{"report_id":"aab3085c-13b2-4543-90ea-b10d889ed48f","version":0,"status":"done","tags":[],"date":"2026-07-12T19:10:02Z","url":{"schema":"https","addr":"helphumanfirst.org/","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":0,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"helphumanfirst.org/","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"title":"DonDoo Brasil — Your transparent fundraising platform","dom":{"size":146367,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1353)","md5":"1844d6d4320d00cd911f9f42a4583b1e","sha1":"7b3d1b96e00a9b242d8d72ce23cd3385d128d974","sha256":"30e05950a4f0ebe07ce49c21778ed9aef3be42611f1ffca174633879f8218e53","sha512":"088622d19baf997e9911a12664d62861e6ce2b0453e7798e21724d44a69906d91a93a5d0888522ac721b7b3dd729b70eec0bf5ea34a2bb7640fec3e07d922df0","ssdeep":"1536:TT65gobJZuDGuqDkm37SZb/UhDRHYLESDkjlZ5bYfB0sj8rOOMTcLy9+vKn7LZVA:/sb6W36ESQZbYfB0U8rsgDFC6","tlshash":"eae3e7e652f52229206780e56ba7279a37a9c053e00bc554b7fd47788fc2ec6f87364c","dom_hash":"domhasha099d32c51c2370080787b95591643e5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"helphumanfirst.org/","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":0,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T19:10:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"helphumanfirst.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"connect.facebook.net","ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"domain_registered":"2004-04-01","domain_rank":1088,"first_seen":"2012-05-22T02:51:28Z","last_seen":"2026-07-07T05:20:20.211541Z","alert_count":0,"request_count":2,"received_data":635793,"sent_data":2039,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":3,"received_data":25884,"sent_data":1634,"comment":"","tags":null,"fingerprints":null},{"fqdn":"helphumanfirst.org","ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"domain_registered":"2026-07-05","domain_rank":0,"first_seen":"2026-07-10T09:58:00.381137Z","last_seen":"2026-07-10T09:58:00.381137Z","alert_count":18,"request_count":18,"received_data":14506274,"sent_data":10669,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-05T22:48:05.057169Z","alert_count":0,"request_count":1,"received_data":86656,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-05T22:22:24.069932Z","alert_count":0,"request_count":1,"received_data":4275,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"helphumanfirst.org/","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"55dc2d3203b305e696c2ab27cbcd282c","sha1":"e4c53534b4934487044d6539d34fd7c3fe0f4b4e","sha256":"446a046d0e6949d75ba76c4efe10057ca36e744f43acb35b53dcad51ee09c7ec","sha512":"1904b4995331fcbe4470deb11d518762795f292f0ef05e5e24427983c9931bad26684589a62edbab2cc3285f8dbf772185eaf3860df3a410c4c60b5f0b2fdaeb","ssdeep":"","tlshash":"2ef09e9e2c71f8e717fe1428cf77515f334f5340388284a5a94980242fe19162c42d8e","size":514,"data":"","first_seen":"2026-07-10T09:58:05.416845Z","last_seen":"2026-07-12T19:10:10.046455Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d243c44a5ccd9a61eb6df6e8f8015778","sha1":"e3587c326668a9abf4e65ffcc69b9a2ebb23762d","sha256":"f3a936458adf8f3e5352bc4cb6a56500ee0c1e4f640f0cf38725ffa10a305885","sha512":"bac34e037f7d2aae724aff2ffa237dd2a3ec76822aa1d44b014732934e592936d23e1103e381bec263f7e978fcc19eea8338fcccda86859f83f16615fab6e453","ssdeep":"96:5EdfBmG6c9FOKGZ3bLsa57CEm1IBPsFiO4bOKyICI0RLNJww/G08uuv:W6c7OpLYa57ClyBmsARxJRja","tlshash":"6e91864530b761240ab321fa578fe229b1329013718ad9817e6d47907fc6f2e5662eef","size":4568,"data":"","first_seen":"2026-07-10T09:58:05.419029Z","last_seen":"2026-07-12T19:10:10.047864Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7ef4f473c931f70c6b6aae96040ae1d","sha1":"9575a843db1aabb4ec73afe90597acf04f8162d0","sha256":"581768c6afa3f9d189b0be4dbf4a751310d8da3aaf7cf513250c7828344768aa","sha512":"70d11aa49eb549837da291d6e40ebbbd977ab0fc6eb8809ed0807d4003f3fe5d0438486ae737bee1b0eebdaf00bde0f6dd7adfe22331c954387115a3dc3cfa9d","ssdeep":"","tlshash":"5c61131ef2b1393248b742ba6beba11977110443a58fcd04bbed87451fc45a18ef29da","size":3283,"data":"","first_seen":"2026-07-10T09:58:05.424867Z","last_seen":"2026-07-12T19:10:10.048849Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0060092c8ae392e6f927f0d53d5abfca","sha1":"aae2c9a010a5876de54452e59b8445c10638b7a2","sha256":"35893e2c8960989bf95c92dde5e14072fd5cfec4f9169b56ac8c9a51a6c511e9","sha512":"c0a008f9dc6d1708bf3c9db74b8993ff95f99255262a6f869cfd933a1d136381795b754d8d0918235284a098e6ed042d662673d95a24121e574deb0b6ed71dfe","ssdeep":"","tlshash":"9001ab3b32203d3088a7b5eb96eba744b63a4645756be1446a5c03484de0e93f4bb8c6","size":844,"data":"","first_seen":"2026-07-10T09:58:05.428336Z","last_seen":"2026-07-12T19:10:10.04975Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe33214d0d4d96d1a83cbeab8e4b776e","sha1":"cb0599d92bf3c2d171dc78a80a2a122861996c0b","sha256":"ed6efe6a5206881111c3a7182d56a90c1286929aaa547e69bbe0c55a49aa8a72","sha512":"5694264232db64e6ba546064f62872bc764a1bc61b02e6efe4518a28f44c3827d183d96e2060def95767d7713d724af8d06838996356edcc001ab7433899fa88","ssdeep":"","tlshash":"08e0e52b72e41e3500b3429557cf66a8f11f830f95c468917954c7465f909b39823ad4","size":410,"data":"","first_seen":"2026-07-10T09:58:05.430976Z","last_seen":"2026-07-12T19:10:10.050715Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1e325570f02c1201bcb21d1d8b641e2","sha1":"331f74eb6ff1b732e8b1333de5fca12d818ae7fa","sha256":"dd0f249f70f96e462ad43ba31e6448cad7895601d1cc0d0bb8383a4fc626ef5b","sha512":"bafe7bd047591eb05042b46f01be3abcba962db1497b3989b528cd47e546123c9ecc9aac47b187f1a865ca81f9e17861536f5bf65ec6cfdb8e0e7356b19af25a","ssdeep":"","tlshash":"4d51dc6d71b52b3a44f754ab66eb6ae829368812b407d4343f7dc8d42f728c018b28d9","size":2606,"data":"","first_seen":"2026-07-10T09:58:05.433463Z","last_seen":"2026-07-12T19:10:10.051879Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b2ecbd975a78b63b961dd2844f4b290","sha1":"7afc954768f17a217619dbb39634f26c81a11ce1","sha256":"d8c8b2127a30290c30a48ed9b45b60070e7388a63e62653d349a367b62cafa83","sha512":"fe7af294d5581ff4f6b73b3ba86e3450e522c4149939d1c5ded3c68d8da7faa7199836beeeb3586906adf44c282f123cc7442cd039b7ebcfe282d1ff39249c56","ssdeep":"192:C1+o/PY381lKvVatHEe8/oLEUd7exJMlzauOtMrOxF:CY38WEHEecUEUBmJSauOt+Or","tlshash":"dad175b927b3027406ff92a737eb51082531401f3885c8a2b9ec94559fe4e947ba1bfc","size":6250,"data":"","first_seen":"2026-07-10T09:58:05.435795Z","last_seen":"2026-07-12T19:10:10.05282Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c2048ec977ca5159add646e6d36c2f0","sha1":"c9d24b81c40071d67d359d66a19f6b597f837c01","sha256":"743e3e0436ecc1a4305dd411b55a80d765cc0842eb9434a08c061031b3ae0c3b","sha512":"e56a6ca69837f838fe75542eeb0c63edf8b4c886ec7259d40921bfa97f3b262f29be95af25382b766769f96dc2e1613e76a06873eabb542e1ed7931623526be8","ssdeep":"","tlshash":"8311ebad717c70b411b316a6a2c7d3c8261561b37182cec839accc004fd29c146bb8db","size":1024,"data":"","first_seen":"2026-07-10T09:58:05.438186Z","last_seen":"2026-07-12T19:10:10.053744Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"47000a6c822d972505e22a095f5e5bbd","sha1":"92fbda04fb7ef24620ea43db1f310a0281e6b64f","