{"report_id":"aa38bfcd-d883-4b94-85bb-5713e21599cf","version":6,"status":"done","tags":[],"date":"2026-04-12T12:47:22Z","url":{"schema":"http","addr":"hireechoai.com","fqdn":"hireechoai.com","domain":"hireechoai.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"hireechoai.com/","fqdn":"hireechoai.com","domain":"hireechoai.com","tld":"com"},"title":"Echo – Empowering Knowledge Workers to Grow Their Influence","dom":{"size":18052,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17522)","md5":"d26f6aac35141f163841e08f60874d36","sha1":"6d49b8ea7b314ed508b81848d5cc25c1dd9d2406","sha256":"3eddc7e10633fec7090f5ddc6db8bf1d1a526e5dcadaade8a26fb0ca1d2f06ac","sha512":"594dc764cddec516b6feb466d15c6046224357ec7251249102165f34a9c56653335f3dc1258bb6b89b50d447fb8560c771e951a700c01999ae1b43e1067f6e4f","ssdeep":"192:MFsyHG8YU//tD4Vn+OoMW8c/XNVAbNiJHNNO4xbNgqOFtbNuCN7QvOurh/6ZoWl:MFsonntD4Vn/qXekbV+wCN7Sh/6WWl","tlshash":"13829635a144343b92270ad6f23273be76f2824fd64b0524a5fc93ac47cac95fd2b51a","dom_hash":"domhash6e2388d8d4764c6eab2cdc8b23410f6d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hireechoai.com","fqdn":"hireechoai.com","domain":"hireechoai.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-17T12:47:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"hireechoai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ui-avatars.com","ip":{"addr":"172.67.75.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-10-01","domain_rank":47604,"first_seen":"2017-10-07T10:01:22Z","last_seen":"2026-04-11T20:19:56.725604Z","alert_count":0,"request_count":11,"received_data":11172,"sent_data":5248,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-05T22:16:34.770209Z","alert_count":0,"request_count":5,"received_data":246835,"sent_data":2770,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hireechoai.com","ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":10,"received_data":3869460,"sent_data":4554,"comment":"","tags":null,"fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-05T22:20:18.514512Z","alert_count":0,"request_count":1,"received_data":13321,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hireechoai.com/assets/index-LSwEqcv6.js","fqdn":"hireechoai.com","domain":"hireechoai.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9da01ee35d5f07f4339fe3365656bdb2","sha1":"942eb88335b137db13159ce9da668e9bf384696a","sha256":"4b729057d1ca7179ed60ea84f1ee8ab0a103e17ef59bdaf4bf2b9adc9f9e948a","sha512":"1dbed080821b94fc1d5f193acd13cb200e08d4c3708476dccca42d252b02703719ec54bd37af26ef2cf612663f8eb22dec281cb11f02fadc8ad68b8903034a6f","ssdeep":"24576:T9JbkxEEBspcTcPzNd+xgH1OjToHrLo17P2guuzrcRCf:ZVkxEgseTcJd4gH1OjToHrLo172gu2rJ","tlshash":"96152aac3192753257d145e6643f404bf32e991a740e41a8f52cd8ea2d3a84b61bfff8","size":904790,"data":"","first_seen":"2026-04-12T12:47:29.377409Z","last_seen":"2026-04-12T13:14:11.059909Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"ui-avatars.com/api/?name=Emily+R\u0026background=10B981\u0026color=fff\u0026size=64","fqdn":"ui-avatars.com","domain":"ui-avatars.com","tld":"com"},"ip":{"addr":"172.67.75.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ui-avatars.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 06:57:14 GMT","end":"Mon, 18 May 2026 07:57:10 GMT"},"fingerprint":{"sha1":"E9:34:F6:FA:B7:7F:23:BD:16:A5:D6:7C:A0:04:EC:6B:E1:23:1B:F4","sha256":"93:C1:1F:C5:06:57:20:1A:40:C5:34:9C:85:77:81:A8:01:59:6E:F1:DF:B7:51:96:43:EE:F7:D0:CE:89:8A:9C"}}},"request":{"raw":"GET /api/?name=Emily+R\u0026background=10B981\u0026color=fff\u0026size=64 HTTP/1.1\r\nHost: ui-avatars.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Apr 2026 12:47:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: public\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-credentials: true, true\r\naccess-control-allow-methods: GET, OPTIONS, GET, OPTIONS\r\naccess-control-max-age: 31536000, 31536000\r\naccess-control-allow-headers: Content-Type, Accept, X-Requested-With, remember-me, cache-control, Content-Type, Accept, X-Requested-With, remember-me, cache-control\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 11 Apr 2027 18:34:40 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 11 Apr 2026 18:34:40 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6voO6zh7Vmm9%2BuBUxeePl0Xh38bcBHow7pdJdJME3LKdRn6aiQDFjUKbu%2BHMzii2kYjvqYXVZMhlqa7iZqycoqEW6Lit1SRRFP7tXgzrgLh4MGB5HElPvoLVuU%2F%2FkLD2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb25652491956b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":563,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67009bc7e9901cfd8f882bced7425c42","sha1":"9bd6955a47096060ed7f41b903e9103d4df41309","sha256":"2992723265de142a21aa112a6e7013a178d9dde08f6b73331045c64b30bcc535","sha512":"7595f08bd0c9cd8562085f2f06b2a1c6237c1a7499a30301ec7bd359e5134e4d581e508a2824bd91dc818444b68c2aa5d06740a578d5c4e0ff3b6087710b7453","ssdeep":"","tlshash":"64f0e195d1a8332ac128cf45e359b090476d20c0d286459cfae17709b8e2cc633fc32d","first_seen":"2026-04-12T12:47:29.373432Z","last_seen":"2026-04-12T13:14:11.053863Z","times_seen":2,"resource_available":false,"data":null}},"time_used":511,"timings":{"blocked":145,"dns":5,"connect":5,"send":0,"wait":205,"receive":0,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ui-avatars.com/api/?name=Sarah%20K.