{"report_id":"94e5f530-de98-4c02-bd33-6316a17f3ff3","version":0,"status":"done","tags":[],"date":"2026-06-24T10:47:06Z","url":{"schema":"http","addr":"help-manage-subscription.com","fqdn":"help-manage-subscription.com","domain":"help-manage-subscription.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"help-manage-subscription.com/checking","fqdn":"help-manage-subscription.com","domain":"help-manage-subscription.com","tld":"com"},"title":"Subscription Manager","dom":{"size":16428,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (14899)","md5":"84e9399fbc9dc144b9a10022aed392a0","sha1":"e41ad67024f073f948ccc89ea6d7ecd53edf8428","sha256":"15bfb6496ca995a79cea6a42df1ddc7fd9f58f83b0089c7083820c8e85cfc68b","sha512":"a175eeda890c355af6e81a0c4c75b5408a02f196aa9d970814bc8dce5a6babfbf6caf5105a664328b1fcb7ebf59be5e52078e4a767224a2079ae3d8a5f6eaf35","ssdeep":"192:ZXXFgpOxWp35nTtXC2s1Bpu0qN4QOigg/JpcXTTruLxksc64JyhOq7vmnB:FqOx05nrGPKJgg8T4xksc64Jysq7vQ","tlshash":"02723584b81c12745d3fab01dec8973cc125b9426f624466710e088ee9d7ff639e5f96","dom_hash":"domhasheee18251a2462b0eab148e7d87660097","first_seen":"2026-06-24T10:47:10.042981Z","last_seen":"2026-06-24T10:47:10.042981Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"help-manage-subscription.com","fqdn":"help-manage-subscription.com","domain":"help-manage-subscription.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-29T10:47:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"help-manage-subscription.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"help-manage-subscription.com","ip":{"addr":"158.94.210.185","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-05-09","domain_rank":0,"first_seen":"2026-06-24T02:02:48.07136Z","last_seen":"2026-06-24T02:02:48.07136Z","alert_count":40,"request_count":8,"received_data":1492102,"sent_data":4100,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Phusion Passenger:6.1.2","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}]},{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-03","domain_rank":50661,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2026-06-18T12:39:09.784738Z","alert_count":0,"request_count":1,"received_data":12081,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":22013,"sent_data":580,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"help-manage-subscription.com/assets/index-Bb-EgFZo.js","fqdn":"help-manage-subscription.com","domain":"help-manage-subscription.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b3dc858fa943b1d527607ec470928ea","sha1":"02ba118459bc3dbabdc6e265db725f981c6e6ae0","sha256":"af2f8e3b2507ea2ec6fd0843fb6f4292aa78d7d3602cc545f2701ebfb24c4ff3","sha512":"f751c8c0a19ca1b421ebb873667a5b9d2c3d4892036ac0800076693550fb542adc8c9f681cd0d17821fe51e2a8927428313090b64d37637cdf25a1567dc7c83f","ssdeep":"24576:nrF/FB1bcEgCehPceXuK0/KECtOIkNsrdB6VyNCw127ors2PYPeN8/Xqk2yDEsjn:rBFjbcEgCehPceXuK0/KECtOIkNsrdBE","tlshash":"6b458dc87195b5ad9be741d0507f1005b13a2a64f40d8490f17ce8aa3af498ab27bffd","size":1244778,"data":"","first_seen":"2026-05-17T13:40:56.665033Z","last_seen":"2026-06-24T10:47:10.372587Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"help-manage-subscription.com/api/clients/DpzObyZrhTEUy","fqdn":"help-manage-subscription.com","domain":"help-manage-subscription.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://help-manage-subscription.com/","date":"2026-06-24T10:46:35.225Z","timestamp":1782297995225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help-manage-subscription.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 20:39:24 GMT","end":"Sat, 08 Aug 2026 20:39:23 GMT"},"fingerprint":{"sha1":"D8:8F:22:41:8D:91:D7:D6:1E:3F:E4:9B:E2:0E:03:BF:59:31:9E:54","sha256":"9D:79:3E:AC:19:18:DB:B0:58:0E:F2:17:9E:1D:B4:57:F7:56:9D:26:50:4B:F5:24:DF:1C:A9:68:62:BC:77:64"}}},"request":{"raw":"GET /api/clients/DpzObyZrhTEUy HTTP/1.1\r\nHost: help-manage-subscription.