sha256":"720d069c0d63256cc5c7aaf013cd1006ff4364af4cbc735b21528af4f65921fb","sha512":"47282063273e22be76c9ef8d393d6b049941c91e8d5dcd60e5a44463315d90cddd5019433696a896f07af7bbe1288335188d71c857961d9400a6e1fcc6445634","ssdeep":"","tlshash":"99f0244b61b917348ae3822393dce535283a048a374989513cbd126b3f94dde73b5ab3","size":509,"data":"","first_seen":"2026-07-10T09:58:05.440505Z","last_seen":"2026-07-12T19:10:10.054897Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/signals/config/1778709066458844?v=2.9.349\u0026r=stable\u0026domain=helphumanfirst.org\u0026hme=f29d86973612db0f0627890a64bdc8c47b471189050b33f2680b7d76997afc9a\u0026ex_m=107%2C208%2C158%2C22%2C73%2C74%2C149%2C69%2C68%2C11%2C167%2C93%2C16%2C141%2C130%2C39%2C76%2C81%2C137%2C163%2C169%2C8%2C4%2C5%2C7%2C6%2C3%2C94%2C104%2C170%2C175%2C222%2C30%2C75%2C234%2C233%2C232%2C23%2C33%2C55%2C106%2C61%2C10%2C64%2C100%2C101%2C102%2C108%2C133%2C31%2C29%2C135%2C136%2C132%2C131%2C159%2C77%2C162%2C160%2C161%2C50%2C60%2C126%2C15%2C166%2C45%2C279%2C280%2C278%2C26%2C27%2C28%2C48%2C150%2C78%2C115%2C18%2C20%2C44%2C40%2C42%2C41%2C86%2C95%2C99%2C113%2C148%2C151%2C46%2C114%2C24%2C21%2C122%2C70%2C36%2C153%2C152%2C154%2C145%2C143%2C25%2C35%2C59%2C112%2C165%2C71%2C17%2C156%2C117%2C84%2C67%2C19%2C88%2C89%2C119%2C87%2C139%2C138%2C142%2C164%2C34%2C293%2C309%2C215%2C204%2C62%2C205%2C203%2C312%2C303%2C52%2C216%2C110%2C134%2C83%2C124%2C54%2C47%2C49%2C116%2C123%2C129%2C128%2C58%2C65%2C63%2C155%2C79%2C80%2C118%2C37%2C32%2C53%2C56%2C103%2C168%2C1%2C127%2C14%2C125%2C12%2C2%2C57%2C96%2C66%2C121%2C92%2C91%2C171%2C172%2C97%2C98%2C9%2C105%2C51%2C146%2C90%2C82%2C72%2C120%2C109%2C43%2C147%2C0%2C85%2C140%2C144%2C157%2C38%2C111%2C13%2C173","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8c1cabd6c0fb69d1defd7785379ae4c","sha1":"5040eaba742fde740d1b64cfe34618d9c9e30f37","sha256":"884e5ee131d0583ec2b2dac11f4ceb10c3b7524df975f0de36fee35518dd62a2","sha512":"5658782e24b413daff1af582e7cea24e7927d883bfe4be2ce3c722e2428ca3b853190477ef098a56f667d9b16d034ebdd8f88b9a6c0e944e1210996c80f2a353","ssdeep":"1536:JyfY7zmQO0XubF+C56IEuLnjyvsp8A1EQjW/qT8fPyjrbp8jOGZycaFNZg6hqjeR:sxQfZ/qT8yjdEtiNuA/rvY0LsUAM","tlshash":"723408c9b2e1b47247e67968be7f140bb1b5945234d8c820ea1cdcc53ab915a4133fbb","size":246440,"data":"","first_seen":"2026-07-12T19:10:10.040259Z","last_seen":"2026-07-12T19:10:10.040259Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/en_US/fbevents.js","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"007129bcfbeea244b6e4b88cd253e960","sha1":"b8116239bb207bda191485bd2eb0f3bcf39b2f55","sha256":"525a75a05d2ded55a857efc20611ca9d97b5a5a71ef56dc22a6354c3b0ee2253","sha512":"169cff9a119b5883d154351879acb982f4a96c9b7728e6a3f226703766d29e53fb445966850bad4ed120f4614cee1074995af2be56b1cabf0d24b0b59ab0a79f","ssdeep":"6144:E7gAVTJGD0ML9RBTD+4Yd0E+brBLrxQqR/ddFriG2XPHnNpnK01lzrYzOOlvBZSk:SnWO0dgPHnNpnK04NSk","tlshash":"b784e789b1e1b0a103b6796c966f9007b2bbd5a234ccc960e55dedc82d7c49e4133eb7","size":381376,"data":"","first_seen":"2026-07-01T21:14:37.40446Z","last_seen":"2026-07-14T01:03:49.923299Z","times_seen":735,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"connect.facebook.net/en_US/fbevents.js","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.897Z","timestamp":1783883364897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Apr 2026 00:00:00 GMT","end":"Mon, 20 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5A:C4:B3:53:17:8F:6C:92:13:21:06:10:3B:3B:A8:08:33:97:00:65","sha256":"AD:39:63:BB:0E:1F:D6:E2:9B:B0:3A:86:C0:27:C8:77:8B:42:5C:81:5E:D1:37:85:40:A6:63:4D:AC:10:85:98"}}},"request":{"raw":"GET /en_US/fbevents.js HTTP/1.1\r\nHost: connect.facebook.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/x-javascript; charset=utf-8\r\ntiming-allow-origin: *\r\nreporting-endpoints: coop_report=\"https://www.facebook.com/browser_reporting/coop/?minimize=0\", coep_report=\"https://www.facebook.com/browser_reporting/coep/?minimize=0\", permissions_policy=\"https://www.facebook.com/ajax/browser_error_reports/\"\r\nreport-to: {\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coop\\/?minimize=0\"}],\"group\":\"coop_report\",\"include_subdomains\":true}, {\"max_age\":86400,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coep\\/?minimize=0\"}],\"group\":\"coep_report\"}, {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ncontent-security-policy: default-src *.facebook.com *.fbcdn.net *.facebook.net 'self' blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net blob: 'self' 'nonce-OFRXvHtl';style-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob: 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com *.cdninstagram.com blob: 'self' data: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net;font-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;img-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;media-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;child-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;frame-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;manifest-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;object-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;worker-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c\u0026minimize=0;\r\nx-frame-options: DENY\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy-report-only: require-corp;report-to=\"coep_report\"\r\ncross-origin-opener-policy: same-origin-allow-popups\r\npragma: public\r\ncache-control: public, max-age=1200\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\norigin-agent-cluster: ?1\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\nx-fb-debug: qXDdWkshQnK3UQcCdkgQZON0dooHxSPiwarMXhiIr6KOBHimldU0M1eha2qcKn4fPneDrq6ocJLBjqGQK73Suw==\r\ncontent-length: 100859\r\ndate: Sun, 12 Jul 2026 19:09:24 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=11, rtx=0, c=23, mss=1232, tbw=5072, tp=9, tpl=0, uplat=0, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":381376,"size_decoded":104858,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9255)","md5":"007129bcfbeea244b6e4b88cd253e960","sha1":"b8116239bb207bda191485bd2eb0f3bcf39b2f55","sha256":"525a75a05d2ded55a857efc20611ca9d97b5a5a71ef56dc22a6354c3b0ee2253","sha512":"169cff9a119b5883d154351879acb982f4a96c9b7728e6a3f226703766d29e53fb445966850bad4ed120f4614cee1074995af2be56b1cabf0d24b0b59ab0a79f","ssdeep":"6144:E7gAVTJGD0ML9RBTD+4Yd0E+brBLrxQqR/ddFriG2XPHnNpnK01lzrYzOOlvBZSk:SnWO0dgPHnNpnK04NSk","tlshash":"b784e789b1e1b0a103b6796c966f9007b2bbd5a234ccc960e55dedc82d7c49e4133eb7","first_seen":"2026-07-01T21:14:37.40446Z","last_seen":"2026-07-14T01:03:49.923299Z","times_seen":735,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":5,"connect":19,"send":0,"wait":9,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.959Z","timestamp":1783883364959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://helphumanfirst.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 07 Jul 2026 23:00:20 GMT\r\nexpires: Wed, 07 Jul 2027 23:00:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 418144\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7816,"size_decoded":8628,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-07-14T14:17:57.428355Z","times_seen":278575,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.961Z","timestamp":1783883364961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://helphumanfirst.