\u0026background=0EA5E9\u0026color=fff\u0026size=80","fqdn":"ui-avatars.com","domain":"ui-avatars.com","tld":"com"},"ip":{"addr":"172.67.75.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ui-avatars.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 06:57:14 GMT","end":"Mon, 18 May 2026 07:57:10 GMT"},"fingerprint":{"sha1":"E9:34:F6:FA:B7:7F:23:BD:16:A5:D6:7C:A0:04:EC:6B:E1:23:1B:F4","sha256":"93:C1:1F:C5:06:57:20:1A:40:C5:34:9C:85:77:81:A8:01:59:6E:F1:DF:B7:51:96:43:EE:F7:D0:CE:89:8A:9C"}}},"request":{"raw":"GET /api/?name=Sarah%20K.\u0026background=0EA5E9\u0026color=fff\u0026size=80 HTTP/1.1\r\nHost: ui-avatars.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Apr 2026 12:47:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: public\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-credentials: true, true\r\naccess-control-allow-methods: GET, OPTIONS, GET, OPTIONS\r\naccess-control-max-age: 31536000, 31536000\r\naccess-control-allow-headers: Content-Type, Accept, X-Requested-With, remember-me, cache-control, Content-Type, Accept, X-Requested-With, remember-me, cache-control\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 11 Apr 2027 18:34:40 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 11 Apr 2026 18:34:40 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7PoRpk8PnBC%2B4%2Fg5YOctNqQRetlQoidyRYcbe9zCd%2FYekgNr%2FhTMflZDea4FE1jNRedEzkh%2FqqdZXO9aK1BUXZrvCSx%2FN505qWRYyC2Pw6cplgGjuxnLFpcAzYg8t8%2Fb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb25652592656b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":563,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"296bf5c108c1c3c2bd1a037ad29b86a5","sha1":"620802c047c31b1f3e4a44ba416b3f639ef00466","sha256":"2a41cd1fbb176f71ecf424648d174d5d6bc0710752acc2da47516354cbd6284a","sha512":"52acc53df0e30f945eddc3de342d6ef8d179162ebf8526b5c7855b1b15f0b385b612e354e94c6fa1ee49507a3b1c026eced45bedaae3a6f55d7cb925eba51cc1","ssdeep":"","tlshash":"cff0ac66d1582729c1688f80a259e1a147eb6090c2464d8cf9e06b8660d68c937fc31e","first_seen":"2026-04-12T12:47:29.37448Z","last_seen":"2026-04-12T13:14:11.058432Z","times_seen":2,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":138,"dns":10,"connect":1,"send":0,"wait":190,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hireechoai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 09 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 274869\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-12T19:02:10.372462Z","times_seen":141372,"resource_available":false,"data":null}},"time_used":1094,"timings":{"blocked":518,"dns":8,"connect":46,"send":0,"wait":56,"receive":6,"ssl":433},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hireechoai.com/assets/images/logo.svg","fqdn":"hireechoai.com","domain":"hireechoai.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hireechoai.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 20:28:39 GMT","end":"Fri, 10 Jul 2026 21:28:01 GMT"},"fingerprint":{"sha1":"88:D1:10:3E:98:5F:95:EA:8B:33:8C:B6:9F:28:7C:69:4A:17:1F:30","sha256":"77:39:D4:7B:51:D4:AA:1B:F8:F1:A3:15:1A:06:C7:89:09:6F:5E:9E:07:54:0B:6B:C3:6E:36:01:1C:E6:26:F5"}}},"request":{"raw":"GET /assets/images/logo.svg HTTP/1.1\r\nHost: hireechoai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 280\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"7277b82648b2f92d8a6e4d868936517874a3067211b6d68fd77505b4152b1c6c-br\"\r\nlast-modified: Sun, 12 Apr 2026 11:59:22 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Sun, 12 Apr 2026 12:47:01 GMT\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1775998021.249306,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":875,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a9d466647ae1c09461985b9832a79aa","sha1":"6f634386ed107d07e0456005a1443e7dccf7964c","sha256":"8827ee9c244b461f69bfa9f2d86ea85108723adf695a1d39225688b6f5a26b7f","sha512":"29a36e147035dfee36828b0450a22d7917a69280c9fb01a1e0bcd97b18f04e760fd86c2dd39bbe8f59267a74002d9c797d7e639880eed3e071a4c13103b63799","ssdeep":"","tlshash":"ac1106244228a838e351804cf7ff36293b6e90c3070e569464415976ead995f3d7b3b8","first_seen":"2026-04-12T12:47:29.376319Z","last_seen":"2026-04-12T13:14:11.064678Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"hireechoai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hireechoai.com/assets/index-LSwEqcv6.js","fqdn":"hireechoai.com","domain":"hireechoai.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:00.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hireechoai.