-30T19:01:15.773796Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4416,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/09/cropped-logo-150x150.jpg","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:05.623Z","timestamp":1790794265623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/cropped-logo-150x150.jpg HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 18 Sep 2025 12:22:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5138\r\ndate: Wed, 30 Sep 2026 18:51:08 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5138,"size_decoded":5424,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 150x150, components 3","md5":"d730975a0559d32f9f82fd8afc92b212","sha1":"0a671c9d31a2810a97c768301a18cac607ea14b5","sha256":"64adc42dcad35a95300b954f53161bd97b5c100ed685ffc1f351080efbe47f8d","sha512":"5a9944dbc04d2c5107b6927b142dac35a358949cb50191a1e941cdb1bbcbc4ce511909ed4b8534db734a34b120b0a574063b42e4b13727ad4e76fbf61a025053","ssdeep":"96:/fEGswMaRA/d/KfadkqP8XwYNc65xW9zJDnFpxavL1KDbOzObQFZ:/f8w3KZdHP85Ap8JsbTQFZ","tlshash":"3cb16d2f8a1682c9106b9d7d1238a2dd07c96b819fa2898f20b2c3fee10c4d575dca5c","first_seen":"2026-09-30T19:01:15.775105Z","last_seen":"2026-09-30T19:01:15.775105Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/css/branding-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:10.217Z","timestamp":1790794270217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/css/branding-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:51:10 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"e0255582e599007d621a42129d7d27f5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 470162\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4356adcddc2b4f1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18387,"size_decoded":4687,"mime_type":"text/css","magic":"ASCII text, with very long lines (18387), with no line terminators","md5":"e0255582e599007d621a42129d7d27f5","sha1":"7558586a6dfc7f897c6115afd54699f13e657fdc","sha256":"d85c5684bc2ca8b6dfac3e8c95320e22afadf8adb1a923b11a52465c49a00b0e","sha512":"7213efe6431739a3539e9d9c386cf2b623ee42381078447ed1083324268f49aec93e5eebdb7a4c16717e79be0e6b06594a7a801435a054535f243a2143a4519a","ssdeep":"384:KBMbrYbv+esY2jFWlnrCxN82TNSixi7rXt:UUAXt","tlshash":"2d82da93b9e314dce657c632c0e1f67ca83f4a20c757c5a3a9437bb98681ad73641a4c","first_seen":"2026-09-14T08:43:43.711999Z","last_seen":"2026-09-30T21:19:11.348895Z","times_seen":552,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.884Z","timestamp":1790794257884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 06 Feb 2025 16:27:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 668\r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1499,"size_decoded":924,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1464)","md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-09-30T21:42:11.050729Z","times_seen":92783,"resource_available":true,"data":null}},"time_used":1072,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1072,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/star-icon2.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.945Z","timestamp":1790794257945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/star-icon2.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 563\r\ndate: Wed, 30 Sep 2026 18:51:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":563,"size_decoded":847,"mime_type":"image/png","magic":"PNG image data, 27 x 27, 8-bit/color RGBA, non-interlaced","md5":"3f7b76bfa0721b49453963896a9e0489","sha1":"89470df1591cade9765ca83e5050c29d81df2dc0","sha256":"31a35aea9272bf21ac21e696935842fa261f7b478cdbc60a39d21ddce918416d","sha512":"73247bde1e235c2209c469ce3328115836278dba1f109cdc093aebeb509fc06c4f4696d58703a230b9441c41db0437029e4bed0a296269566cdd25e760ba0b93","ssdeep":"","tlshash":"a0f026d4da72cc4e468dbee71c8b06a1f23e80d94d92b4d5d403c9b9914f6d8d536147","first_seen":"2026-03-18T17:38:17.354778Z","last_seen":"2026-09-30T19:01:15.778081Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/testimonial-icon1.