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 03:05:34 GMT\r\nexpires: Fri, 09 Jul 2027 03:05:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 317030\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7748,"size_decoded":8560,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-07-14T14:17:57.436503Z","times_seen":261376,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/assets/sounds/chat-close.mp3","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:25.075Z","timestamp":1783883365075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.helphumanfirst.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 22:02:44 GMT","end":"Sat, 03 Oct 2026 22:02:43 GMT"},"fingerprint":{"sha1":"26:AE:DD:7D:8B:4B:F2:D8:9E:E0:7E:00:A4:9F:9F:49:B9:09:4E:01","sha256":"18:C9:98:2A:11:9A:B1:54:92:84:65:D4:74:66:68:23:00:AB:4C:95:6C:A5:34:2A:A5:62:11:6A:BD:CC:9C:4B"}}},"request":{"raw":"GET /assets/sounds/chat-close.mp3 HTTP/1.1\r\nHost: helphumanfirst.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://helphumanfirst.org/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=820c2682209409f0052a8176a9542771\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 19:09:25 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 15882\r\nlast-modified: Sun, 05 Jul 2026 09:30:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6a4a2418-3e0a\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-range: bytes 0-15881/15882\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15882,"size_decoded":16349,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 256 kbps, 44.1 kHz, JntStereo","md5":"b2da77acaaf315446c7ee96b7026736b","sha1":"f716809845d09810a48299da3cd667bd2007e463","sha256":"9bf112783258dd7fa7fb4b10613edc991defc9f820f36a6fb2dc05e61a14af14","sha512":"47571cead6b8a3a83aa0709160541dd4a6596f61900b611a28f6973ddf9466e54327654895ab88b2960037c931c65e96dd9f9e9f3ff1a7e0e09e6607ef42b438","ssdeep":"192:Z6ONk/6iei2AnvOlxNGPS5TljCCCCCaCCCCS:EEkSHi9O5Gsi","tlshash":"d7622b9567a040eec437bb3df4ef5b243229646c6510d8df84b2d74a12cce542f2555d","first_seen":"2026-04-30T08:59:56.535146Z","last_seen":"2026-07-12T19:10:10.024528Z","times_seen":3,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"helphumanfirst.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.780Z","timestamp":1783883364780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.11.3/font/bootstrap-icons.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.11.3\r\nx-jsd-version-type: version\r\netag: W/\"14f73-BDozLk9VXMC/015FG+lVtLk5ZqA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 12 Jul 2026 19:09:24 GMT\r\nage: 974859\r\nx-served-by: cache-fra-eddf8230034-FRA, cache-bma-essb1270020-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13383\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85875,"size_decoded":14164,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65354)","md5":"5605c44f8b24ea5de37a959955b71eb6","sha1":"043a332e4f555cc0bfd35e451be955b4b93966a0","sha256":"f643d6fe7e679f9de3e16311600c5ef5cd6b098f7a3a8828fcc29255d2b33e62","sha512":"74f5d8703b9bfda79bd3c73ade346afe4e8668a71c976e7a250cbf0273aaec2027119f45cd22fdc126dc664329e11dbabc1b0c2c5607e2443aeff6db57c5da09","ssdeep":"768:ZPcr8JUkZrpULKt4bDcf3oQpeqfZs0BWeUz5+XIHx5qkgwTz:hrpEKt4moUeqfZbc5+XIHZz","tlshash":"9383fbe8e58d05e8f372c48faf42775e31aafa3cd5811c68f14a111d5ac26650ac7fb8","first_seen":"2024-01-11T04:35:50Z","last_seen":"2026-07-14T14:35:59.39012Z","times_seen":9352,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":9,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/assets/campaign_photos/4/001b17b2c1fa5d59c8177b4cd392cc71.jpg","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.796Z","timestamp":1783883364796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.helphumanfirst.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 22:02:44 GMT","end":"Sat, 03 Oct 2026 22:02:43 GMT"},"fingerprint":{"sha1":"26:AE:DD:7D:8B:4B:F2:D8:9E:E0:7E:00:A4:9F:9F:49:B9:09:4E:01","sha256":"18:C9:98:2A:11:9A:B1:54:92:84:65:D4:74:66:68:23:00:AB:4C:95:6C:A5:34:2A:A5:62:11:6A:BD:CC:9C:4B"}}},"request":{"raw":"GET /assets/campaign_photos/4/001b17b2c1fa5d59c8177b4cd392cc71.jpg HTTP/1.1\r\nHost: helphumanfirst.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://helphumanfirst.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=820c2682209409f0052a8176a9542771\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 19:09:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 05 Jul 2026 09:29:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4a2416-512e9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":332521,"size_decoded":316841,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 27.7 (Windows), datetime=2026:06:05 23:12:25], baseline, precision 8, 1920x1080, components 3","md5":"32e86650e0e78db80358e381569bd2dc","sha1":"6a387cbe27483ba5740e3646531d6afa247e4688","sha256":"36cb645dc3ebad44b1e31cc87718207796b74aee08153897bdd6fa7d6e0e8367","sha512":"2fb657205e5e839cdeb3a049ed4105936a76446a9b81cf49da6591e996e50ebe278debb20ac86dc556258fbb516da497b2f3b0e48f7de848a7184f3d75559972","ssdeep":"6144:2Uam5T7G7zsKjeGoH2QtzMYSVhQlcfvoST3AuOrY+kQOqjlzG+pTH2f:2UaO7G7FjeReYS8lcHeuRWrpTH2f","tlshash":"2b6423760a28d823eacd26375880ef66b675d7db93e327c5fd1c07c82365c23682d985","first_seen":"2026-07-10T09:58:05.353849Z","last_seen":"2026-07-12T19:10:10.026944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"helphumanfirst.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/assets/blog/blog_20260521210119_993326734ef8.jpg","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.799Z","timestamp":1783883364799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.helphumanfirst.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 22:02:44 GMT","end":"Sat, 03 Oct 2026 22:02:43 GMT"},"fingerprint":{"sha1":"26:AE:DD:7D:8B:4B:F2:D8:9E:E0:7E:00:A4:9F:9F:49:B9:09:4E:01","sha256":"18:C9:98:2A:11:9A:B1:54:92:84:65:D4:74:66:68:23:00:AB:4C:95:6C:A5:34:2A:A5:62:11:6A:BD:CC:9C:4B"}}},"request":{"raw":"GET /assets/blog/blog_20260521210119_993326734ef8.jpg HTTP/1.1\r\nHost: helphumanfirst.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://helphumanfirst.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=820c2682209409f0052a8176a9542771\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 19:09:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 05 Jul 2026 09:30:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4a2418-15c68\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89192,"size_decoded":89529,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1100x733, components 3","md5":"0dbe88408257241fd81b7237cfb98cbd","sha1":"b78141da45ffe0fcfe0416842bb91b6f6a512d09","sha256":"28ef724c2af860e5835a8cdf5ae691415a315283d964b029a9921758af6b0a4b","sha512":"de7c614bb41c446368078b55543011ebc8c2af133ef00bf706cd4707220af6854b42c0bd51dd93030a5923e314608a3e4d4ff2f10a9fe22e622c00188991158b","ssdeep":"1536:BwM1eaCjRM5ASFhXcmwXxSH+TrjK1mzuOgBGHIQWzA+zuHvK9+f3r4D8E6VvStC3:OAQMqc9wXYeLI2EsIfA+iHvKMPtE6V73","tlshash":"b693020e3341ccb5e545af2aead3f6c16b3778cac0423337721ab8ba4dd076544b1aa5","first_seen":"2026-07-10T09:58:05.404517Z","last_seen":"2026-07-12T19:10:10.028787Z","times_seen":2,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"helphumanfirst.