{"report_id":"a14facfc-3ceb-4808-bead-022480fcd6f1","version":0,"status":"done","tags":[],"date":"2026-09-08T09:54:55Z","url":{"schema":"http","addr":"hmnlrta.net/","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"hmnlrta.net/","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"title":"MHRS | Randevu Al","dom":{"size":14733,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (748)","md5":"6f43bb6c939c6e2ee454c7b09d82ab11","sha1":"c7b66f3eb17e9f0bef5910b3f04289d938d44f0b","sha256":"23d2ff4bbc2094d834925a6141b4412ce173ca22b270344874b5d74d0696434a","sha512":"516c5e173aa1eadb9972ace0f8d6ac9cf339c0454cfac1aa9212d990ad220f81902b4fa72fbe4c9ee87892cb5270653133bc0aee8015b51d27d1d85046bcea02","ssdeep":"192:kXTHcFNB8dDtVJ8bo01/tJ4iJAlCxxDNXrTlvBkwjudLF3bke:kXe3UJYbo01/tJ4iJAlCLBrT9cz","tlshash":"ca62554004f7067721a350d81b978a1f6b96e927d45fe6047bac5ff02fc9fa6c823694","dom_hash":"domhashb0ee402b7765fc82ce171d43962aa080","first_seen":"2026-09-08T08:21:51.997401Z","last_seen":"2026-09-12T14:17:25.374778Z","times_seen":6,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hmnlrta.net/","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-13T09:54:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hmnlrta.net","ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-09-07","domain_rank":0,"first_seen":"2026-09-08T08:21:47.816111Z","last_seen":"2026-09-08T08:21:47.816111Z","alert_count":104,"request_count":26,"received_data":2516814,"sent_data":13396,"comment":"","tags":null,"fingerprints":[{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hmnlrta.net/","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"domTimer","is_inline":false,"md5":"51647a8ecae0997b8e9409ccb1c5b45a","sha1":"f20879ac0deb5c28abd8cec0389dcfb59f4d3c60","sha256":"b508f783d5fa190b77c4c79af1e667b0ec38f58eb9bfc9f6b64fa123d35829a5","sha512":"63a3082bdf307dc00e86b593d4af1b7bd5505982140bff598db5268669d5f73c07674f53c86cd9ecd38266d447c5864a63cb68ca408ded0fd4c5bb5488214bf1","ssdeep":"","tlshash":"48d00033f0030003300cccf0030c0c00000000c0c000f000003000000030000f30cf30","size":224,"data":"","first_seen":"2026-04-14T05:00:14.501907Z","last_seen":"2026-09-12T14:17:25.388455Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/assets/js/jquery.min.js","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-09-13T06:47:48.591043Z","times_seen":194373,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d474cac8b5d30c79c1796a15e5a21747","sha1":"8b4860a0bebd85dcea6fde531ffbd0dbf9c79629","sha256":"f315f7979951607746369e98a3530f4b4ea862bedc996cc7e6e4f8e6dd018940","sha512":"b16b2378e091c4e069ec8fbb340a528b69ab8ac2f289c7a26c949c6e185b9f37f97bc1c3358830862ce07e39a2051bbd5fc3c5728715404e77ac6cb1197ce810","ssdeep":"","tlshash":"dc71a08dadf701416b7730bc0fdf8846a365945b040cea057a4c9f407f847ae9a67bb2","size":3787,"data":"","first_seen":"2026-07-23T06:17:43.018627Z","last_seen":"2026-09-12T14:17:25.387734Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hmnlrta.net/","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-08T09:54:25.049Z","timestamp":1788861265049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 3365\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 08 Sep 2026 09:54:25 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":14997,"size_decoded":3638,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (748), with CRLF line terminators","md5":"a6a6c687394680ea04f9332b396275e5","sha1":"a547d7728e67b778e9a7d4aafce8bfd733d4acfe","sha256":"168c9138f3577c495cabc1481c4b4e6182ef338cebbb05e3b8917970e6c73f77","sha512":"bdef1f4cf00c2aef4d160b5cd73f6863b0c925a6c6695f6c77bca61509d36a403f93af2b5a67057f021493d3cca8da4fef238dcb7ddecb351769a3a91d310c22","ssdeep":"192:emKHRVgN8dwFq88bo01/Cg4ig0xHJQVN+v7AUTD:emygIYIbo01/Cg4ig0xH4+v7AUTD","tlshash":"a762640050d5066b117351d80ba28f1dfb9a9627c54ba2047bec6ff32ffaf65c823a94","first_seen":"2026-09-08T08:21:52.001829Z","last_seen":"2026-09-12T14:17:25.376516Z","times_seen":6,"resource_available":false,"data":null}},"time_used":502,"timings":{"blocked":-1,"dns":93,"connect":41,"send":0,"wait":280,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/assets/images/sb-logo-tr.png","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:25.988Z","timestamp":1788861265988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"GET /assets/images/sb-logo-tr.png HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 09:54:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 