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help-manage-subscription.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 24 Jun 2026 19:24:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\netag: W/\"371-JoMKE/MDJ1smx6wYJno07jPTark\"\r\nstatus: 200 OK\r\nx-powered-by: Express, Phusion Passenger(R) 6.1.2, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Phusion Passenger:6.1.2","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":881,"size_decoded":801,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5156fea736bbe4d942194ac17435613d","sha1":"26830a13f303275b26c7ac18267a34ee33d36ab9","sha256":"5a63e3838a57f39f6e60d9d283f149e7b7f30984729ec17362f4ac4a0adae524","sha512":"cdbabfd9a49350e22bcb15c73cf7bea1dfa03ba92e59e27638be85564c48b18890480c0994b675b88cb703d895e80aefa357474a7c588a29a30add6c14755170","ssdeep":"","tlshash":"8411805d007c6eb8df2e43444109bc59a7bd221391c34d54dadeaf0caae82ef70169f9","first_seen":"2026-06-24T10:47:10.046864Z","last_seen":"2026-06-24T10:47:10.046864Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"help-manage-subscription.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help-manage-subscription.com/assets/geist-latin-wght-normal-Dm3htQBi.woff2","fqdn":"help-manage-subscription.com","domain":"help-manage-subscription.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://help-manage-subscription.com/","date":"2026-06-24T10:46:38.147Z","timestamp":1782297998147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help-manage-subscription.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 20:39:24 GMT","end":"Sat, 08 Aug 2026 20:39:23 GMT"},"fingerprint":{"sha1":"D8:8F:22:41:8D:91:D7:D6:1E:3F:E4:9B:E2:0E:03:BF:59:31:9E:54","sha256":"9D:79:3E:AC:19:18:DB:B0:58:0E:F2:17:9E:1D:B4:57:F7:56:9D:26:50:4B:F5:24:DF:1C:A9:68:62:BC:77:64"}}},"request":{"raw":"GET /assets/geist-latin-wght-normal-Dm3htQBi.woff2 HTTP/1.1\r\nHost: help-manage-subscription.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help-manage-subscription.com/assets/index-DC92h31h.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 24 Jun 2026 19:24:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28400\r\ncache-control: public, max-age=0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 22:30:46 GMT\r\netag: W/\"6ef0-19e1403adf0\"\r\nstatus: 200 OK\r\nx-powered-by: Express, Phusion Passenger(R) 6.1.2, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Phusion Passenger:6.1.2","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":28400,"size_decoded":28797,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28400, version 1.0","md5":"284d2af3ed9db2bceefa23a14638db62","sha1":"a59aabd24d95f76b7e97143fa20c6a4c83a00c63","sha256":"0cbbe6286a00f356e98980783cc950a9b693751e04aedfb97d9526ff6dc2b316","sha512":"5381a032969cedc993f4d513a33e24f84cdbd245336902854e7c68440bd6c5d51d8de940656dba9396209dab9680276cffb948270c742c8768b0cfdf2eb6620f","ssdeep":"768:4lKwpkYgBu5H3M5tj/xk6fmzoybLiZDc8IHmSR78YpJgWcF:tEgw5HGtnf0oyb+Crl1pJkF","tlshash":"bbd2e173e2d2355bf3a8ecb902cf3e53ae8b256d82fcd5e5046a085a754970133147d1","first_seen":"2025-09-13T13:12:37.463474Z","last_seen":"2026-08-03T12:24:12.714777Z","times_seen":1082,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"help-manage-subscription.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/helvetica-neue-55","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://help-manage-subscription.com/","date":"2026-06-24T10:46:34.596Z","timestamp":1782297994596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 13:10:42 GMT","end":"Sat, 01 Aug 2026 14:08:22 GMT"},"fingerprint":{"sha1":"EF:14:45:48:B1:9A:C9:A7:28:6B:C0:1D:0E:B0:E6:38:74:C4:7E:91","sha256":"01:F2:AE:FC:05:A5:B3:D3:60:65:B9:ED:2B:F8:58:97:9E:78:7E:12:13:FD:FD:28:67:E7:56:8A:AC:9D:07:A1"}}},"request":{"raw":"GET /css/helvetica-neue-55 HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help-manage-subscription.