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/assets/blog/blog_20260521205956_c75634278db4.jpg","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.801Z","timestamp":1783883364801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.helphumanfirst.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 22:02:44 GMT","end":"Sat, 03 Oct 2026 22:02:43 GMT"},"fingerprint":{"sha1":"26:AE:DD:7D:8B:4B:F2:D8:9E:E0:7E:00:A4:9F:9F:49:B9:09:4E:01","sha256":"18:C9:98:2A:11:9A:B1:54:92:84:65:D4:74:66:68:23:00:AB:4C:95:6C:A5:34:2A:A5:62:11:6A:BD:CC:9C:4B"}}},"request":{"raw":"GET /assets/blog/blog_20260521205956_c75634278db4.jpg HTTP/1.1\r\nHost: helphumanfirst.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://helphumanfirst.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=820c2682209409f0052a8176a9542771\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 19:09:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 05 Jul 2026 09:30:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4a2418-1c705\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116485,"size_decoded":116043,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1024x512, components 3","md5":"33fd5f1dfd5a5d47d0f28b01663fd1cc","sha1":"47e67bca9e11b96c79bc05c12ee0a6e9cd4c53e3","sha256":"57f5e172bbb8430d2b8c44fb9e44f5551afb033e2b909ee64ecd74fdf62cf3e8","sha512":"dfb7c0e88191f5e7b63e6145ac42fba60d78a8d048dfef92142c3ff800f395aad82aaade38bae2acbc5d5acf73913297b4791fdd09e285993a9b278dbe8632c3","ssdeep":"3072:H95sBz1hx2gZ7REyV5/BVfSx9uOZggebENHtMgCt3AmkY0:H9g5hIkV5/fav9De4NHtMgCt3Pm","tlshash":"c3b312f7910381b6675e82a53882fdb48199729c99c1da7c01fc48ec886b523f62cfe1","first_seen":"2026-07-10T09:58:05.378883Z","last_seen":"2026-07-12T19:10:10.029969Z","times_seen":2,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"helphumanfirst.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.917Z","timestamp":1783883364917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://helphumanfirst.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 02:57:09 GMT\r\nexpires: Fri, 09 Jul 2027 02:57:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 317535\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7884,"size_decoded":8696,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-07-14T14:17:35.546712Z","times_seen":374184,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":1,"connect":40,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/assets/img/web-banner2.jpg","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.979Z","timestamp":1783883364979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.helphumanfirst.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 22:02:44 GMT","end":"Sat, 03 Oct 2026 22:02:43 GMT"},"fingerprint":{"sha1":"26:AE:DD:7D:8B:4B:F2:D8:9E:E0:7E:00:A4:9F:9F:49:B9:09:4E:01","sha256":"18:C9:98:2A:11:9A:B1:54:92:84:65:D4:74:66:68:23:00:AB:4C:95:6C:A5:34:2A:A5:62:11:6A:BD:CC:9C:4B"}}},"request":{"raw":"GET /assets/img/web-banner2.jpg HTTP/1.1\r\nHost: helphumanfirst.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://helphumanfirst.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=820c2682209409f0052a8176a9542771\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 19:09:25 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 05 Jul 2026 09:30:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4a2418-129ef2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1220338,"size_decoded":1196112,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 5184x3456, components 3","md5":"9328bc6134fb6055aa2c48ec1c53c33d","sha1":"c4b3f46584ee9b31647e4167e5e39e6fd9b1014d","sha256":"f3dceaf7f893ed44b4521066ff0c37a85b19f2d5893ad296c895296946ba5a49","sha512":"00efdb9918f7f8cdff688cf0c19db8d8db719d1756226c645a76854165edfeb62d6bec95f4307593199762c96a072c7cee2487ce3f701e9ce2d57a9b04507407","ssdeep":"24576:O5FM5c3v9Qg6TEWDrvBO147+mqlri6Lk3PflbujEez8:OMK9Q3t1ojalbMEq8","tlshash":"342523fa93da1660e7eec4765af2a7bc9128c1d92b57b34e60df2e808411c83c771741","first_seen":"2026-07-10T09:58:05.412011Z","last_seen":"2026-07-12T19:10:10.031474Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"helphumanfirst.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/assets/sounds/chat-open.mp3","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:25.073Z","timestamp":1783883365073,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.helphumanfirst.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 22:02:44 GMT","end":"Sat, 03 Oct 2026 22:02:43 GMT"},"fingerprint":{"sha1":"26:AE:DD:7D:8B:4B:F2:D8:9E:E0:7E:00:A4:9F:9F:49:B9:09:4E:01","sha256":"18:C9:98:2A:11:9A:B1:54:92:84:65:D4:74:66:68:23:00:AB:4C:95:6C:A5:34:2A:A5:62:11:6A:BD:CC:9C:4B"}}},"request":{"raw":"GET /assets/sounds/chat-open.mp3 HTTP/1.1\r\nHost: helphumanfirst.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://helphumanfirst.org/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=820c2682209409f0052a8176a9542771\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 19:09:25 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 23040\r\nlast-modified: Sun, 05 Jul 2026 09:29:58 GMT\r\nvary: Accept-Encoding\r\netag: \"6a4a2416-5a00\"\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-range: bytes 0-23039/23040\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23040,"size_decoded":23507,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 256 kbps, 48 kHz, JntStereo","md5":"4d93c09510ba39547621eb3dec2dbcd4","sha1":"4c29f885856a262ec37610482ab7bb0df16bf217","sha256":"bb343a49535045ee3350f30fe01848ce8f933b1394710a71069c96435116af54","sha512":"eac5645bc571e47a413e36940cf46ea24a8f24afafbf20ea9c695dcb58d483cf40b99c58d53c8d83d6d58b117b647f846591f7cb8e0d76a0203c42ac30be5745","ssdeep":"384:xS5wwrPSJh1pi/cJEE3fD3Qs5Nqutx51nKbUjWnH7lybkyDYIPBVD:xSawrPE1pFDDQbutJvGk3R","tlshash":"2ba2e1aa249442d532226e52a122230fcfed3f236c1d5bce2711f7bc9c7398a33540e5","first_seen":"2025-11-21T17:01:25.382387Z","last_seen":"2026-07-12T19:10:10.032635Z","times_seen":7,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"helphumanfirst.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.777Z","timestamp":1783883364777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 19:09:24 GMT\r\ndate: Sun, 12 Jul 2026 19:09:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3591,"size_decoded":1203,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"937c14ba7b5ca80d7955c6b5a4e1f283","sha1":"26375ff63193982affe1912f2918a20440b8d207","sha256":"c30b5f4bf7fc73369abceb72ecb439446e79be7f42cf749d79fbc0c7fd490937","sha512":"ff0824b0ccecfd65f0123d255d5578e6e281b47d14ca78dad739bc781123b12e33ab8263f7ee76a9fe8248d7a7a2571a87a5635e2a5c49a85f8090034e31cd88","ssdeep":"","tlshash":"79719cd1087be1149b831cc123cf6d37ee0e9255b810e5786bfe0c98adabc654362b2d","first_seen":"2025-09-17T02:36:20.355897Z","last_seen":"2026-07-14T13:08:09.427476Z","times_seen":2493,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":34,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/includes/css/main.css","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.782Z","timestamp":1783883364782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.helphumanfirst.