17:52:06 GMT\r\netag: \"20b5-697263c6-19ac9b1c83026838;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 8373\r\ndate: Tue, 08 Sep 2026 09:54:25 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":8373,"size_decoded":8706,"mime_type":"image/png","magic":"PNG image data, 130 x 127, 8-bit/color RGBA, non-interlaced","md5":"a0d9f241bc1d572011f90f1149d08828","sha1":"f3994cb18f362fe23e0c30e828004c34c4fabd0f","sha256":"01e4d6553b4628a8dddd16b81941aa96623f067b6b28d2fca49198af0d874098","sha512":"05ce57aaa71a5030dc67f55d42274804551b597213b61c4f8f4f804dc07f42118c600587d703d68db44b2bf6bfa28f6b7ccb26d875eddbaff3a72ba486fa5386","ssdeep":"192:F4ARkj62Mwe5fkwswA3rYsQcpos1j4YKkhLwX1Psaonm/U+aekxXAoTs2:F4eQe+B3rYsNNhndwoMtkxi2","tlshash":"6402af985ff55f43aa7b040bbe39e0b0b6bf721411b1aa4450397b1952e0e408f577e7","first_seen":"2026-02-28T06:15:48.148404Z","last_seen":"2026-09-12T14:17:25.383007Z","times_seen":25,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/assets/images/key.png","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:25.996Z","timestamp":1788861265996,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"GET /assets/images/key.png HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 09:54:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 17:56:46 GMT\r\netag: \"153-697264de-a303577a39be276d;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 339\r\ndate: Tue, 08 Sep 2026 09:54:26 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":339,"size_decoded":670,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"65c9f68e4181468af050935fa31cce77","sha1":"269b2750f88eacb46fa2608db7f5fac435e6942e","sha256":"cf3e617fe62b1f873d125452a7ff794bdafa1f773657265e758e1ad729c71589","sha512":"20f57eb00968eaee013fc3c244dddd92367072fa2644ee7c7316438dff03c59b2edb65b2f3c84d20a5985bf293e5d795792ceaa5b3245fcd951109a9fa0f2589","ssdeep":"","tlshash":"15e0c0dcdf9148b5919d4d154121289d6b14e59862d04035ce689d988c879404568326","first_seen":"2026-02-28T06:15:48.136386Z","last_seen":"2026-09-12T14:17:25.378604Z","times_seen":25,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/veri.php?ip=195.64.118.152","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:36.264Z","timestamp":1788861276264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://hmnlrta.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Tue, 08 Sep 2026 09:54:36 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T07:24:37.268512Z","times_seen":18438635,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/veri.php?ip=195.64.118.152","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:38.765Z","timestamp":1788861278765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://hmnlrta.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Tue, 08 Sep 2026 09:54:38 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T07:24:37.268512Z","times_seen":18438635,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/veri.php?ip=195.64.118.152","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:41.264Z","timestamp":1788861281264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://hmnlrta.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Tue, 08 Sep 2026 09:54:41 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T07:24:37.268512Z","times_seen":18438635,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/veri.php?ip=195.64.118.152","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:43.765Z","timestamp":1788861283765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://hmnlrta.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Tue, 08 Sep 2026 09:54:43 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T07:24:37.268512Z","times_seen":18438635,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/veri.php?ip=195.64.118.152","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:51.264Z","timestamp":1788861291264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://hmnlrta.