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 24 Jun 2026 10:46:34 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 1143946\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSu9mCzjpjXvtBflIzZSsORpCt4xQuv5T8Ypzp9w%2Bzvwz6pBXdil9a1LtbYW49p7Xcx6bLuQeKiuHuKZ9E0VKQVet8T4XP32C43Rfz%2B0KJBC4c4VRtviaM%2FXijDxWYR8or1mJEc%3D\"}]}\r\nlast-modified: Thu, 11 Jun 2026 05:00:48 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a10b26425d18569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11347,"size_decoded":1264,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"6c80265e10d70c8dd202cbdfe2960a07","sha1":"f6a17108e533c7c0aab6df332f4b98e6a563b211","sha256":"8acbd1ee1f7793a48b476ec03d1073be5ef7defffd60d28d1bce52127d88183d","sha512":"a7a4c4ec8fe31541a6d39dfce4acd386d4a0243150c06ddf08b5eeabae40a67a6cdd34d85230c8aa2f06af42bc015424cf790c4755ddeb48b3b28312c6bd4947","ssdeep":"192:mDfgBD7UD7zD7gVaDjD2DS9DdD+DeDdDwDvDxDZDTDQHD7cDrDIDiDODeDx:mDfgBD7UD7zD7jDjD2DSDdD+DeDdDwDb","tlshash":"70322465249ba704a1331c8a3b9bb9d84e0b149b205acd293bfdbf099ff78751240f5c","first_seen":"2024-12-11T11:18:20.740527Z","last_seen":"2026-07-28T07:52:39.293633Z","times_seen":184,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help-manage-subscription.com/assets/index-Bb-EgFZo.js","fqdn":"help-manage-subscription.com","domain":"help-manage-subscription.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://help-manage-subscription.com/","date":"2026-06-24T10:46:34.600Z","timestamp":1782297994600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help-manage-subscription.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 20:39:24 GMT","end":"Sat, 08 Aug 2026 20:39:23 GMT"},"fingerprint":{"sha1":"D8:8F:22:41:8D:91:D7:D6:1E:3F:E4:9B:E2:0E:03:BF:59:31:9E:54","sha256":"9D:79:3E:AC:19:18:DB:B0:58:0E:F2:17:9E:1D:B4:57:F7:56:9D:26:50:4B:F5:24:DF:1C:A9:68:62:BC:77:64"}}},"request":{"raw":"GET /assets/index-Bb-EgFZo.js HTTP/1.1\r\nHost: help-manage-subscription.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help-manage-subscription.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 24 Jun 2026 19:24:48 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nlast-modified: Sun, 10 May 2026 22:30:46 GMT\r\netag: W/\"12fe6a-19e1403adf0\"\r\nstatus: 200 OK\r\nx-powered-by: Express, Phusion Passenger(R) 6.1.2, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Phusion Passenger:6.1.2","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1244778,"size_decoded":348416,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50039)","md5":"80fda0c4f443a416ac88a7c7ca6648da","sha1":"e69c275c767382b70c9d400d00d4343ca34dc6b9","sha256":"1bba672047d150568a38b452e672f71cecdfbffe505124069f91de21b69eafb2","sha512":"c9d749b38d07370267263f017b593e8f025a2cf881e40d9c305f5176c83e273c71f6081f9ecbe1dc7c0a2fb67afe80f3ec2c34472e03d45df2cf01210e5d5efb","ssdeep":"24576:nrF/FB1bcEgCehPceXuK0/KECtOIkNsrdB6VyNCw127ors2PYPeN8/Xqk2yDEsjn:rBFjbcEgCehPceXuK0/KECtOIkNsrdBw","tlshash":"45259dc87195756a8be741d1507f0105b23a2e25b40d8450f17cecee3ab898ab27bfbd","first_seen":"2026-05-17T13:40:56.652891Z","last_seen":"2026-06-24T10:47:10.352654Z","times_seen":4,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"help-manage-subscription.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help-manage-subscription.com/assets/index-DC92h31h.css","fqdn":"help-manage-subscription.com","domain":"help-manage-subscription.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://help-manage-subscription.com/","date":"2026-06-24T10:46:34.601Z","timestamp":1782297994601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help-manage-subscription.