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.957Z","timestamp":1790794257957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/testimonial-icon1.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 425\r\ndate: Wed, 30 Sep 2026 18:51:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":425,"size_decoded":709,"mime_type":"image/png","magic":"PNG image data, 48 x 33, 8-bit/color RGBA, non-interlaced","md5":"dce367c3be5eced9e6d626158e39cb4f","sha1":"a856d706e5578b31cd2187ce036e6b38ec30c61e","sha256":"0d94d9f9beaf87030a55f734f8dbbbe23c41928c848adcd5f1b33914d35e48a6","sha512":"494f73ea51063ba322e0b2c6910e4faa64320e0fef3c4d84798c2e92ed9b4e08837148976093c6abfb868a4f4a995a8c405f4cf2de6b5404539542f5a4f67db5","ssdeep":"","tlshash":"28e0f1ed3ab94719d24cc4d720f705c060ba4a76d753604dd0706074300740dc8537a3","first_seen":"2026-09-30T19:01:15.779651Z","last_seen":"2026-09-30T19:01:15.779651Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:00.218Z","timestamp":1790794260218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:48 GMT","end":"Fri, 11 Dec 2026 20:01:47 GMT"},"fingerprint":{"sha1":"CE:B3:C9:86:04:78:55:83:CC:52:A9:C8:01:3D:FB:40:04:EA:65:79","sha256":"BB:17:4D:EA:95:BB:1E:04:F2:B9:A8:63:B5:85:90:0D:94:A9:44:9C:40:E1:6A:B2:0D:4E:92:6E:85:B2:49:E9"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:55:34 GMT\r\nexpires: Tue, 28 Sep 2027 15:55:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 183326\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-30T21:33:56.195903Z","times_seen":300713,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:05.859Z","timestamp":1790794265859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heliostb.com/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 174\r\nOrigin: https://heliostb.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":174,"data":"{\"p\":\"68ca719fba858d1923b1135e\",\"w\":\"1j5bcnm6s\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://heliostb.com/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"Az-QlaDdmMaYgrON-PHil\"}"}},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-c5lf\r\naccess-control-allow-origin: https://heliostb.com\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 30 Sep 2026 18:51:10 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a4356ac2881a8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1038,"size_decoded":1409,"mime_type":"application/json","magic":"JSON text data","md5":"108f1ae3a653c86d310f35892dd36a99","sha1":"303102fc20b9112a9418caa126f948e53a255c7f","sha256":"25b9da6a154e7df2a2dc0dc1ac7aa1edcb9cc151bf5ffc4c4978bfbf3f9d6356","sha512":"2005a5d78b4c7c94f559274f10f6baf89340aee853e9b37a156b5b2d6e2eab9cec26f9f4b5f1231e252d2ea85caf9481b9d96ddf0dc6f1be3f9399d1661ceff7","ssdeep":"","tlshash":"391175021e8d1e6e77771e80025a7d4413cc72a3a1c8005ce8c99d6a395e27982d387a","first_seen":"2026-09-30T19:01:15.780919Z","last_seen":"2026-09-30T19:01:15.780919Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4068,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4068,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-MinWidget-DFrnenzP.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:10.091Z","timestamp":1790794270091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/js/twk-MinWidget-DFrnenzP.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://embed.tawk.to/_s/v4/app/6ab62d2918b/js/twk-main.