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Tue, 08 Sep 2026 09:54:51 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T07:24:37.268512Z","times_seen":18438635,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/assets/css/main.css","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:25.748Z","timestamp":1788861265748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"GET /assets/css/main.css HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 09:54:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Jan 2026 17:57:40 GMT\r\netag: \"11a241-69726514-777ffb6b6d8aa191;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 111477\r\ndate: Tue, 08 Sep 2026 09:54:25 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1155649,"size_decoded":111858,"mime_type":"text/css","magic":"ASCII text, with very long lines (757), with CRLF line terminators","md5":"66b60f978d5842ede3097301dc76160b","sha1":"bcd56ca92e3998f3c6f3e79cdb536f141fc1c7e3","sha256":"d99169034cb86d0ad69f0359563a339602809a7dfdc7374e04f037010e0b53bc","sha512":"82ecbf16d6e26c37dea2b827d7fea518ebfd00f60b18de3f0c9f8d9547384dd88819c2830e59841e2a7d22a99be21fc1c207329559c99c1b15c94c57b6d07f2a","ssdeep":"3072:5ankDGXuXd0kpfgSvYr3GkV7FbUyVPFNgX8iNNB9vOeb8s+6KpxSfdX904jKTIIM:snkDLQrPyXrLLh","tlshash":"9d254116bb00215eac37d338d7b39855ea325263c20fd97abb6c77484fb950881e2f95","first_seen":"2026-03-29T05:28:33.087684Z","last_seen":"2026-09-12T14:17:25.381494Z","times_seen":22,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/assets/images/tr-flag.png","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:25.993Z","timestamp":1788861265993,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"GET /assets/images/tr-flag.png HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 09:54:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 17:56:46 GMT\r\netag: \"187-697264de-88819a055e47aaa4;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 391\r\ndate: Tue, 08 Sep 2026 09:54:26 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":391,"size_decoded":722,"mime_type":"image/png","magic":"PNG image data, 27 x 17, 8-bit/color RGBA, non-interlaced","md5":"e7901cad923768f2f59ca982e25834ad","sha1":"bec1865e1797aa6faa56c1975b5c1c4bed0a5219","sha256":"da43ff96225096a37299dfaba7945280c53d95dbbe78c8dfb0ad2dfd24045223","sha512":"fe75c489a352c96a0cad74be214563d94b07bb95fc63c38fcea63c4b05e6069001bf840a9e4d7ff8e1eaf6aac46368a0e58ee8199b6d69b4036e93d41fff0caf","ssdeep":"","tlshash":"74e0f1b1f2a409e19e8702797113598ce4238480d10b2a040488d0668edcf91c0dd15a","first_seen":"2026-02-28T06:15:48.145363Z","last_seen":"2026-09-12T14:17:25.385751Z","times_seen":25,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/assets/images/e-nabiz.svg","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:25.999Z","timestamp":1788861265999,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"GET /assets/images/e-nabiz.svg HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 09:54:26 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 22 Jan 2026 17:56:46 GMT\r\netag: \"65c9-697264de-3072e017d71fc532;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8557\r\ndate: Tue, 08 Sep 2026 09:54:26 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":26057,"size_decoded":8939,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"044ce8dd145e8dc195da55fc29607b9d","sha1":"6babeea290edeb8c711256e7e5c450f9b7332fee","sha256":"22e4653e27e83c2087b3f9be4df4b44a540f5b1db14fff40e042964a7d4d0dbe","sha512":"35840e60867566e1ecdcc5796a1799d9bbdb6d719f200363b8fcaefafd018d53d614fad43dd8a3a50e0f9e4233300f5b0dd7daac22b5bd091277f4f95c8ec694","ssdeep":"768:UWVyVHzedZb4hCQbSNOE+rFevgV1pivoT:UPVHzuZb4kQWXVZvS","tlshash":"45c21e7b03594bbe9691db848aa6b15d37948583b0f9d1dcff5fa986af058f38070c20","first_seen":"2026-03-29T05:28:33.078973Z","last_seen":"2026-09-12T14:17:25.384424Z","times_seen":22,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/veri.php?ip=195.64.118.152","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:26.069Z","timestamp":1788861266069,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://hmnlrta.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Tue, 08 Sep 2026 09:54:27 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T07:24:37.268512Z","times_seen":18438635,"resource_available":true,"data":null}},"time_used":1736,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1736,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/veri.php?ip=195.64.118.152","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:48.766Z","timestamp":1788861288766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://hmnlrta.