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 20:39:24 GMT","end":"Sat, 08 Aug 2026 20:39:23 GMT"},"fingerprint":{"sha1":"D8:8F:22:41:8D:91:D7:D6:1E:3F:E4:9B:E2:0E:03:BF:59:31:9E:54","sha256":"9D:79:3E:AC:19:18:DB:B0:58:0E:F2:17:9E:1D:B4:57:F7:56:9D:26:50:4B:F5:24:DF:1C:A9:68:62:BC:77:64"}}},"request":{"raw":"GET /assets/index-DC92h31h.css HTTP/1.1\r\nHost: help-manage-subscription.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help-manage-subscription.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 24 Jun 2026 19:24:48 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: public, max-age=0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nlast-modified: Sun, 10 May 2026 22:30:46 GMT\r\netag: W/\"31d93-19e1403adf0\"\r\nstatus: 200 OK\r\nx-powered-by: Express, Phusion Passenger(R) 6.1.2, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Phusion Passenger:6.1.2","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":204179,"size_decoded":25444,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7f9f132f86f66e31a15fef7911ed46bd","sha1":"7d5b74104c7a8d163384139c97cbd7b3c5a356e8","sha256":"916f7dabf08a908f536118e3157390dea04aa527b6a42e6d48807fe6e288a0e0","sha512":"ec20e3f5501693f2fec70de0b9fb996f4b5836508aac93eb6cab05b64e8a1df5423c28dc959f5f238c1bd8b5eaf8457a585d58cde8b077f5264ea906eb702b07","ssdeep":"6144:zxgWVFZRqXaXIhjG0YsLxy9pyvAObVF3Mv30xEH:N","tlshash":"341473b0b078f53bbc13b5f9d2cca48ca509b0e5ed6947edf954521523e3bf2686a900","first_seen":"2026-05-17T13:40:56.657335Z","last_seen":"2026-06-24T10:47:10.353774Z","times_seen":4,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"help-manage-subscription.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help-manage-subscription.com/api/languages/public","fqdn":"help-manage-subscription.com","domain":"help-manage-subscription.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://help-manage-subscription.com/","date":"2026-06-24T10:46:35.229Z","timestamp":1782297995229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help-manage-subscription.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 20:39:24 GMT","end":"Sat, 08 Aug 2026 20:39:23 GMT"},"fingerprint":{"sha1":"D8:8F:22:41:8D:91:D7:D6:1E:3F:E4:9B:E2:0E:03:BF:59:31:9E:54","sha256":"9D:79:3E:AC:19:18:DB:B0:58:0E:F2:17:9E:1D:B4:57:F7:56:9D:26:50:4B:F5:24:DF:1C:A9:68:62:BC:77:64"}}},"request":{"raw":"GET /api/languages/public HTTP/1.1\r\nHost: help-manage-subscription.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help-manage-subscription.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 24 Jun 2026 19:24:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\netag: W/\"1f-fCet4LyQthT/tJmUdudM0Ic/z/c\"\r\nstatus: 200 OK\r\nx-powered-by: Express, Phusion Passenger(R) 6.1.2, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Phusion Passenger:6.1.2","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":31,"size_decoded":359,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9b76efeaafe592ae4b18cf49fb1d2983","sha1":"7c27ade0bc90b614ffb4999476e74cd0873fcff7","sha256":"54346d61a71a28655ff25ae12de87df5d5be3d546b77cdbfbb6c91f6041b724f","sha512":"75cd80ca72bba6af5e9f4fcfa32a2854cc872f04abc8ecbbbf6a689504cf765fbb5215e29ee74764f3ce729983ae6f2b9eeb1ce11a626d9fb21c745716c3a040","ssdeep":"","tlshash":"5d800002000008ebe200220020b8bf02a8a8002382002c0aa38c22ccaaa220220c308b","first_seen":"2026-05-17T13:40:56.631577Z","last_seen":"2026-07-28T07:52:39.294166Z","times_seen":26,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"help-manage-subscription.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help-manage-subscription.com/favicon.ico","fqdn":"help-manage-subscription.com","domain":"help-manage-subscription.