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 22:02:44 GMT","end":"Sat, 03 Oct 2026 22:02:43 GMT"},"fingerprint":{"sha1":"26:AE:DD:7D:8B:4B:F2:D8:9E:E0:7E:00:A4:9F:9F:49:B9:09:4E:01","sha256":"18:C9:98:2A:11:9A:B1:54:92:84:65:D4:74:66:68:23:00:AB:4C:95:6C:A5:34:2A:A5:62:11:6A:BD:CC:9C:4B"}}},"request":{"raw":"GET /includes/css/main.css HTTP/1.1\r\nHost: helphumanfirst.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://helphumanfirst.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=820c2682209409f0052a8176a9542771\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 19:09:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 05 Jul 2026 09:29:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4a2416-62c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1580,"size_decoded":914,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"13ba257f6703167df4a3fd0e13c8148b","sha1":"ea079b4623b50fee962d03b751f2f10b8e0e3ae9","sha256":"5e6201cf33e0e6c33d040749712a55f39d1d25f957fa69c0b3a3a08a0cf536d4","sha512":"b4fbf6e5cbcfdbfc12d6f5475e4e0acef6b993bfa2095531137fe8a1fb9550af901b364c0c44e74899fe8ced65abe20a0a8e9a95aa5342b01c9bd34761ae8f46","ssdeep":"","tlshash":"d031ac5a02b1f0a189358fc1f3168d2ce7592416a60ad3c8ffca5b409bc43ba57a0f5d","first_seen":"2026-07-10T09:58:05.340308Z","last_seen":"2026-07-12T19:10:10.033842Z","times_seen":2,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"helphumanfirst.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/assets/img/mascote-cortado.png","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.792Z","timestamp":1783883364792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.helphumanfirst.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 22:02:44 GMT","end":"Sat, 03 Oct 2026 22:02:43 GMT"},"fingerprint":{"sha1":"26:AE:DD:7D:8B:4B:F2:D8:9E:E0:7E:00:A4:9F:9F:49:B9:09:4E:01","sha256":"18:C9:98:2A:11:9A:B1:54:92:84:65:D4:74:66:68:23:00:AB:4C:95:6C:A5:34:2A:A5:62:11:6A:BD:CC:9C:4B"}}},"request":{"raw":"GET /assets/img/mascote-cortado.png HTTP/1.1\r\nHost: helphumanfirst.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://helphumanfirst.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=820c2682209409f0052a8176a9542771\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 19:09:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2026 09:30:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4a2418-eb7c7\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":964551,"size_decoded":964933,"mime_type":"image/png","magic":"PNG image data, 1012 x 746, 8-bit/color RGBA, non-interlaced","md5":"054569e1667e85b7afafdf07bc315266","sha1":"3982cdaf40c9ec0c562cbbcd9cdde225aaccb34e","sha256":"5902697da2e4486f0cd3f22c34e5958c9cd5c01b0e5cc14dda1f1b9a1e592cf1","sha512":"def196bf2a2773b26aa87561d472311814c4a1b888de77812295b979ad8f1c0f0603ca84cb0ee8207893f1ad6b3e713332ca766f7223bef7b8f4a1c47067c86c","ssdeep":"24576:IAVQX1+TaZzTfv9snDYC4qV9cVAvYsrt5wN:Ip8TYfvyn8EjciYs2","tlshash":"7a2533dc7e2e79362d07a4bf0691c58acf7c1b5871f3240f54938aa3da971a7046c7a8","first_seen":"2026-07-10T09:58:05.384585Z","last_seen":"2026-07-12T19:10:10.034746Z","times_seen":2,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"helphumanfirst.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/assets/campaign_photos/6/58615b44f04a732f6090cf3318c42c11.jpg","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.797Z","timestamp":1783883364797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.helphumanfirst.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 22:02:44 GMT","end":"Sat, 03 Oct 2026 22:02:43 GMT"},"fingerprint":{"sha1":"26:AE:DD:7D:8B:4B:F2:D8:9E:E0:7E:00:A4:9F:9F:49:B9:09:4E:01","sha256":"18:C9:98:2A:11:9A:B1:54:92:84:65:D4:74:66:68:23:00:AB:4C:95:6C:A5:34:2A:A5:62:11:6A:BD:CC:9C:4B"}}},"request":{"raw":"GET /assets/campaign_photos/6/58615b44f04a732f6090cf3318c42c11.jpg HTTP/1.1\r\nHost: helphumanfirst.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://helphumanfirst.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=820c2682209409f0052a8176a9542771\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 19:09:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 05 Jul 2026 09:29:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4a2416-25ed3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":155347,"size_decoded":155721,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 908x908, components 3","md5":"7d616f3d5d69947115ed35a39c243e3a","sha1":"ec1746a199bfc13c09d12c71a8e5be62b0152010","sha256":"d5a5d5473da30f9ca12c0996d1bed715f4832d1de1ccad1283f7d0855c2d5e07","sha512":"cbc993a7deae4359a670fb94e0f5c945936645d4746bdeb10bf19e6f819528c625975eedf192a988c5ab2af4e505e78d58c81c25f4c663de0151c05bcc7b9b31","ssdeep":"3072:J7p7vzwazothVVFnUGXySBw3psN0JjyfUK+JfMrUpEcWnW60p:TzPcxzUGCgOg0JOfUlfMrUCzW60p","tlshash":"20e3126be93086d7c1158c92775b84d6f2ef8eb8cc2b581148c6788a607c7d35eed90e","first_seen":"2026-07-10T09:58:05.397979Z","last_seen":"2026-07-12T19:10:10.03579Z","times_seen":2,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"helphumanfirst.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/assets/blog/blog_20260521205825_fef820714fc6.webp","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.802Z","timestamp":1783883364802,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.helphumanfirst.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 22:02:44 GMT","end":"Sat, 03 Oct 2026 22:02:43 GMT"},"fingerprint":{"sha1":"26:AE:DD:7D:8B:4B:F2:D8:9E:E0:7E:00:A4:9F:9F:49:B9:09:4E:01","sha256":"18:C9:98:2A:11:9A:B1:54:92:84:65:D4:74:66:68:23:00:AB:4C:95:6C:A5:34:2A:A5:62:11:6A:BD:CC:9C:4B"}}},"request":{"raw":"GET /assets/blog/blog_20260521205825_fef820714fc6.webp HTTP/1.1\r\nHost: helphumanfirst.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://helphumanfirst.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=820c2682209409f0052a8176a9542771\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 19:09:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16652\r\nlast-modified: Sun, 05 Jul 2026 09:30:00 GMT\r\nvary: Accept-Encoding\r\netag: \"6a4a2418-410c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16652,"size_decoded":17038,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 724x483, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c287dd39d04fe7025c052f8177ea6c45","sha1":"ecbc746db82de7270dec34f55b70fc402a62abe0","sha256":"95a0d2619e9d588f95648864af571d88f817c67f7fe6e2433aef9152a2081662","sha512":"56ed438b193abf7f77243f4410738fd884cc090b1e41bbc5af25231a0f1d7494f2861287f00b171771afcbc4831264f9693e985ae95cd47766bdc14ab732d227","ssdeep":"384:P6hN/HLFJ/yrXdq1n1zXR3F7mA6511Qvr0WZu8VYC:ybJJ/yb6FCA65PQvIWM8x","tlshash":"8272d067425750feff30b3952b8c8b266183b228c3084215103d9f26a93c69dd177e7e","first_seen":"2026-07-10T09:58:05.407306Z","last_seen":"2026-07-12T19:10:10.036741Z","times_seen":2,"resource_available":false,"data":null}},"time_used":890,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":562,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"helphumanfirst.