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:51:10 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"792fff828f71afcb92d017b5421e20e5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 35\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4356adc48fe8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13016,"size_decoded":5412,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (11094)","md5":"792fff828f71afcb92d017b5421e20e5","sha1":"3609d3920c7c8b297a3283b81748e35ee0dfeb6b","sha256":"0f7b7085c1b8777d04101b7c35ded70447916b7265e2e57c6ef56a5226c27b2b","sha512":"f393ababd92b25ced8d206d2404a54bc8157eb47cf7afd9fd29ddff7b23b8c39d4aa27e0ebf521eff48496b681eeece2acf6e2350a0e113c2d5f1663fbe13455","ssdeep":"384:hA5ZA6nHofI+waonyDkyqnisaDf8R3G5xlXkuEm8ZOqs:65u6nIAHvyDkwUAbk9Oqs","tlshash":"54421966f288a169c734c28590c56d7c222d03b58f908dfaf0b5ae7703d5dc8647ab7d","first_seen":"2026-09-25T08:45:54.098851Z","last_seen":"2026-09-30T21:54:54.53598Z","times_seen":272,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Chakra+Petch%3A500%7CChakra+Petch%3A600%7CChakra+Petch%3A700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.721Z","timestamp":1790794257721,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:23 GMT","end":"Thu, 03 Dec 2026 19:23:22 GMT"},"fingerprint":{"sha1":"8D:07:75:6D:C9:3E:05:B5:3E:13:A8:E5:04:2D:BD:63:D3:44:18:69","sha256":"A1:D8:B7:2C:E2:A9:75:C1:E9:25:E1:C3:7F:5C:C3:62:4E:AB:22:F7:44:39:A5:8E:C6:D5:86:A1:5B:C2:15:C3"}}},"request":{"raw":"GET /css?family=Chakra+Petch%3A500%7CChakra+Petch%3A600%7CChakra+Petch%3A700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 30 Sep 2026 18:50:57 GMT\r\ndate: Wed, 30 Sep 2026 18:50:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4539,"size_decoded":1243,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cd0de93b901d0d98be15fe1b2373d5f0","sha1":"0df6236f23c36c157974179fcfecec38445050a5","sha256":"d980747d492f3a45fb77a725b65e623f938d9ff5a8588e4cb0d42a6e69633ba0","sha512":"cb21ac0db48c578efcd4dc7ad568a59fc07445b425b1434237360920a41d5ebadc01f011b205fea929e0ba6ce3dab339ad5adb9f2f18faa87354937513c35264","ssdeep":"96:/OgfRN5Ogf5OgfkJc+udOgfeNsOxTfnN5OxTfhJOxTfmRJc+udOxTfoNsOCf6N5m:dbH/4qmFOp+qTH+ByVIu","tlshash":"ad91feb128a79404b7431cd153eb7e37ae4f6295b0908479affd1889edeac33221572d","first_seen":"2025-11-06T04:37:52.934339Z","last_seen":"2026-09-30T19:01:15.793538Z","times_seen":5,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":10,"connect":8,"send":0,"wait":23,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/bdthemes-element-pack-lite/assets/js/modules/ep-search.min.js?ver=8.4.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.916Z","timestamp":1790794257916,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack-lite/assets/js/modules/ep-search.min.js?ver=8.4.2 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Mar 2026 12:15:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 845\r\ndate: Wed, 30 Sep 2026 18:51:04 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2850,"size_decoded":1101,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2850), with no line terminators","md5":"362b66000db1f2306b1c2a6b5e838e7d","sha1":"2187f9410a65aadfc05f3eb61065dd48a4b24396","sha256":"9466171ae329b34407967f437e4c75876dbbd3f0a123b017d6445b1b81194d4c","sha512":"459949f53379a224547709f5c9f9438889857022cee1f35d6213005aa08ca2c92e60928a9482f9718d1aada93c285683c645a96e6cee59c4e82fde669dfdd51f","ssdeep":"","tlshash":"8c51eb46788ab5e7317220aac3933f2d3554a628fc094645f02d51a217fbdd8bd1fe49","first_seen":"2024-09-14T11:52:16Z","last_seen":"2026-09-30T19:01:15.795962Z","times_seen":148,"resource_available":true,"data":null}},"time_used":4369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4369,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@phosphor-icons/web@2.1.1/src/light/style.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:01.271Z","timestamp":1790794261271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 08 Sep 2026 18:43:31 GMT","end":"Mon, 07 Dec 2026 19:43:28 GMT"},"fingerprint":{"sha1":"C3:5B:D6:E9:86:06:91:EE:6D:00:E5:15:F5:23:66:F0:7C:0C:E6:46","sha256":"0D:52:A5:47:28:79:E1:05:1C:8E:DB:39:17:95:F3:D8:05:10:86:FC:5A:70:B8:B3:84:AB:34:1E:E0:63:DE:18"}}},"request":{"raw":"GET /@phosphor-icons/web@2.1.1/src/light/style.