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://help-manage-subscription.com/","date":"2026-06-24T10:46:35.404Z","timestamp":1782297995404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help-manage-subscription.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 20:39:24 GMT","end":"Sat, 08 Aug 2026 20:39:23 GMT"},"fingerprint":{"sha1":"D8:8F:22:41:8D:91:D7:D6:1E:3F:E4:9B:E2:0E:03:BF:59:31:9E:54","sha256":"9D:79:3E:AC:19:18:DB:B0:58:0E:F2:17:9E:1D:B4:57:F7:56:9D:26:50:4B:F5:24:DF:1C:A9:68:62:BC:77:64"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: help-manage-subscription.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help-manage-subscription.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 24 Jun 2026 19:24:49 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 9854\r\ncache-control: public, max-age=0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\nlast-modified: Sun, 10 May 2026 22:30:46 GMT\r\netag: W/\"267e-19e1403adf0\"\r\nstatus: 200 OK\r\nx-powered-by: Express, Phusion Passenger(R) 6.1.2, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Phusion Passenger:6.1.2","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":9854,"size_decoded":10264,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"58f54d9ea15176671802bebeee4da4cb","sha1":"4ba1cb97814772435962f3ac25af0def81851735","sha256":"9c5f7722c5df8eb24dda20ecc01c9f73e3103e10052fd980da4e7d9f753a97d3","sha512":"32e6c1ac6220b03bafb9215e4db4cf91352573c34a82accc893b4c7d4d3194d495e241c2f814372930a988688492926fe1d9a5576d2e46378c9f6d1e927c71db","ssdeep":"48:5uZhmwr2VEbaA+8H3J7HZqH0S/DHDHp8HfH5gAaqHwMqHBVqH/6BqHAtvqHAAcqK:shm0AN6YHEOFtwVPmyqPmorAtAco","tlshash":"8a12a02710c35d6cfe016eb8d297ec3a517d40ddeefe82e79a81bd390612146a5cb8e4","first_seen":"2023-09-08T13:51:14Z","last_seen":"2026-08-06T15:26:03.546232Z","times_seen":2177,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"help-manage-subscription.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help-manage-subscription.com/api/antibot/score","fqdn":"help-manage-subscription.com","domain":"help-manage-subscription.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://help-manage-subscription.com/","date":"2026-06-24T10:46:38.051Z","timestamp":1782297998051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help-manage-subscription.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 20:39:24 GMT","end":"Sat, 08 Aug 2026 20:39:23 GMT"},"fingerprint":{"sha1":"D8:8F:22:41:8D:91:D7:D6:1E:3F:E4:9B:E2:0E:03:BF:59:31:9E:54","sha256":"9D:79:3E:AC:19:18:DB:B0:58:0E:F2:17:9E:1D:B4:57:F7:56:9D:26:50:4B:F5:24:DF:1C:A9:68:62:BC:77:64"}}},"request":{"raw":"POST /api/antibot/score HTTP/1.1\r\nHost: help-manage-subscription.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 639\r\nOrigin: https://help-manage-subscription.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help-manage-subscription.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 24 Jun 2026 19:24:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://help-manage-subscription.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\netag: W/\"1c-lwiUvONjtWnm0oI+A4f8mgORXRk\"\r\nstatus: 200 OK\r\nx-powered-by: Express, Phusion Passenger(R) 6.1.2, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Phusion Passenger:6.1.2","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28,"size_decoded":429,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fcb2a7c8ee5b43d0b0f20309d278c415","sha1":"970894bce363b569e6d2823e0387fc9a03915d19","sha256":"b98d4496513962d2a32e3a0fe3e8683cc625ccc53cbe56d583cdfdac7572fe2b","sha512":"5a9671c513371d8a02654ef33e1feae431a3f8e7d38d39d22ce55e40c4c1913e83bb3696d56fca83d94ed74c9c20764fd9150633f30ab9d1b8e1d606bd8f0018","ssdeep":"","tlshash":"a780002000c3b2a0820280b322000c022b28080000000200fcca203e00e8808208002a","first_seen":"2026-05-20T12:58:40.520833Z","last_seen":"2026-06-24T10:47:10.355605Z","times_seen":11,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"help-manage-subscription.