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Tue, 08 Sep 2026 09:54:49 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T07:24:37.268512Z","times_seen":18438635,"resource_available":true,"data":null}},"time_used":1250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/assets/js/jquery.min.js","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:25.749Z","timestamp":1788861265749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"GET /assets/js/jquery.min.js HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 22 Jan 2026 17:58:14 GMT\r\netag: \"155ed-69726536-d11bc5fb4dc9018a;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29739\r\ndate: Tue, 08 Sep 2026 09:54:25 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":87533,"size_decoded":30046,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-09-13T06:47:48.591043Z","times_seen":194373,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/assets/images/loading.gif","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:25.753Z","timestamp":1788861265753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"GET /assets/images/loading.gif HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 09:54:25 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 22 Jan 2026 15:27:58 GMT\r\netag: \"81a0-697241fe-3bc6884b7445e550;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 33184\r\ndate: Tue, 08 Sep 2026 09:54:25 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":33184,"size_decoded":33518,"mime_type":"image/gif","magic":"GIF image data, version 89a, 150 x 150","md5":"1f6e62651dbc2f9d73e16cb931e3929c","sha1":"0bfdf1bf8e439311999078ddd0b834bee41cc400","sha256":"4dc17122679e2bdcba824f8e020f42dafd3673c9f5d39dede9ab886c5826e9cd","sha512":"f89bf0ebd48cbf6e969757779619832e87894b31c4930977708ee3438ea864184c1b2078e31eddd90496c034b5676afbee6f998eddf70bdbb128b32f53660ac3","ssdeep":"768:XwucdM3y/l995qTVPoI7ZSKQqeaZEgMiQwoFLW21:XFGj95qVoI7EqeY9MiSL9","tlshash":"18e27d82e97d8e99f9173430362e0a62cd9114d0bcf6f63b7490bf45879663d60e8bd2","first_seen":"2026-02-28T06:15:48.142727Z","last_seen":"2026-09-12T14:17:25.385027Z","times_seen":25,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/assets/images/neyim_var_logo.png","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:26.002Z","timestamp":1788861266002,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"GET /assets/images/neyim_var_logo.png HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 09:54:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 17:56:46 GMT\r\netag: \"2db8-697264de-59c33804f1ac43a7;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 11704\r\ndate: Tue, 08 Sep 2026 09:54:26 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":11704,"size_decoded":12038,"mime_type":"image/png","magic":"PNG image data, 370 x 101, 8-bit/color RGBA, non-interlaced","md5":"e4610db620e7ae89a8d73aa0696fd799","sha1":"fab6d209aa1b93ed38a26ba4f274de7600e47b66","sha256":"a89e37b3657a7a4d8fc8fe912894d9e20589462a1a35fa0ab98a23b3fcef89dc","sha512":"d5512884db349c243ff82b3417cb0cf3980cebe55c9dbd6578f0afccff91f0b2c64d8373768cfb286ab70e8aeb248f2d09b3d3faf7669079780a437349a3d3af","ssdeep":"192:nSDS0tKg9E05TsLJi4+UOL7iQEf34Se7iVtLSrxIYAV5IbXfvr+srFpzKWEToKsl:SJXE05N4+7L+Vf38yVS6vUlrKWPR","tlshash":"f132c0964804904fb4de79d3edc91366a6b5821e49ae783882d3c2fd0f91d637d705bc","first_seen":"2026-02-28T06:15:48.13876Z","last_seen":"2026-09-12T14:17:25.38362Z","times_seen":25,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/assets/images/favIcon.png","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:26.257Z","timestamp":1788861266257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"GET /assets/images/favIcon.png HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 09:54:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 15:27:34 GMT\r\netag: \"40c-697241e6-ed6884f5df53833e;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1036\r\ndate: Tue, 08 Sep 2026 09:54:26 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1036,"size_decoded":1368,"mime_type":"image/png","magic":"PNG image data, 25 x 24, 8-bit/color RGBA, non-interlaced","md5":"93391497de645156492969abbe1da449","sha1":"1c1e7604777a46bf83eaaf1c7a4e5bbfc361f103","sha256":"f83723d18b873f16e93ff15943b7399147bd1a5e7567290f986fc945e3b941ca","sha512":"3f7c5be6cd2ddd338cc75c01b1080e515fc45a279f65cf0ca1ef8d3e477d54b81cdeb5527a164d23c7910586716f617a500bffe767e7b7fb578e841314217248","ssdeep":"","tlshash":"4911d8c057afc07c28b94c89623615db08df33aa83c86460e0c8c1e8c6550dc100c660","first_seen":"2026-04-14T05:00:14.499096Z","last_seen":"2026-09-12T14:17:25.380842Z","times_seen":19,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/veri.php?ip=195.64.118.152","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:28.763Z","timestamp":1788861268763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://hmnlrta.