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: a4356aa50a151525-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nage: 651180\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 30 Sep 2027 18:51:01 GMT\r\nlast-modified: Sun, 20 Sep 2026 07:04:15 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8uWWmfqu7ifantuG3Rj17TvVET2z5OOI/dI6/K8wiGU=:\r\nfly-request-id: 01M2H6PTZZCM8N9RJ4KJ9QHNKE-ams\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87359,"size_decoded":12816,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d0c00e94901712da925ed893abcf1908","sha1":"2a36dc2a0a022e6b03855703b2c5380836771e6b","sha256":"f2e59699faaeee27da9edb86dd18f5ed3bd5113db3e4e388fdd23afcaf308865","sha512":"6cb3e110ea54d66ab7585f509c3bbdf019438b816cd78fba031c8bd40e8a013d55d01ab07869a00ddbe614bf348484411bd4cad166e64b6a90677bf6afcd92c6","ssdeep":"768:FxNC9RoWla5NQDGUfrIN1ENW/P40e/z96M8ftPxOPjqgA:FxNC9u1pUkNCo34jp6H","tlshash":"9083dee4f7fe18d09301d1e2a20aa761bb0da3249a462c58ca6379ed71e211dc7cf5dd","first_seen":"2024-04-04T21:10:47Z","last_seen":"2026-09-30T19:01:15.797791Z","times_seen":2237,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/css/swiper-bundle.min.css?ver=2.0.1","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.708Z","timestamp":1790794257708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/payone-core/assets/css/swiper-bundle.min.css?ver=2.0.1 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 10 Sep 2025 15:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4497\r\ndate: Wed, 30 Sep 2026 18:51:00 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18459,"size_decoded":4826,"mime_type":"text/css","magic":"ASCII text, with very long lines (18199)","md5":"93df2093eb0524cb7734eff5b284e87b","sha1":"148acd6fafd616a989adbc233bc44c34ece886ce","sha256":"8b35c6364fba567362c8d577bc907a05f69de0ed074fc038b821c9392d91c215","sha512":"0619f1b85d1c7b8e15f5a237f8866f44c7314c8fc61d8ee1f5a844eae2374940a3846615f977c5fb78442ca5ed26dbeb34639b375ee7c59fd17a86b09bbec73b","ssdeep":"192:LjmUJbiKne5JTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxbpy:LCUbe5JndKW+Sa0ni24tnWfz4eNi","tlshash":"a88256a45350182753274f374bb1cbb9e97444c24f9389ae91c0ee58d7facb9132f2a9","first_seen":"2024-09-13T15:02:49Z","last_seen":"2026-09-30T19:01:15.798705Z","times_seen":1355,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/elementor/css/post-13.css?ver=1790454917","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.739Z","timestamp":1790794257739,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-13.css?ver=1790454917 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:02 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 26 Sep 2026 20:35:17 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1767\r\ndate: Wed, 30 Sep 2026 18:51:02 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20791,"size_decoded":2096,"mime_type":"text/css","magic":"ASCII text, with very long lines (20791), with no line terminators","md5":"cc2c18ed46a17accfc9362d438786bf6","sha1":"25a802c72441cf1605267d661ceb3d99f82c4550","sha256":"0b925f030d179d0f00ed20ee5cd003fc73f128e39724342881f068f251af0ae9","sha512":"125718fc9eca8059fa30493d08c646a4febdad12e4da194ba0e60b061efe4dfa964c63ab5789d64471e1fbb19a2701d7523b09f0a122d4c7def58bff7b854d6f","ssdeep":"192:KJr08WRZ2A08H4RJkQ1K08L908LJwLfJF089Wb6It0VCJ12XJO08ae89088g0835:KJaZ2Y4RJNszJufJYBJQXJ42/rkEUc","tlshash":"fd9239213d439269b27f106f8423799c3524cccee53e6acaed625223f8b9c9273b055d","first_seen":"2026-09-30T19:01:15.799487Z","last_seen":"2026-09-30T19:01:15.799487Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/bdthemes-element-pack-lite/assets/css/ep-font.css?ver=8.4.