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/assets/img/dondoo-brasil-logo.png","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.804Z","timestamp":1783883364804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.helphumanfirst.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 22:02:44 GMT","end":"Sat, 03 Oct 2026 22:02:43 GMT"},"fingerprint":{"sha1":"26:AE:DD:7D:8B:4B:F2:D8:9E:E0:7E:00:A4:9F:9F:49:B9:09:4E:01","sha256":"18:C9:98:2A:11:9A:B1:54:92:84:65:D4:74:66:68:23:00:AB:4C:95:6C:A5:34:2A:A5:62:11:6A:BD:CC:9C:4B"}}},"request":{"raw":"GET /assets/img/dondoo-brasil-logo.png HTTP/1.1\r\nHost: helphumanfirst.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://helphumanfirst.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=820c2682209409f0052a8176a9542771\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 19:09:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2026 09:30:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4a2418-b6cc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46796,"size_decoded":45567,"mime_type":"image/png","magic":"PNG image data, 1508 x 513, 8-bit/color RGBA, non-interlaced","md5":"4a939b0559620d4b204fc6e5070a44b9","sha1":"f3843597cf67f78f42405db9036e03e9205165d1","sha256":"32d49595d31dec62103d428dbc06d2b0e5eb985927d10cb9053ba2506bc1d198","sha512":"ce55fd5384683c1ec0b45f11939388c0123fa9f1fd185b66a36274deae5b86a7c8db1ce21645a30342b27300c1db402e9390d59035b504b20ff1bac7d0e5a31a","ssdeep":"768:Eeg9jAzy5S0OtlpdRm6dbclSoWtY2MX5Tf/xdu7tQa8mYt0S/yFZ51FGaVG:Ee8jAzoVEnm6duSoL1/xitQaYcr1F1I","tlshash":"0f23d1ef6864a61bdd85ad33eda3cb81e19b7d20d6274d87b8a01c38c562c179c42f5c","first_seen":"2026-07-10T09:58:05.359436Z","last_seen":"2026-07-12T19:10:10.037588Z","times_seen":2,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"helphumanfirst.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/assets/img/banner-doacao-black-and-white.png","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.981Z","timestamp":1783883364981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.helphumanfirst.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 22:02:44 GMT","end":"Sat, 03 Oct 2026 22:02:43 GMT"},"fingerprint":{"sha1":"26:AE:DD:7D:8B:4B:F2:D8:9E:E0:7E:00:A4:9F:9F:49:B9:09:4E:01","sha256":"18:C9:98:2A:11:9A:B1:54:92:84:65:D4:74:66:68:23:00:AB:4C:95:6C:A5:34:2A:A5:62:11:6A:BD:CC:9C:4B"}}},"request":{"raw":"GET /assets/img/banner-doacao-black-and-white.png HTTP/1.1\r\nHost: helphumanfirst.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://helphumanfirst.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=820c2682209409f0052a8176a9542771\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 19:09:25 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2026 09:30:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4a2418-770220\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7799328,"size_decoded":7799816,"mime_type":"image/png","magic":"PNG image data, 5472 x 3648, 8-bit/color RGB, non-interlaced","md5":"1bed0245aa92ab4b2b5f722214d7ca9f","sha1":"312a9d201ede16c326769508ab472dc187acaed0","sha256":"1999df9cf9b23a97520220002f97a66fbc9d6adf6d78fc181720a7a579ced9a6","sha512":"e314b495bbc00d53527207b9e8531af45627827b7d625a102a9ab46ac056c89b6ce84adf1d176b5bd8f991689865a71acff4a86fa38df28b1035c18ee2cdcd52","ssdeep":"24576:lfbN8wuQd43iT06gCE2ZuoxiSNxB4INLZ1R7rPi4YI+1FcU:ly0Xgh7oxX7NntrPze1OU","tlshash":"9c2533cad5612ec693b0213465bf700db7906d723484ea37df0f8a325818ed524abeb7","first_seen":"2026-07-10T09:58:05.366079Z","last_seen":"2026-07-12T19:10:10.038395Z","times_seen":2,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"helphumanfirst.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/assets/campaign_photos/7/984920e955fc75d56d10d49c9e564ca5.png","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.794Z","timestamp":1783883364794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.helphumanfirst.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 22:02:44 GMT","end":"Sat, 03 Oct 2026 22:02:43 GMT"},"fingerprint":{"sha1":"26:AE:DD:7D:8B:4B:F2:D8:9E:E0:7E:00:A4:9F:9F:49:B9:09:4E:01","sha256":"18:C9:98:2A:11:9A:B1:54:92:84:65:D4:74:66:68:23:00:AB:4C:95:6C:A5:34:2A:A5:62:11:6A:BD:CC:9C:4B"}}},"request":{"raw":"GET /assets/campaign_photos/7/984920e955fc75d56d10d49c9e564ca5.png HTTP/1.1\r\nHost: helphumanfirst.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://helphumanfirst.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=820c2682209409f0052a8176a9542771\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 19:09:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2026 09:29:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4a2416-22adbb\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2272699,"size_decoded":2273088,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"f5444d8817ec6d8659e6f9de0530c7a7","sha1":"bb7d255e51fa41e2535f5679236dc25721b8d623","sha256":"dbabbb06f29662502d92b7d22b562b1e7bfeefb998ebdedbb8c5693ea4599bb1","sha512":"46454e56861941e0c1395568013cc22173746b1575028f2b99b62d02ed2430bf4eb549a2204f1739930bae81c5880542e287b7fcf96ecd0d0e9a698bf031cb0b","ssdeep":"24576:abCHB7KYE0zumFJtao2CV7DnEfdh2w6K2TykgRHafTFRNKg3Q8juY/:kCNPEKuwtT7L6kgRHafJRcc1l/","tlshash":"73253380731596576b141e272d7c2fd80bc1ed23ff52a774a26de3808e7b2632da1e91","first_seen":"2026-07-10T09:58:05.350478Z","last_seen":"2026-07-12T19:10:10.039365Z","times_seen":2,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"helphumanfirst.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/signals/config/1778709066458844?v=2.9.349\u0026r=stable\u0026domain=helphumanfirst.org\u0026hme=f29d86973612db0f0627890a64bdc8c47b471189050b33f2680b7d76997afc9a\u0026ex_m=107%2C208%2C158%2C22%2C73%2C74%2C149%2C69%2C68%2C11%2C167%2C93%2C16%2C141%2C130%2C39%2C76%2C81%2C137%2C163%2C169%2C8%2C4%2C5%2C7%2C6%2C3%2C94%2C104%2C170%2C175%2C222%2C30%2C75%2C234%2C233%2C232%2C23%2C33%2C55%2C106%2C61%2C10%2C64%2C100%2C101%2C102%2C108%2C133%2C31%2C29%2C135%2C136%2C132%2C131%2C159%2C77%2C162%2C160%2C161%2C50%2C60%2C126%2C15%2C166%2C45%2C279%2C280%2C278%2C26%2C27%2C28%2C48%2C150%2C78%2C115%2C18%2C20%2C44%2C40%2C42%2C41%2C86%2C95%2C99%2C113%2C148%2C151%2C46%2C114%2C24%2C21%2C122%2C70%2C36%2C153%2C152%2C154%2C145%2C143%2C25%2C35%2C59%2C112%2C165%2C71%2C17%2C156%2C117%2C84%2C67%2C19%2C88%2C89%2C119%2C87%2C139%2C138%2C142%2C164%2C34%2C293%2C309%2C215%2C204%2C62%2C205%2C203%2C312%2C303%2C52%2C216%2C110%2C134%2C83%2C124%2C54%2C47%2C49%2C116%2C123%2C129%2C128%2C58%2C65%2C63%2C155%2C79%2C80%2C118%2C37%2C32%2C53%2C56%2C103%2C168%2C1%2C127%2C14%2C125%2C12%2C2%2C57%2C96%2C66%2C121%2C92%2C91%2C171%2C172%2C97%2C98%2C9%2C105%2C51%2C146%2C90%2C82%2C72%2C120%2C109%2C43%2C147%2C0%2C85%2C140%2C144%2C157%2C38%2C111%2C13%2C173","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:25.196Z","timestamp":1783883365196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.facebook.