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 20:28:39 GMT","end":"Fri, 10 Jul 2026 21:28:01 GMT"},"fingerprint":{"sha1":"88:D1:10:3E:98:5F:95:EA:8B:33:8C:B6:9F:28:7C:69:4A:17:1F:30","sha256":"77:39:D4:7B:51:D4:AA:1B:F8:F1:A3:15:1A:06:C7:89:09:6F:5E:9E:07:54:0B:6B:C3:6E:36:01:1C:E6:26:F5"}}},"request":{"raw":"GET /assets/index-LSwEqcv6.js HTTP/1.1\r\nHost: hireechoai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"48d262dd4a77220faa8b38781a3a60d0812280e37bc584e8d56517da7b1b9461-br\"\r\nlast-modified: Sun, 12 Apr 2026 11:59:22 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Sun, 12 Apr 2026 12:47:00 GMT\r\nx-served-by: cache-hel1410023-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1775998021.635908,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 201581\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":904790,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"9da01ee35d5f07f4339fe3365656bdb2","sha1":"942eb88335b137db13159ce9da668e9bf384696a","sha256":"4b729057d1ca7179ed60ea84f1ee8ab0a103e17ef59bdaf4bf2b9adc9f9e948a","sha512":"1dbed080821b94fc1d5f193acd13cb200e08d4c3708476dccca42d252b02703719ec54bd37af26ef2cf612663f8eb22dec281cb11f02fadc8ad68b8903034a6f","ssdeep":"24576:T9JbkxEEBspcTcPzNd+xgH1OjToHrLo17P2guuzrcRCf:ZVkxEgseTcJd4gH1OjToHrLo172gu2rJ","tlshash":"96152aac3192753257d145e6643f404bf32e991a740e41a8f52cd8ea2d3a84b61bfff8","first_seen":"2026-04-12T12:47:29.377409Z","last_seen":"2026-04-12T13:14:11.059909Z","times_seen":2,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"hireechoai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hireechoai.com/assets/index-CtSc-Oom.css","fqdn":"hireechoai.com","domain":"hireechoai.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:00.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hireechoai.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 20:28:39 GMT","end":"Fri, 10 Jul 2026 21:28:01 GMT"},"fingerprint":{"sha1":"88:D1:10:3E:98:5F:95:EA:8B:33:8C:B6:9F:28:7C:69:4A:17:1F:30","sha256":"77:39:D4:7B:51:D4:AA:1B:F8:F1:A3:15:1A:06:C7:89:09:6F:5E:9E:07:54:0B:6B:C3:6E:36:01:1C:E6:26:F5"}}},"request":{"raw":"GET /assets/index-CtSc-Oom.css HTTP/1.1\r\nHost: hireechoai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"a4d8a973955249cce9f764e002e28bc4b1ec06c7b11d48ff0eaab57079f1021c-br\"\r\nlast-modified: Sun, 12 Apr 2026 11:59:22 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Sun, 12 Apr 2026 12:47:00 GMT\r\nx-served-by: cache-hel1410023-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1775998021.638632,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 8517\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52240,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52239)","md5":"cbdc7cc199d60f6ecf90769dc5a78d64","sha1":"5af6784a923adf64a7b042f869d138b8f059696d","sha256":"199d9e487db2b938ce064412a8cd88d6d8983f8345b9f8c3fdf3a8064d6cc76e","sha512":"3e527732cada7c8b62263465593755a813ad1f93b87df742ac3611b34db8d66c61861bd12e7cd0fa3e87ca5bc677f8493b86fe9d1068d8d98fbe1054418db72f","ssdeep":"768:U6T/pcsR+BI6CVvL4xNK3HVLznCuSxOKyrPWM:iI6CVzexbM","tlshash":"bd33ea3eb584352db417c16769e0a7cd5014e96ad1224beef447b628cac73f31ab2b4c","first_seen":"2026-04-12T12:47:29.378408Z","last_seen":"2026-04-12T13:14:11.068352Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"hireechoai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:00.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:52 GMT","end":"Mon, 15 Jun 2026 08:38:51 GMT"},"fingerprint":{"sha1":"10:68:A1:B6:6F:BE:E8:57:8D:53:84:02:27:8F:E5:B8:83:ED:F1:68","sha256":"19:3A:7C:96:C1:4A:DD:40:D8:24:D5:6C:D9:2F:3F:74:1E:19:64:E6:F9:D4:88:68:56:D5:DC:1D:17:B6:21:BC"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Apr 2026 12:47:00 GMT\r\ndate: Sun, 12 Apr 2026 12:47:00 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4b1d52c19ccef2398d1de007b3c9a55c","sha1":"c57fa2bcac927a7d60c526cb7ec2b6249019dfe7","sha256":"05f842619ec9f615de0b749034eadaea60e3554d798683fb01ee1eb27abd1e68","sha512":"9dfc4ab3832325eb1438bd85674e15ceb62771b94f06ea8e48a2e286453d571218df3f6727b8df4c1bdfa47218eb5fed0298601da289391a736a76a230d68c3b","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:vXuM0p2+g7r","tlshash":"1e427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T22:54:08.549336Z","last_seen":"2026-04-12T16:28:51.07371Z","times_seen":3637,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":204,"dns":1,"connect":28,"send":0,"wait":46,"receive":0,"ssl":176},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ui-avatars.com/api/?name=Sarah+K\u0026background=0EA5E9\u0026color=fff\u0026size=64","fqdn":"ui-avatars.com","domain":"ui-avatars.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.275Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/?name=Sarah+K\u0026background=0EA5E9\u0026color=fff\u0026size=64 HTTP/1.1\r\nHost: ui-avatars.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T18:55:58.746745Z","times_seen":13673560,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ui-avatars.com/api/?name=Emily%20R.\u0026background=10B981\u0026color=fff\u0026size=80","fqdn":"ui-avatars.com","domain":"ui-avatars.com","tld":"com"},"ip":{"addr":"172.67.75.