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.836Z","timestamp":1790794257836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/bdthemes-element-pack-lite/assets/css/ep-font.css?ver=8.4.2 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:03 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Mar 2026 12:15:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1598\r\ndate: Wed, 30 Sep 2026 18:51:03 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9329,"size_decoded":1927,"mime_type":"text/css","magic":"ASCII text, with very long lines (9329), with no line terminators","md5":"b0539382cdb378470ce214a6aca0b8e7","sha1":"75bdcdfcd48be443629af3c1bec151d45e1927fe","sha256":"ac5242451911d3ff4fc561bbd8c2126adb998fe7dbb92abfa9c8bea6fe5c9f7b","sha512":"70d8d160e3b2cca84a39008d0cae6e383fae6508c155bdcee99f8a8aee5db2db4792324b4431d1aed83a6d94841470ff9d7797743425ff81193c971a31f40114","ssdeep":"96:SR3UC3CBJfYD4SoI9tLDt+v1A4/tWaMhHq5vme:EoFYD4SoIr1+vq4/YawHq5vme","tlshash":"7a12cce4e0a983c5b731c423db42a3089e96f235daca5d12f81f941c2df5a5d12c9ef8","first_seen":"2025-04-09T07:33:53.990405Z","last_seen":"2026-09-30T19:01:15.801344Z","times_seen":669,"resource_available":true,"data":null}},"time_used":3353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/elements-handler.min.js?ver=4.11.70","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.883Z","timestamp":1790794257883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/elements-handler.min.js?ver=4.11.70 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Mar 2026 12:15:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 179\r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":179,"size_decoded":390,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"eb14fbc161529fa03c8910b5e561f07e","sha1":"df77c7eb4f07d038332e30bc0bf577eef4c9b630","sha256":"a579dc809cde287a3e4c63918771749c641702a4e1256bdc2ffaa5e7fd91091a","sha512":"9f9937a5fab900e1c7b5ec5dc598d7cd662329a42f3b0ab64004a75beb683cd4ff4ab52b6249b3df309b9a5b61fc2c5aa5b5c77a5b27148728552475615319bc","ssdeep":"","tlshash":"85c0ca8dbac8b20d80ec008e0613320f33228a20a0a81a6062ba00183d30ecb9a241c4","first_seen":"2025-12-30T02:26:59.878774Z","last_seen":"2026-09-30T20:05:11.294537Z","times_seen":5954,"resource_available":true,"data":null}},"time_used":1073,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1073,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/our-feature-icon3.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.946Z","timestamp":1790794257946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/our-feature-icon3.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1396\r\ndate: Wed, 30 Sep 2026 18:51:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1396,"size_decoded":1681,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"e36272658f4445ea7e8477b27037c77b","sha1":"c1752b8fe73e6f874804ebb8e954028550da3af3","sha256":"86402332d48bc8fea81cf9b23713e84788bbb1f9ec2e82604f3c83a77a43bbd9","sha512":"e75eabf38a79365ad4128cb6b4d88edee3258c0e38d212963c7f39e1dedd245ab06334efd9a293957f03783c8a65932e7b19f1c71bcdc65fac9d252880f3805a","ssdeep":"","tlshash":"c6212b570b58dc72ce3c0e96fa15e845bcdb400202116880ca33e49d797bf5a9f4d3a8","first_seen":"2026-03-18T17:38:17.418565Z","last_seen":"2026-09-30T19:01:15.803079Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:03.387Z","timestamp":1790794263387,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 25 Mar 2026 12:15:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 229\r\ndate: Wed, 30 Sep 2026 18:51:06 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":449,"size_decoded":485,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (449), with no line