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Apr 2026 00:00:00 GMT","end":"Mon, 20 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5A:C4:B3:53:17:8F:6C:92:13:21:06:10:3B:3B:A8:08:33:97:00:65","sha256":"AD:39:63:BB:0E:1F:D6:E2:9B:B0:3A:86:C0:27:C8:77:8B:42:5C:81:5E:D1:37:85:40:A6:63:4D:AC:10:85:98"}}},"request":{"raw":"GET /signals/config/1778709066458844?v=2.9.349\u0026r=stable\u0026domain=helphumanfirst.org\u0026hme=f29d86973612db0f0627890a64bdc8c47b471189050b33f2680b7d76997afc9a\u0026ex_m=107%2C208%2C158%2C22%2C73%2C74%2C149%2C69%2C68%2C11%2C167%2C93%2C16%2C141%2C130%2C39%2C76%2C81%2C137%2C163%2C169%2C8%2C4%2C5%2C7%2C6%2C3%2C94%2C104%2C170%2C175%2C222%2C30%2C75%2C234%2C233%2C232%2C23%2C33%2C55%2C106%2C61%2C10%2C64%2C100%2C101%2C102%2C108%2C133%2C31%2C29%2C135%2C136%2C132%2C131%2C159%2C77%2C162%2C160%2C161%2C50%2C60%2C126%2C15%2C166%2C45%2C279%2C280%2C278%2C26%2C27%2C28%2C48%2C150%2C78%2C115%2C18%2C20%2C44%2C40%2C42%2C41%2C86%2C95%2C99%2C113%2C148%2C151%2C46%2C114%2C24%2C21%2C122%2C70%2C36%2C153%2C152%2C154%2C145%2C143%2C25%2C35%2C59%2C112%2C165%2C71%2C17%2C156%2C117%2C84%2C67%2C19%2C88%2C89%2C119%2C87%2C139%2C138%2C142%2C164%2C34%2C293%2C309%2C215%2C204%2C62%2C205%2C203%2C312%2C303%2C52%2C216%2C110%2C134%2C83%2C124%2C54%2C47%2C49%2C116%2C123%2C129%2C128%2C58%2C65%2C63%2C155%2C79%2C80%2C118%2C37%2C32%2C53%2C56%2C103%2C168%2C1%2C127%2C14%2C125%2C12%2C2%2C57%2C96%2C66%2C121%2C92%2C91%2C171%2C172%2C97%2C98%2C9%2C105%2C51%2C146%2C90%2C82%2C72%2C120%2C109%2C43%2C147%2C0%2C85%2C140%2C144%2C157%2C38%2C111%2C13%2C173 HTTP/1.1\r\nHost: connect.facebook.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: application/x-javascript; charset=utf-8\r\ntiming-allow-origin: *\r\nreporting-endpoints: coop_report=\"https://www.facebook.com/browser_reporting/coop/?minimize=0\", coep_report=\"https://www.facebook.com/browser_reporting/coep/?minimize=0\", permissions_policy=\"https://www.facebook.com/ajax/browser_error_reports/\"\r\nreport-to: {\"max_age\":2592000,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coop\\/?minimize=0\"}],\"group\":\"coop_report\",\"include_subdomains\":true}, {\"max_age\":86400,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/browser_reporting\\/coep\\/?minimize=0\"}],\"group\":\"coep_report\"}, {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ncontent-security-policy: default-src *.facebook.com *.fbcdn.net *.facebook.net 'self' blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net blob: 'self' 'nonce-rBlnAVGh';style-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob: 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com *.cdninstagram.com blob: 'self' data: https://edge-chat.facebook.net https://edge-chat-latest.facebook.net wss://edge-chat-latest.facebook.net wss://edge-chat.facebook.net wss://edge-chat.socialplugin.facebook.net wss://edge-chat-latest.socialplugin.facebook.net https://edge-chat.socialplugin.facebook.net https://edge-chat-latest.socialplugin.facebook.net;font-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;img-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;media-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;child-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;frame-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;manifest-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;object-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;worker-src *.facebook.com *.fbcdn.net *.facebook.net 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c\u0026minimize=0;\r\nx-frame-options: DENY\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy-report-only: require-corp;report-to=\"coep_report\"\r\ncross-origin-opener-policy: same-origin-allow-popups\r\npragma: public\r\ncache-control: public, max-age=1200\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\norigin-agent-cluster: ?1\r\nstrict-transport-security: max-age=31536000; preload; includeSubDomains\r\nx-fb-debug: 2/UNlyZndBXErYiX6qoHmJXcVi23GEX6ruURZ7cmQls62aN2DAG32SxW7J9mLwfWvPGpyF5rdYmsFAk0knJa/A==\r\ndate: Sun, 12 Jul 2026 19:09:25 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=9, rtx=0, c=79, mss=1232, tbw=111296, tp=98, tpl=0, uplat=212, ullat=0\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":246440,"size_decoded":63430,"mime_type":"application/x-javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6540)","md5":"e8c1cabd6c0fb69d1defd7785379ae4c","sha1":"5040eaba742fde740d1b64cfe34618d9c9e30f37","sha256":"884e5ee131d0583ec2b2dac11f4ceb10c3b7524df975f0de36fee35518dd62a2","sha512":"5658782e24b413daff1af582e7cea24e7927d883bfe4be2ce3c722e2428ca3b853190477ef098a56f667d9b16d034ebdd8f88b9a6c0e944e1210996c80f2a353","ssdeep":"1536:JyfY7zmQO0XubF+C56IEuLnjyvsp8A1EQjW/qT8fPyjrbp8jOGZycaFNZg6hqjeR:sxQfZ/qT8yjdEtiNuA/rvY0LsUAM","tlshash":"723408c9b2e1b47247e67968be7f140bb1b5945234d8c820ea1cdcc53ab915a4133fbb","first_seen":"2026-07-12T19:10:10.040259Z","last_seen":"2026-07-12T19:10:10.040259Z","times_seen":1,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":221,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/assets/img/favicon.png","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:26.092Z","timestamp":1783883366092,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.helphumanfirst.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 22:02:44 GMT","end":"Sat, 03 Oct 2026 22:02:43 GMT"},"fingerprint":{"sha1":"26:AE:DD:7D:8B:4B:F2:D8:9E:E0:7E:00:A4:9F:9F:49:B9:09:4E:01","sha256":"18:C9:98:2A:11:9A:B1:54:92:84:65:D4:74:66:68:23:00:AB:4C:95:6C:A5:34:2A:A5:62:11:6A:BD:CC:9C:4B"}}},"request":{"raw":"GET /assets/img/favicon.png HTTP/1.1\r\nHost: helphumanfirst.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://helphumanfirst.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=820c2682209409f0052a8176a9542771; _fbp=fb.1.1783883365478.759783576838748551\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 19:09:26 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2026 09:30:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4a2418-3b21\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15137,"size_decoded":14495,"mime_type":"image/png","magic":"PNG image data, 334 x 329, 8-bit/color RGBA, non-interlaced","md5":"ce70ddbc551e0708aa719afbd268087e","sha1":"82ba08ec45d931ad01d356e6da7ec49e04d5e9a6","sha256":"df2bdee7ba827b76f0b1985e061ab9a4b9d2502d783656177ea397ec96c2a0ee","sha512":"298f184d59d27f6f77c90271f4adfb763657a8f0877325bcda5bfd10059a390a818e1f94d60cb066faeb56adccbb460ac4cf593ee972baf53c62d0b649962d30","ssdeep":"384:Vn4XPM2BuIlq7rloAuW4PL3/XA5jgUU+c5fs:VCU2BNQ7rzR4DPAWUU+ca","tlshash":"8162c0a8d203942980c45c56ee9e52cf933a9b8e40c97185fc9b4a6f28305dfd2e9dd1","first_seen":"2026-07-10T09:58:05.372445Z","last_seen":"2026-07-12T19:10:10.04119Z","times_seen":2,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"helphumanfirst.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T19:09:23.849Z","timestamp":1783883363849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.helphumanfirst.