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ui-avatars.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 06:57:14 GMT","end":"Mon, 18 May 2026 07:57:10 GMT"},"fingerprint":{"sha1":"E9:34:F6:FA:B7:7F:23:BD:16:A5:D6:7C:A0:04:EC:6B:E1:23:1B:F4","sha256":"93:C1:1F:C5:06:57:20:1A:40:C5:34:9C:85:77:81:A8:01:59:6E:F1:DF:B7:51:96:43:EE:F7:D0:CE:89:8A:9C"}}},"request":{"raw":"GET /api/?name=Emily%20R.\u0026background=10B981\u0026color=fff\u0026size=80 HTTP/1.1\r\nHost: ui-avatars.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Apr 2026 12:47:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: public\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-credentials: true, true\r\naccess-control-allow-methods: GET, OPTIONS, GET, OPTIONS\r\naccess-control-max-age: 31536000, 31536000\r\naccess-control-allow-headers: Content-Type, Accept, X-Requested-With, remember-me, cache-control, Content-Type, Accept, X-Requested-With, remember-me, cache-control\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 11 Apr 2027 18:34:40 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 11 Apr 2026 18:34:40 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gfCLLZRwGlekCT0Fl7t8wY1tvLEnvfh1L5D7CAGn3j%2FxE5IbjVTd0k2VS3E%2BPWmYaAvaqIO8Wq07EIAhzBJTCHVRIO4D9LLDTlZuT%2BO5pK6w%2BofA11GdzMsQ%2Fl9RzpUw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb25651b89a56b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":563,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"01af61466ccbb49ced4de103e149f1fd","sha1":"94a9ca2cbc3272318756fe952e9e5e1a86af3963","sha256":"487ded1343b5d9c20decb2a2fcc4b5afe4efd6a2016cbb80782e66cb978b54a3","sha512":"3426b10866b8a3e48ca204940202e96df88b2b9e28fd505fdad71b496bb274e9024231ba86d4ceef73c965347e44179f3ade8b53215a900ee4ff3ba5565fa647","ssdeep":"","tlshash":"cff0aca5d1583729c1688f40a259a1e147ea6090c242488cf9e03b8aa0d68c927fc319","first_seen":"2026-04-12T12:47:29.380831Z","last_seen":"2026-04-12T13:14:11.066508Z","times_seen":2,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hireechoai.com/assets/images/feature-knowledge-map.png","fqdn":"hireechoai.com","domain":"hireechoai.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hireechoai.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 20:28:39 GMT","end":"Fri, 10 Jul 2026 21:28:01 GMT"},"fingerprint":{"sha1":"88:D1:10:3E:98:5F:95:EA:8B:33:8C:B6:9F:28:7C:69:4A:17:1F:30","sha256":"77:39:D4:7B:51:D4:AA:1B:F8:F1:A3:15:1A:06:C7:89:09:6F:5E:9E:07:54:0B:6B:C3:6E:36:01:1C:E6:26:F5"}}},"request":{"raw":"GET /assets/images/feature-knowledge-map.png HTTP/1.1\r\nHost: hireechoai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1271645\r\ncache-control: max-age=31536000\r\ncontent-type: image/png\r\netag: \"521296ba8bf45f9081b5dc0ec9b9e09c651d1fe17a6ef272e4c10390a8b0ddc2\"\r\nlast-modified: Sun, 12 Apr 2026 11:59:22 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Sun, 12 Apr 2026 12:47:01 GMT\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1775998021.334050,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1271645,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"5a43354763b22c7bc1d29cab08b01532","sha1":"09eb0c136b642d86b4329ce8c81f8823667ffd48","sha256":"bd8ed103312499264f074aaf96bc3859118777237e7e7438ae84e9fc01b05bdf","sha512":"2100f55a7b7b90c5a9ccd9c89485172dd6f4f0c604a88b9fb2d50b8c0bd8e752940d191ea587cc4deaa6cfabcf80d8196c46d5d0aa4e9847e43783b98ccd6f0d","ssdeep":"24576:ox25gYM3XJ7Yn1ufCPMU2eS5WR4TepVfa0Y1tx8:Jgh5IgCPyTU4TuRa0Y1tO","tlshash":"4e25337746dffc2ae35d446b94be231922a3391c6ff804ca1464cce203dd9a1ead6e15","first_seen":"2026-04-12T12:47:29.381709Z","last_seen":"2026-04-12T13:14:11.055368Z","times_seen":2,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"hireechoai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ui-avatars.com/api/?name=Marcus%20J.\u0026background=6366F1\u0026color=fff\u0026size=80","fqdn":"ui-avatars.com","domain":"ui-avatars.com","tld":"com"},"ip":{"addr":"172.67.75.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ui-avatars.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 06:57:14 GMT","end":"Mon, 18 May 2026 07:57:10 GMT"},"fingerprint":{"sha1":"E9:34:F6:FA:B7:7F:23:BD:16:A5:D6:7C:A0:04:EC:6B:E1:23:1B:F4","sha256":"93:C1:1F:C5:06:57:20:1A:40:C5:34:9C:85:77:81:A8:01:59:6E:F1:DF:B7:51:96:43:EE:F7:D0:CE:89:8A:9C"}}},"request":{"raw":"GET /api/?name=Marcus%20J.\u0026background=6366F1\u0026color=fff\u0026size=80 HTTP/1.1\r\nHost: ui-avatars.