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help-manage-subscription.com/","fqdn":"help-manage-subscription.com","domain":"help-manage-subscription.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-24T10:46:33.840Z","timestamp":1782297993840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help-manage-subscription.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 10 May 2026 20:39:24 GMT","end":"Sat, 08 Aug 2026 20:39:23 GMT"},"fingerprint":{"sha1":"D8:8F:22:41:8D:91:D7:D6:1E:3F:E4:9B:E2:0E:03:BF:59:31:9E:54","sha256":"9D:79:3E:AC:19:18:DB:B0:58:0E:F2:17:9E:1D:B4:57:F7:56:9D:26:50:4B:F5:24:DF:1C:A9:68:62:BC:77:64"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: help-manage-subscription.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 24 Jun 2026 19:24:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: public, max-age=0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nlast-modified: Sun, 10 May 2026 22:30:46 GMT\r\netag: W/\"396-19e1403adf0\"\r\nstatus: 200 OK\r\nx-powered-by: Express, Phusion Passenger(R) 6.1.2, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Phusion Passenger:6.1.2","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":918,"size_decoded":744,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a05f14e11d2da5f1e1df8fbb54db182e","sha1":"ca78285f8569dbe54b596882a9e61fb12a77bd00","sha256":"b75ca23dae4b1ca0748ac81639cb5973ff13676a311dd9e7ef9a4858cf0c4449","sha512":"22e27861b13bc7fe0663bb82514cd1104e195827b3208bd5bd127db36eba4321035ea74194710a16a932a961f1b9489486b5817e07ba8c9b5428eac644bf1415","ssdeep":"","tlshash":"8411ef9749d4c409130042a1add0b519cd47968f4f88e9447aff40bddfa8ac5cedb9ac","first_seen":"2026-05-17T13:40:56.644821Z","last_seen":"2026-06-24T10:47:10.364248Z","times_seen":4,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":76,"connect":61,"send":0,"wait":67,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-24","alert":"Phishing Block","trigger":"help-manage-subscription.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-24","alert":"Sinkholed","trigger":"help-manage-subscription.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Google+Sans:ital,opsz,wght@0,17..18,400..700;1,17..18,400..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://help-manage-subscription.com/","date":"2026-06-24T10:46:34.598Z","timestamp":1782297994598,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:38:19 GMT","end":"Mon, 17 Aug 2026 08:38:18 GMT"},"fingerprint":{"sha1":"4D:E0:8E:62:2F:B2:3D:28:5D:7D:B5:8D:C5:3A:72:E4:EE:AB:7D:93","sha256":"AE:0B:4F:B5:B7:41:E5:0C:70:C0:E1:2A:F9:DB:AD:A8:64:94:F3:70:6D:38:1C:8A:8A:CA:52:96:5C:D8:5C:87"}}},"request":{"raw":"GET /css2?family=Google+Sans:ital,opsz,wght@0,17..18,400..700;1,17..18,400..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://help-manage-subscription.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 24 Jun 2026 10:46:34 GMT\r\ndate: Wed, 24 Jun 2026 10:46:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21329,"size_decoded":2846,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ae893f070d18e258bef3e6e2fb735476","sha1":"3027707e3b4a4f2f81c1c0e5d8df31a8be14a877","sha256":"20108873d63146ab3fa480eee1474f34fc000ad815ff1dca821a9e3eb08462bd","sha512":"69854025381f1c0ac20795bad484696628fd8746850f6fbc9d6142031567f8823fecbdef38c69f072bb4632c06265eded70264d0fb4d24b3282bfbe1cc3261af","ssdeep":"384:j8ySWnyfwjfnLOaXHjk45VqPqYDsK6ATyI4LtqY+N:vVMgLVQ","tlshash":"b4a2e1814007a015ae57bcc737cf7d25ae0d12b87500d5b99bfe4ac9dc86ca582b4fae","first_seen":"2026-05-21T22:42:29.520933Z","last_seen":"2026-07-22T22:48:12.716154Z","times_seen":139,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":35,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}