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Tue, 08 Sep 2026 09:54:30 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T07:24:37.268512Z","times_seen":18438635,"resource_available":true,"data":null}},"time_used":1359,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/veri.php?ip=195.64.118.152","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:46.264Z","timestamp":1788861286264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://hmnlrta.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Tue, 08 Sep 2026 09:54:46 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T07:24:37.268512Z","times_seen":18438635,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/assets/images/login-logo.png","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:25.990Z","timestamp":1788861265990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"GET /assets/images/login-logo.png HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 09:54:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 17:56:46 GMT\r\netag: \"21d1-697264de-7d227b7102869650;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 8657\r\ndate: Tue, 08 Sep 2026 09:54:26 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":8657,"size_decoded":8990,"mime_type":"image/png","magic":"PNG image data, 306 x 79, 8-bit/color RGBA, non-interlaced","md5":"3650904ae495b893ae471be527626539","sha1":"07cf032ae76d222d1a87b2e2b289dc68edb47c90","sha256":"614d4e90fb9f2c650bda51aad9c6f9428afc4f5553f21fcf85e99a46e99174e2","sha512":"2a70b6059569d386241aedfae44f0da44294aaf3e75a975dcfd54eb3f5fee9e13bda8c711ed8632ff01cb6b42edc028cbdac92f583494780b62dc9706685cc8b","ssdeep":"192:r7LnP7m17ypfmvaRKR9Hf3CiAeNHkFWDclOd/hHZFLYKkn9WOJlVmVDLnY4FE:r77P7m17+mvaRE1f7Ac3YMZHZNY3WnYj","tlshash":"4502ae1c47daa261bda1d958a34f008fd3b2435b6b11d64441e5c68e68c3f8e2bff688","first_seen":"2026-02-28T06:15:48.15943Z","last_seen":"2026-09-12T14:17:25.377937Z","times_seen":25,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/assets/images/user.png","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:25.995Z","timestamp":1788861265995,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"GET /assets/images/user.png HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 09:54:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 17:56:46 GMT\r\netag: \"161-697264de-811b1f3b869e4355;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 353\r\ndate: Tue, 08 Sep 2026 09:54:26 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":353,"size_decoded":684,"mime_type":"image/png","magic":"PNG image data, 22 x 23, 8-bit/color RGBA, non-interlaced","md5":"639373259cb7ee696d6d984b04f4f329","sha1":"f12e397ea04e62a6752414b25ef8cb4df54163df","sha256":"f9363971113960d078a074d73b3711acc4f9cc5f097f927e4e0ff71eda29b006","sha512":"d891ffc2e23e7a66a4df634c2ac3e0332cea86f27e4c53aea0fef928acc16a86f9d309a1e7a1b1038f673e96fe3c5a68db1d0be08452de34ba7b66b947ec3e4d","ssdeep":"","tlshash":"3ae0c0d917425fb8f6e44e7d824a15ec769c40124b44269211173ffd07325078190763","first_seen":"2026-02-28T06:15:48.135331Z","last_seen":"2026-09-12T14:17:25.386341Z","times_seen":25,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/assets/images/e-devlet.png","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:25.998Z","timestamp":1788861265998,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"GET /assets/images/e-devlet.png HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 09:54:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 17:56:46 GMT\r\netag: \"3fd-697264de-ebe1e15970ffa2db;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1021\r\ndate: Tue, 08 Sep 2026 09:54:26 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1021,"size_decoded":1353,"mime_type":"image/png","magic":"PNG image data, 41 x 30, 8-bit/color RGBA, non-interlaced","md5":"89d8b8c27a056991dff744bc620d451f","sha1":"829ba72f772943d461040f0574d7cfedc5f42b8b","sha256":"b941d2e106429ec5f86c696835cf18f1ca9edccaa82b8345936eb7eae625d6be","sha512":"c7da1343483ddef4be3cdaec889feb6e2b4b7ba48fe86a312157cc69bdb03cb7835ad765174ba02323274382efa80cca565bf9c9b214931a7d0bd35ed867a45c","ssdeep":"","tlshash":"72110c7144a7f3b05cdc71863c1c459f55f2003042778ca834156f95103afab5703aab","first_seen":"2026-02-28T06:15:48.137508Z","last_seen":"2026-09-12T14:17:25.386938Z","times_seen":25,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/assets/images/neyim_var_banner.png","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:26.001Z","timestamp":1788861266001,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"GET /assets/images/neyim_var_banner.png HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 09:54:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 17:56:46 GMT\r\netag: \"1163aa-697264de-16d58c4d8cf26b39;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 1139626\r\ndate: Tue, 08 Sep 2026 09:54:26 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1139626,"size_decoded":1139964,"mime_type":"image/png","magic":"PNG image data, 1058 x 1080, 8-bit/color RGBA, non-interlaced","md5":"358160de98d58add1ccb92d8b361c446","sha1":"99ff7d7acc881f9fd1cfbd708eea8d1c3d22e2f3","sha256":"b8081b87393bab85bd4acab386f4f0060344516f0c8c767a1191d5ba17472a62","sha512":"3158d5314ad27db093fbf903fe011475b73c6bf24b29c64087512c8bc7b9c72dd63b97f6e1b22ee6d4fdbfc6479b4d2dccead11a0d4e4fbb8c9865299852147c","ssdeep":"24576:YH/6vQZK5inMf+02waBc45knUwlNq+cBgCv1Wy9sDf+8XSfiXHo5Yh:YH/6YQsL02XWbUwlNq+X0Wy9s7aaXHaQ","tlshash":"63253395be69748d2d4e29bb3c375307182ea86cdb1f6a3e76c032c95354a3dc4029ed","first_seen":"2026-02-28T06:15:48.147436Z","last_seen":"2026-09-12T14:17:25.379244Z","times_seen":25,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/assets/images/metin_tr.png","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:26.004Z","timestamp":1788861266004,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"GET /assets/images/metin_tr.png HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 15 Sep 2026 09:54:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 17:56:46 GMT\r\netag: \"523b-697264de-8e44ce600d89ea71;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 21051\r\ndate: Tue, 08 Sep 2026 09:54:26 GMT\r\nx-powered-by: PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":21051,"size_decoded":21385,"mime_type":"image/png","magic":"PNG image data, 714 x 250, 8-bit/color RGBA, non-interlaced","md5":"44c781b1371a01669826b65d74f57219","sha1":"55612ba151471af3f67dfa9ba8d048a08056f63e","sha256":"8f81dd46455090157f90b9479dd0a6c86222d503ba01e377342e8b55ae2123c0","sha512":"127101662335bb0a0697b2ff5def69447ea867dc46565ae3e079aff4ed21992e24cb44851d772b34131d84853d1d94a463abe68f3735725f1c4f087f2de323a0","ssdeep":"384:OJXE05KwvnEssnwnfsn7DWkcNL6wbu/DQ6VJ66+W++gC50HRdB8PlXgE87Y7FlA:O35PEtafsn7SLNL6wbuU0VJhwvglu","tlshash":"5a92d094f314daeee85949320c87255337162e6dbab63b1dc25011e869cfc963d30d7c","first_seen":"2026-02-28T06:15:48.139812Z","last_seen":"2026-09-12T14:17:25.380261Z","times_seen":25,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/veri.php?ip=195.64.118.152","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:31.263Z","timestamp":1788861271263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://hmnlrta.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Tue, 08 Sep 2026 09:54:31 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T07:24:37.268512Z","times_seen":18438635,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmnlrta.net/veri.php?ip=195.64.118.152","fqdn":"hmnlrta.net","domain":"hmnlrta.net","tld":"net"},"ip":{"addr":"64.89.160.238","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hmnlrta.net/","date":"2026-09-08T09:54:33.763Z","timestamp":1788861273763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hmnlrta.net","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 10:27:09 GMT","end":"Sun, 06 Dec 2026 10:27:08 GMT"},"fingerprint":{"sha1":"CA:19:F0:BD:3C:ED:5E:E9:66:C4:0B:DD:95:A3:CF:C6:72:5F:F1:32","sha256":"94:CB:DB:46:F2:73:59:B8:C2:D5:C9:0F:7B:72:44:59:4A:B1:84:F8:D6:C4:6F:6B:D4:C3:A5:B6:EB:3F:52:6A"}}},"request":{"raw":"POST /veri.php?ip=195.64.118.152 HTTP/1.1\r\nHost: hmnlrta.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nOrigin: https://hmnlrta.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hmnlrta.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Tue, 08 Sep 2026 09:54:33 GMT\r\nx-powered-by: PHP/8.4.25, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.4.25","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":167,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T07:24:37.268512Z","times_seen":18438635,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"hmnlrta.net","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"hmnlrta.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}