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Apr 2026 12:47:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: public\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-credentials: true, true\r\naccess-control-allow-methods: GET, OPTIONS, GET, OPTIONS\r\naccess-control-max-age: 31536000, 31536000\r\naccess-control-allow-headers: Content-Type, Accept, X-Requested-With, remember-me, cache-control, Content-Type, Accept, X-Requested-With, remember-me, cache-control\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 11 Apr 2027 18:34:40 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 11 Apr 2026 18:34:40 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4mS8cZ5dja2vz0w8gv0f%2BVtINZ7OHB8f4EmM7c4D9MLyPY5DfYoMhE6JIuJiK%2Bq3AmNZYF6IT5yXsDjjgB408gBYMNY9t%2F8QTIFg%2BxGwsn5TnEzuCp43D7oB8dwZj6Cc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb25652592456b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":563,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d701f57d1f86235169547a17a7552be2","sha1":"4c288c44e811239a298ad380d323f63b8afc9380","sha256":"bd99fc6f1326449e9b8c0854c8dd2bcdf064f14cf647620eb3fd60ea6f6f4b1a","sha512":"e020b041018f78f63bdeefd03108e3768a2fbf6333a556709f15a0f79bd9e300a758d50551d7b2af9a7de20fb5f23c515bd1ead8e1e52c63de98433782d76c57","ssdeep":"","tlshash":"1ff0e169e2982729c168cf44a359a1e147ea6090c2424d4cfde17b8a60d6cc937fc31e","first_seen":"2026-04-12T12:47:29.383152Z","last_seen":"2026-04-12T13:14:11.071735Z","times_seen":2,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":136,"dns":15,"connect":11,"send":0,"wait":188,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hireechoai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 09 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 274869\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-12T19:02:10.372462Z","times_seen":141372,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":373,"dns":8,"connect":43,"send":0,"wait":23,"receive":25,"ssl":281},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hireechoai.com/assets/images/logo.svg","fqdn":"hireechoai.com","domain":"hireechoai.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hireechoai.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 20:28:39 GMT","end":"Fri, 10 Jul 2026 21:28:01 GMT"},"fingerprint":{"sha1":"88:D1:10:3E:98:5F:95:EA:8B:33:8C:B6:9F:28:7C:69:4A:17:1F:30","sha256":"77:39:D4:7B:51:D4:AA:1B:F8:F1:A3:15:1A:06:C7:89:09:6F:5E:9E:07:54:0B:6B:C3:6E:36:01:1C:E6:26:F5"}}},"request":{"raw":"GET /assets/images/logo.svg HTTP/1.1\r\nHost: hireechoai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 280\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: \"7277b82648b2f92d8a6e4d868936517874a3067211b6d68fd77505b4152b1c6c-br\"\r\nlast-modified: Sun, 12 Apr 2026 11:59:22 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Sun, 12 Apr 2026 12:47:01 GMT\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1775998021.174491,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":875,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3a9d466647ae1c09461985b9832a79aa","sha1":"6f634386ed107d07e0456005a1443e7dccf7964c","sha256":"8827ee9c244b461f69bfa9f2d86ea85108723adf695a1d39225688b6f5a26b7f","sha512":"29a36e147035dfee36828b0450a22d7917a69280c9fb01a1e0bcd97b18f04e760fd86c2dd39bbe8f59267a74002d9c797d7e639880eed3e071a4c13103b63799","ssdeep":"","tlshash":"ac1106244228a838e351804cf7ff36293b6e90c3070e569464415976ead995f3d7b3b8","first_seen":"2026-04-12T12:47:29.376319Z","last_seen":"2026-04-12T13:14:11.064678Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"hireechoai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hireechoai.com/assets/images/feature-knowledge-map.png","fqdn":"hireechoai.com","domain":"hireechoai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hireechoai.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 20:28:39 GMT","end":"Fri, 10 Jul 2026 21:28:01 GMT"},"fingerprint":{"sha1":"88:D1:10:3E:98:5F:95:EA:8B:33:8C:B6:9F:28:7C:69:4A:17:1F:30","sha256":"77:39:D4:7B:51:D4:AA:1B:F8:F1:A3:15:1A:06:C7:89:09:6F:5E:9E:07:54:0B:6B:C3:6E:36:01:1C:E6:26:F5"}}},"request":{"raw":"GET /assets/images/feature-knowledge-map.png HTTP/1.1\r\nHost: hireechoai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T18:55:58.746745Z","times_seen":13673560,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"hireechoai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hireechoai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 09 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 274869\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-12T19:02:10.372462Z","times_seen":141372,"resource_available":false,"data":null}},"time_used":1090,"timings":{"blocked":525,"dns":9,"connect":43,"send":0,"wait":22,"receive":35,"ssl":421},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ui-avatars.com/api/?name=Emily+R\u0026background=10B981\u0026color=fff\u0026size=64","fqdn":"ui-avatars.com","domain":"ui-avatars.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.283Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/?name=Emily+R\u0026background=10B981\u0026color=fff\u0026size=64 HTTP/1.1\r\nHost: ui-avatars.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T18:55:58.746745Z","times_seen":13673560,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ui-avatars.com/api/?name=David+C\u0026background=F59E0B\u0026color=fff\u0026size=64","fqdn":"ui-avatars.com","domain":"ui-avatars.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.284Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/?name=David+C\u0026background=F59E0B\u0026color=fff\u0026size=64 HTTP/1.1\r\nHost: ui-avatars.