terminators","md5":"9dd361b7473936c5c8f5bf661c323973","sha1":"5c8f2bcac20956a31c9cff999d50b99f9ee8f9fd","sha256":"55922883b583583787dd3e36a6ee97b5bedc12eec38a24b6bd271d53b8ebf1c2","sha512":"4181a000ecc679d08f6cad5ddac0283744c6dcb07822a19d2552105e4a9191f1baa4a1590975a71325c56714a37084f8122afe463170ce54b5a56d1a1c7780c4","ssdeep":"","tlshash":"a4f05c7a70d278ff200b44520a97105de6a81cf5012961417fbd44382a75ea4a23139f","first_seen":"2025-06-30T23:09:48.860419Z","last_seen":"2026-09-30T21:40:07.894457Z","times_seen":101126,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6ab62d2918b/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://heliostb.com/","date":"2026-09-30T18:51:05.849Z","timestamp":1790794265849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:14:15 GMT","end":"Sat, 28 Nov 2026 17:14:03 GMT"},"fingerprint":{"sha1":"58:A1:7D:C1:07:2B:1F:65:F4:0F:C6:D2:96:5C:C0:FF:DC:FC:66:F4","sha256":"A5:A4:87:15:CE:35:BC:EF:EF:F0:6B:F6:41:5D:FD:90:46:BC:E2:0D:DE:AB:4E:6B:05:9F:78:65:91:60:A0:33"}}},"request":{"raw":"GET /_s/v4/app/6ab62d2918b/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://heliostb.com/\r\nOrigin: https://heliostb.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 30 Sep 2026 18:51:05 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 25 Sep 2026 08:14:16 GMT\r\netag: W/\"493ec326a306857e053b535118af1c2e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 38\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a4356ac18fd58be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11724,"size_decoded":4418,"mime_type":"application/json","magic":"JSON text data","md5":"493ec326a306857e053b535118af1c2e","sha1":"97f86770a684f19cd83aa09b4a4bc6ec36a6bc4d","sha256":"913049c2bf5844e4c5ca76465bb8270066a409cc5c883f849ebc43bc2a7352ff","sha512":"908e18919f2f0c87e24aaf1ef30610ac22b730b33ab27e796b69ec531f6b19850b3f98b261e150e4bcdcca4f504ccce1071602460be8a5255dca2a04f69c08be","ssdeep":"192:Om265/bLHzPrquLUVid+BCzfF+npqpe9KvKGC6KEt1aZwf1E:4CbLHzxUVid+BEfF+np59t3Zwfi","tlshash":"e8323169ce504ea702d29646389f35437624819b1f54382eb78c91ac0f8ec6f62f77ce","first_seen":"2026-09-24T04:33:32.436701Z","last_seen":"2026-09-30T21:54:54.571725Z","times_seen":391,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/SplitText.min.js?ver=1.0.6","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.858Z","timestamp":1790794257858,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/payone-core/assets/js/SplitText.min.js?ver=1.0.6 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5068\r\ndate: Wed, 30 Sep 2026 18:51:04 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15588,"size_decoded":5325,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15208)","md5":"a154fe1f45d095e1f418f5fdb0fe9958","sha1":"74137608e6a8a64bff9d23b405a1c270201497f5","sha256":"ab6e9e2f7f2905057042654d20be71f458ef4e8391c39940596a3710707d8dff","sha512":"4fd0c74793cd770534e3afed42aa2306b92ef395399e88d16dc27c4b91a37284ccddc9c44f48773c91842709aefd125743f64c96742c296db1571518e0005acf","ssdeep":"384:trEawZ1w8LNjr4lQWszZus4/CaCKgiLE6:7wvRmj+aCKgiLR","tlshash":"5a62a5b010316f216572125789561b1ff0a8490be923da37dbacf0ad7340935ebd7af9","first_seen":"2025-07-09T14:33:26.481681Z","last_seen":"2026-09-30T19:01:15.808365Z","times_seen":57,"resource_available":true,"data":null}},"time_used":4229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/plugins/payone-core/assets/js/ScrollSmoother.min.js?ver=1.0.2","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.864Z","timestamp":1790794257864,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/plugins/payone-core/assets/js/ScrollSmoother.min.js?ver=1.0.2 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4816\r\ndate: Wed, 30 Sep 2026 18:51:04 