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T18:55:58.746745Z","times_seen":13673560,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ui-avatars.com/api/?name=Marcus+J\u0026background=6366F1\u0026color=fff\u0026size=64","fqdn":"ui-avatars.com","domain":"ui-avatars.com","tld":"com"},"ip":{"addr":"172.67.75.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ui-avatars.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 06:57:14 GMT","end":"Mon, 18 May 2026 07:57:10 GMT"},"fingerprint":{"sha1":"E9:34:F6:FA:B7:7F:23:BD:16:A5:D6:7C:A0:04:EC:6B:E1:23:1B:F4","sha256":"93:C1:1F:C5:06:57:20:1A:40:C5:34:9C:85:77:81:A8:01:59:6E:F1:DF:B7:51:96:43:EE:F7:D0:CE:89:8A:9C"}}},"request":{"raw":"GET /api/?name=Marcus+J\u0026background=6366F1\u0026color=fff\u0026size=64 HTTP/1.1\r\nHost: ui-avatars.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Apr 2026 12:47:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: public\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-credentials: true, true\r\naccess-control-allow-methods: GET, OPTIONS, GET, OPTIONS\r\naccess-control-max-age: 31536000, 31536000\r\naccess-control-allow-headers: Content-Type, Accept, X-Requested-With, remember-me, cache-control, Content-Type, Accept, X-Requested-With, remember-me, cache-control\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 10 Apr 2027 13:53:24 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 10 Apr 2026 13:53:24 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J1zQA2Iv9enX8FOqj2iR6dJO2A3YJEAelK3dg34G4Cyi%2BmauIEgQNTW4DYVxh6oTqqoQSt0k8c8psnikj%2BQM1p3GoNCCE7WRTEHDvH6HIXiMNZ6KzqqtfDPHiKscKYcr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb25652491b56b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":563,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1cbcd051c59d4e255be11c64e1237a40","sha1":"f4d90715a9e196917c7c180c4847a784671191c1","sha256":"8888d0c5893bbdf959f88efd9edd0f607fea471dc06350e6460ebffbee83e749","sha512":"6d01c305f791b15fdb625af0f74ea0d511891cb260ff6fd13db6290affc9d201110a42228799e7101c1240722e27bb42468b71b29bb459fb7cfac0a2c0458ee1","ssdeep":"","tlshash":"ddf0ac65e298372ac128cf45e259a094466d6080c286465ceae17609b8e2cc623fc31d","first_seen":"2026-04-12T12:47:29.384138Z","last_seen":"2026-04-12T13:14:11.047157Z","times_seen":2,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":146,"dns":5,"connect":16,"send":0,"wait":202,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ui-avatars.com/api/?name=David+C\u0026background=F59E0B\u0026color=fff\u0026size=64","fqdn":"ui-avatars.com","domain":"ui-avatars.com","tld":"com"},"ip":{"addr":"172.67.75.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ui-avatars.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 06:57:14 GMT","end":"Mon, 18 May 2026 07:57:10 GMT"},"fingerprint":{"sha1":"E9:34:F6:FA:B7:7F:23:BD:16:A5:D6:7C:A0:04:EC:6B:E1:23:1B:F4","sha256":"93:C1:1F:C5:06:57:20:1A:40:C5:34:9C:85:77:81:A8:01:59:6E:F1:DF:B7:51:96:43:EE:F7:D0:CE:89:8A:9C"}}},"request":{"raw":"GET /api/?name=David+C\u0026background=F59E0B\u0026color=fff\u0026size=64 HTTP/1.1\r\nHost: ui-avatars.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Apr 2026 12:47:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: public\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-credentials: true, true\r\naccess-control-allow-methods: GET, OPTIONS, GET, OPTIONS\r\naccess-control-max-age: 31536000, 31536000\r\naccess-control-allow-headers: Content-Type, Accept, X-Requested-With, remember-me, cache-control, Content-Type, Accept, X-Requested-With, remember-me, cache-control\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 10 Apr 2027 13:53:24 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 10 Apr 2026 13:53:24 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0YVhJdSGTllmV1%2Fm5kRmUQPI0hpsaDab6O9HheVb8z%2BIj60e7ys7rmAj%2FgAJTFh1cUzSr6vt6Wknb3aC%2FCACnahOAikdrhsFSXGd5MgUcc2FrmVHyUgiESNYOGWJ4FQA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb25652592356b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":563,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"15c8eae644393ffa3ba41a91d072c980","sha1":"44843a44fa9064a9d7ef6aa62eea61330d81ba89","sha256":"cc868062797bca8518513aa3cba41cb4078d85223c41c8110f727e6b4d7617f3","sha512":"c2e09f88a4f661fcd86a87509b0e0b2c520c73cfbe0630a505020b1b39a0aedc140c344b340b70b7512a2629187c63fe470998980bcab4ad6b3528b93353fd01","ssdeep":"","tlshash":"75f0e165d598332ac12ccf55e359b0a4476e2081c286455cfaf17709b8e2cc637fc32d","first_seen":"2026-04-12T12:47:29.385081Z","last_seen":"2026-04-12T13:14:11.050608Z","times_seen":2,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":152,"dns":20,"connect":1,"send":0,"wait":204,"receive":0,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hireechoai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 09 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 274869\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-12T19:02:10.372462Z","times_seen":141372,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":228,"dns":12,"connect":49,"send":0,"wait":22,"receive":30,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hireechoai.com/","fqdn":"hireechoai.com","domain":"hireechoai.