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12059,"size_decoded":5073,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11673)","md5":"f8bac2d9304f00cd4e0d1917f9ce56b5","sha1":"79966c006a110e37edeafaf7813d5a27076e7cab","sha256":"fe5b1daeeaa988a60746bf2b1dd060f4921cfc20e8b9c939c8162a8d1677ed21","sha512":"bddce9b188be3ccd7f75aad1bf2c980db7f886f584b6c91a6e86c840af85cbdcd537fb17318ef9262cedb07b7b4d1deaafc2ee25b57e268ea582bd39d91b336c","ssdeep":"192:XVcjw7J0A+d6JEh0DATFAT2KACXp40IFwdljI8w89SjL3VbpJqyQ7R1cTPHM:b2QjDWxKAC46M3FBpNQ71","tlshash":"e342c6a93245b0220bdf017ac56f6706737154994a1e4424ea28bcec3c7c62d5bbbfad","first_seen":"2025-08-07T20:48:21.725654Z","last_seen":"2026-09-30T19:01:15.811177Z","times_seen":18,"resource_available":true,"data":null}},"time_used":4322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/themes/payone/assets/js/waypoints.min.js?ver=2.0.1","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.876Z","timestamp":1790794257876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/themes/payone/assets/js/waypoints.min.js?ver=2.0.1 HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 10 Sep 2025 15:39:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2476\r\ndate: Wed, 30 Sep 2026 18:51:01 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8846,"size_decoded":2733,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8833)","md5":"76b960ba77ac2f9a389ec251863f63c5","sha1":"f11855df8c5d301ebacda71fb767279b4b06197a","sha256":"36da2aeb58cf13dcf0e0968898a635a652b1ebad215cb49e9e9edc3a41d599e9","sha512":"96551274d9afe2010ce1d680c7692d4b141d79ddc2e31e91dfedae887d8fd0bbd53cb17a1cccf47b25060a0ba41d79144db812536f5635da521f90b76f73f4b9","ssdeep":"192:cKasXzHz9D5/6J8bvctcfqqTaEsvfikrCeexsvfip9Y8pYxprQHyQ8m8Fwmtrk7:1jzHz9Dpm8L2cfqqTaEsvCeexsvfip9p","tlshash":"6d027289760174221baf50f9d91f434aa337582cb40580bdb0d8d4ee29f252d636bfba","first_seen":"2023-05-07T10:09:02Z","last_seen":"2026-09-30T19:01:15.814445Z","times_seen":66,"resource_available":true,"data":null}},"time_used":882,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":882,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"heliostb.com/wp-content/uploads/2025/08/payment-mathod-img6.png","fqdn":"heliostb.com","domain":"heliostb.com","tld":"com"},"ip":{"addr":"198.251.89.30","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://heliostb.com/","date":"2026-09-30T18:50:57.963Z","timestamp":1790794257963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heliostb.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 14:29:55 GMT","end":"Fri, 25 Dec 2026 14:29:54 GMT"},"fingerprint":{"sha1":"BF:B0:A6:8F:CE:88:42:4A:7A:1E:65:EE:92:7C:38:5B:2A:72:5E:45","sha256":"33:A8:2F:D0:50:89:EB:3A:A3:80:B0:B4:6F:6D:41:D3:DE:B0:AD:C8:9A:78:82:7F:5F:D3:9C:3B:EA:C1:EF:D3"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/payment-mathod-img6.png HTTP/1.1\r\nHost: heliostb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://heliostb.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 07 Oct 2026 18:51:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 10 Sep 2025 15:45:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2378\r\ndate: Wed, 30 Sep 2026 18:51:07 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2378,"size_decoded":2663,"mime_type":"image/png","magic":"PNG image data, 163 x 108, 8-bit/color RGBA, non-interlaced","md5":"eccd908846b15b194a178aa1927ad80c","sha1":"bcffbee496ea6f82919d6db2a18700936ce2bbe0","sha256":"503c8c2fed7a9fc2529484df40e322a3ec5efb79820d160d7f9943c42e35df7e","sha512":"46afff3abe229535fed215f4136845bc54b68c4e45fecf583d9c326961fcbd35b23a5078be2b8fd567cec727874f05585d6a630c63b38ab73fcfa5d19b112352","ssdeep":"","tlshash":"d141fae56c0a97845b31bb6861ce1385b3f935f184e607cc41667975262d413b205d99","first_seen":"2026-09-30T19:01:15.825107Z","last_seen":"2026-09-30T19:01:15.825107Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7058,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":7048,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-30","alert":"Sinkholed","trigger":"heliostb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}