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-12T12:47:00.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hireechoai.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 20:28:39 GMT","end":"Fri, 10 Jul 2026 21:28:01 GMT"},"fingerprint":{"sha1":"88:D1:10:3E:98:5F:95:EA:8B:33:8C:B6:9F:28:7C:69:4A:17:1F:30","sha256":"77:39:D4:7B:51:D4:AA:1B:F8:F1:A3:15:1A:06:C7:89:09:6F:5E:9E:07:54:0B:6B:C3:6E:36:01:1C:E6:26:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hireechoai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\netag: \"f611c1bde67e6b318302e4c0bd2afce15e896484ad3eb2b2ed07c8f12a89aad5-br\"\r\nlast-modified: Sun, 12 Apr 2026 11:59:22 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Sun, 12 Apr 2026 12:47:00 GMT\r\nx-served-by: cache-hel1410023-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1775998020.387703,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 212\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":522,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"7e4686bc279e689995ea2f7256c6270c","sha1":"a43cf06ef251378c0539d6b56e4308070e0ff5a2","sha256":"891148734a3f575720c91ad86796aa4d29fc2c1cebc8cd439508517c5c05251f","sha512":"eedaeffd4a048de147674d0c76ce66bc5ee8c6542fd244d0717bfe7c14d050a8697e985fc959ff7ea61b2c22096c6b8fe493235383b991f0bc4e616e766f2681","ssdeep":"","tlshash":"11f0c04594b08a1a133017546d81f904ed42d747434c9a0831ebe07d1fc8b818eef8bc","first_seen":"2026-04-12T12:47:29.386058Z","last_seen":"2026-04-12T13:14:11.056912Z","times_seen":2,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":129,"dns":64,"connect":26,"send":0,"wait":28,"receive":1,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"hireechoai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hireechoai.com/assets/images/feature-insight-capture.png","fqdn":"hireechoai.com","domain":"hireechoai.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hireechoai.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 20:28:39 GMT","end":"Fri, 10 Jul 2026 21:28:01 GMT"},"fingerprint":{"sha1":"88:D1:10:3E:98:5F:95:EA:8B:33:8C:B6:9F:28:7C:69:4A:17:1F:30","sha256":"77:39:D4:7B:51:D4:AA:1B:F8:F1:A3:15:1A:06:C7:89:09:6F:5E:9E:07:54:0B:6B:C3:6E:36:01:1C:E6:26:F5"}}},"request":{"raw":"GET /assets/images/feature-insight-capture.png HTTP/1.1\r\nHost: hireechoai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1028768\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\netag: \"f46c2a2bfadaebd44b341347eac0416297ad5550d51e2c64b0788aeaf3aac37b\"\r\nlast-modified: Sun, 12 Apr 2026 11:59:22 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Sun, 12 Apr 2026 12:47:01 GMT\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1775998021.334078,VS0,VE3\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1028873,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1152 x 896, 8-bit/color RGB, non-interlaced","md5":"31370d94510d605cc6d6791a66d59aaf","sha1":"611c60d69b0aac2a036fbd99f8a0e7b2fb64f277","sha256":"422dd43e8f502f28e08e7705746583d5437d4e6f6e9951956fdf783f00fe0ab0","sha512":"13a16b68b59b2ea82da6954f9bb0ab863cc46f2aae0b5a5934868cb147e8711857b10f1200dda10f016b6f92c75978e3711a52300c913a536dc3c7e348eb9e34","ssdeep":"24576:JSKDMYSnEztnrn4Rwxf1bs+sBEHTa/hrLJqEPR8P8G:JXnrnewzsuTafLmP8G","tlshash":"a52533f2cf884d70c95fb4a911f256bd1c54b0e4b58de0f52de81fafaa8a1d6e500b84","first_seen":"2026-04-12T12:47:29.387062Z","last_seen":"2026-04-12T13:14:11.062808Z","times_seen":2,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"hireechoai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hireechoai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 08:25:52 GMT\r\nexpires: Fri, 09 Apr 2027 08:25:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 274869\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-04-12T19:02:10.372462Z","times_seen":141372,"resource_available":false,"data":null}},"time_used":1113,"timings":{"blocked":521,"dns":8,"connect":46,"send":0,"wait":61,"receive":15,"ssl":436},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ui-avatars.com/api/?name=Marcus+J\u0026background=6366F1\u0026color=fff\u0026size=64","fqdn":"ui-avatars.com","domain":"ui-avatars.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.281Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/?name=Marcus+J\u0026background=6366F1\u0026color=fff\u0026size=64 HTTP/1.1\r\nHost: ui-avatars.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T18:55:58.746745Z","times_seen":13673560,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hireechoai.com/assets/images/generate-post-meme.png","fqdn":"hireechoai.com","domain":"hireechoai.com","tld":"com"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hireechoai.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 20:28:39 GMT","end":"Fri, 10 Jul 2026 21:28:01 GMT"},"fingerprint":{"sha1":"88:D1:10:3E:98:5F:95:EA:8B:33:8C:B6:9F:28:7C:69:4A:17:1F:30","sha256":"77:39:D4:7B:51:D4:AA:1B:F8:F1:A3:15:1A:06:C7:89:09:6F:5E:9E:07:54:0B:6B:C3:6E:36:01:1C:E6:26:F5"}}},"request":{"raw":"GET /assets/images/generate-post-meme.png HTTP/1.1\r\nHost: hireechoai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 604679\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\ncontent-type: image/png\r\netag: \"d883dd7ad9535d8780e7544479dba21cb302ba21ee67a1c095ff6c07e2d16feb\"\r\nlast-modified: Sun, 12 Apr 2026 11:59:22 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Sun, 12 Apr 2026 12:47:01 GMT\r\nx-served-by: cache-hel1410029-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1775998021.283546,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":605018,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 774 x 735, 8-bit/color RGB, non-interlaced","md5":"600fa080237371053c9478e8e2b9073d","sha1":"16dc66f60d07fcf80897f9da9e6dc2aa4c634412","sha256":"9bf67aae99dac8e82df61d0296f06b37f6a034d5bd443c29ebc278fd78508e48","sha512":"be201dd377e94e88ca53d3b98fed6d60b4527a704dc0ed7a9694abfc0df7ab702370b38f12c08a9925092d972c6a6e41c14d0ae3cfa261c3043281f4e0eef8ba","ssdeep":"12288:abDF7ojr/wUnZ4BKijAetj71/x75vt+P4kOZQMHl5/llFkZ:m57yw4QK8Aetj7l+kRHl/PkZ","tlshash":"5dd42301e257c85acff5882654a93d381c3b0b4e0687571594f9b6ff03ab86e4d39f26","first_seen":"2026-04-12T12:47:29.38821Z","last_seen":"2026-04-12T13:14:11.052048Z","times_seen":2,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":294,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"hireechoai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hireechoai.com/assets/images/feature-insight-capture.png","fqdn":"hireechoai.com","domain":"hireechoai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hireechoai.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 20:28:39 GMT","end":"Fri, 10 Jul 2026 21:28:01 GMT"},"fingerprint":{"sha1":"88:D1:10:3E:98:5F:95:EA:8B:33:8C:B6:9F:28:7C:69:4A:17:1F:30","sha256":"77:39:D4:7B:51:D4:AA:1B:F8:F1:A3:15:1A:06:C7:89:09:6F:5E:9E:07:54:0B:6B:C3:6E:36:01:1C:E6:26:F5"}}},"request":{"raw":"GET /assets/images/feature-insight-capture.png HTTP/1.1\r\nHost: hireechoai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T18:55:58.746745Z","times_seen":13673560,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-12","alert":"Sinkholed","trigger":"hireechoai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ui-avatars.com/api/?name=Sarah+K\u0026background=0EA5E9\u0026color=fff\u0026size=64","fqdn":"ui-avatars.com","domain":"ui-avatars.com","tld":"com"},"ip":{"addr":"172.67.75.120","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hireechoai.com/","date":"2026-04-12T12:47:01.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ui-avatars.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 06:57:14 GMT","end":"Mon, 18 May 2026 07:57:10 GMT"},"fingerprint":{"sha1":"E9:34:F6:FA:B7:7F:23:BD:16:A5:D6:7C:A0:04:EC:6B:E1:23:1B:F4","sha256":"93:C1:1F:C5:06:57:20:1A:40:C5:34:9C:85:77:81:A8:01:59:6E:F1:DF:B7:51:96:43:EE:F7:D0:CE:89:8A:9C"}}},"request":{"raw":"GET /api/?name=Sarah+K\u0026background=0EA5E9\u0026color=fff\u0026size=64 HTTP/1.1\r\nHost: ui-avatars.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hireechoai.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Apr 2026 12:47:01 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npragma: public\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-credentials: true, true\r\naccess-control-allow-methods: GET, OPTIONS, GET, OPTIONS\r\naccess-control-max-age: 31536000, 31536000\r\naccess-control-allow-headers: Content-Type, Accept, X-Requested-With, remember-me, cache-control, Content-Type, Accept, X-Requested-With, remember-me, cache-control\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 11 Apr 2027 18:34:40 GMT\r\ncontent-encoding: gzip\r\nlast-modified: Sat, 11 Apr 2026 18:34:40 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aSPLjTF3wHX6Iah%2BXWt1dDA3pDbXj8ZC5hiHLh8PjUmoDJJucJDvVdtKm9jo6FITDzOp9OUdTpt4WshPapHwb0wk6kQB8W69qPlxvIPTJJBzit%2BgN1c88aaE7tpOvIfM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eb25651b89356b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":563,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"783d1f0a01bcc900178d02b75ef4c9f0","sha1":"0747777d542395ff6a91c7a6b7c629295d2d4fdb","sha256":"0d852634d7bcb4b0ff22822a4b83280af7f7e3f9f4fd8888642486eb83adff0b","sha512":"a7a86f22ef8b2f9795a589b4ab773b41e744ce963c158ec8f1dcba6d7de52a3f2e9670613d57f3e0a6b088384feec1374ff4708e5aca6adbfc02add2a9a847f3","ssdeep":"","tlshash":"35f0ac669198332ac1288f85e259a094466e2080c2864a9ceae16609b8e2cc633fc31d","first_seen":"2026-04-12T12:47:29.389162Z","last_seen":"2026-04-12T13:14:11.073723Z","times_seen":2,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":61,"dns":1,"connect":3,"send":0,"wait":198,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}