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 22:02:44 GMT","end":"Sat, 03 Oct 2026 22:02:43 GMT"},"fingerprint":{"sha1":"26:AE:DD:7D:8B:4B:F2:D8:9E:E0:7E:00:A4:9F:9F:49:B9:09:4E:01","sha256":"18:C9:98:2A:11:9A:B1:54:92:84:65:D4:74:66:68:23:00:AB:4C:95:6C:A5:34:2A:A5:62:11:6A:BD:CC:9C:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: helphumanfirst.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 19:09:24 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nset-cookie: PHPSESSID=820c2682209409f0052a8176a9542771; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-permitted-cross-domain-policies: master-only\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":145173,"size_decoded":27375,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (694)","md5":"62ea2d1a0585451578e3adf682f1e7d9","sha1":"74367865ed936476533fcf542a73a3abe6667334","sha256":"871c957e500a5c40810c83a27bf7272d84e91e62c423b47c2e024dcd038d981d","sha512":"e75e8cf6c88deb19856c9d204dac18310cbbb4e52d99dcfc678b616d9690df6bac6182b608541629bf7389f77386a434b70c799f2fe98aad9567a411fe1ffdfd","ssdeep":"1536:BT65gobJZuDGuqDkm37SZb/zCDRywRbSDkjlZ8zAXp8kjxrOOMTcPsdUvKn7LZV9:9sb6WpPbSQczAXp8cxr7gGACo","tlshash":"0fe3e7e652f52238206780e56ba7279a37a9c053e04bc554b7fd47688fc2ec6f87364c","first_seen":"2026-07-12T19:10:10.042417Z","last_seen":"2026-07-12T19:10:10.042417Z","times_seen":1,"resource_available":true,"data":null}},"time_used":632,"timings":{"blocked":-1,"dns":57,"connect":111,"send":0,"wait":227,"receive":0,"ssl":236},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"helphumanfirst.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/assets/img/logo-dondoo2.png","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.790Z","timestamp":1783883364790,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.helphumanfirst.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 22:02:44 GMT","end":"Sat, 03 Oct 2026 22:02:43 GMT"},"fingerprint":{"sha1":"26:AE:DD:7D:8B:4B:F2:D8:9E:E0:7E:00:A4:9F:9F:49:B9:09:4E:01","sha256":"18:C9:98:2A:11:9A:B1:54:92:84:65:D4:74:66:68:23:00:AB:4C:95:6C:A5:34:2A:A5:62:11:6A:BD:CC:9C:4B"}}},"request":{"raw":"GET /assets/img/logo-dondoo2.png HTTP/1.1\r\nHost: helphumanfirst.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://helphumanfirst.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=820c2682209409f0052a8176a9542771\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 19:09:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2026 09:30:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4a2418-9f2e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40750,"size_decoded":38989,"mime_type":"image/png","magic":"PNG image data, 1582 x 354, 8-bit/color RGBA, non-interlaced","md5":"4a55ecdf7ae4951408de2e7a124ee5f1","sha1":"11cfce840289fc43ed24cade216251e55ab2f3f0","sha256":"b161ec0f822535e07583963ae373dd86e44b8bf9bf149cb7b4aad54b93c3fc4a","sha512":"a11670fb17a06df42a59c45ae2d7bfdab52610ac2cc75c4696fbbcd94cb9f87961eaff2f04d584948914db760eac0966025eab03de1f91d15867c72e336b824d","ssdeep":"768:cNjvtiedDnsB3GOkOiti4Mo3Rq42qKWg9lJqF49Yn:cNjtieCETxB2NWgHs4Gn","tlshash":"da03e15cf4902e48d748e8fef8c9ce95726315d1c683292758e6cc3638a23685f9dd92","first_seen":"2026-07-10T09:58:05.347022Z","last_seen":"2026-07-12T19:10:10.04348Z","times_seen":2,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"helphumanfirst.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/assets/blog/blog_20260521210227_06fa20cbe6c5.jpg","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.798Z","timestamp":1783883364798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.helphumanfirst.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 22:02:44 GMT","end":"Sat, 03 Oct 2026 22:02:43 GMT"},"fingerprint":{"sha1":"26:AE:DD:7D:8B:4B:F2:D8:9E:E0:7E:00:A4:9F:9F:49:B9:09:4E:01","sha256":"18:C9:98:2A:11:9A:B1:54:92:84:65:D4:74:66:68:23:00:AB:4C:95:6C:A5:34:2A:A5:62:11:6A:BD:CC:9C:4B"}}},"request":{"raw":"GET /assets/blog/blog_20260521210227_06fa20cbe6c5.jpg HTTP/1.1\r\nHost: helphumanfirst.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://helphumanfirst.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=820c2682209409f0052a8176a9542771\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 19:09:24 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 05 Jul 2026 09:30:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4a2418-29e85\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171653,"size_decoded":171220,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1280x853, components 3","md5":"27c406494b8fe685baeb97e78fca6d0a","sha1":"12d81501d4d25182a6990519fe076373c87e71cf","sha256":"10cb8a739684d4c49afe26f2b3aae1ed24caf84be688821a36f260161c25a738","sha512":"0b5be8c0db394f1027e20e60f11361101e0d71dba4292502120e8bced325ae9b0bfb0e347ef2f31b9fe7da9b3d0b0879a28988cf60412ba84e7635f0deb50300","ssdeep":"3072:AECPR7YQNcH9fvZX9pZTCXqw7yvSfW52KwhkdVjPZbX7xi7cGpA:Rq7ex9pOqSOSfc2hhGVjPd87i","tlshash":"6ff323abb1cd8d99fe1bcb09c71610950fda29b60a76b7b1385322f350c53319d76864","first_seen":"2026-07-10T09:58:05.356686Z","last_seen":"2026-07-12T19:10:10.044437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"helphumanfirst.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"helphumanfirst.org/assets/img/mascote-na-cadeira-sentado-sem-fundo-recortado-virado2.png","fqdn":"helphumanfirst.org","domain":"helphumanfirst.org","tld":"org"},"ip":{"addr":"216.152.155.235","port":443,"asn":33154,"as":"DQECOM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://helphumanfirst.org/","date":"2026-07-12T19:09:24.803Z","timestamp":1783883364803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.helphumanfirst.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 22:02:44 GMT","end":"Sat, 03 Oct 2026 22:02:43 GMT"},"fingerprint":{"sha1":"26:AE:DD:7D:8B:4B:F2:D8:9E:E0:7E:00:A4:9F:9F:49:B9:09:4E:01","sha256":"18:C9:98:2A:11:9A:B1:54:92:84:65:D4:74:66:68:23:00:AB:4C:95:6C:A5:34:2A:A5:62:11:6A:BD:CC:9C:4B"}}},"request":{"raw":"GET /assets/img/mascote-na-cadeira-sentado-sem-fundo-recortado-virado2.png HTTP/1.1\r\nHost: helphumanfirst.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://helphumanfirst.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=820c2682209409f0052a8176a9542771\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 12 Jul 2026 19:09:24 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 05 Jul 2026 09:30:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4a2418-105c27\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1072167,"size_decoded":1072550,"mime_type":"image/png","magic":"PNG image data, 852 x 825, 8-bit/color RGBA, non-interlaced","md5":"60797938b6bf0e41803526b6b746960b","sha1":"ef997e090b6a1de036bd81b0537dc08724c0e288","sha256":"efb04b1a38c84ce022facefb455447e48a4fbee9a2bdfb25a00a0b257436b3e8","sha512":"3679419902f1dbfc8094ed671672f34479891e81aabf67149d88f4d8e2f09f32b49c8de97a42a982f4c8754346668a0cfa62b38076731bb0aa74a75977a5c9f5","ssdeep":"24576:2iv+/zKFiRK5PEkAodClYnYNOAAXFdGLFqog7A1u7iVP/f/Z:2covRKlooHnLFdGLQZiVPn/Z","tlshash":"c425339d4193771606098256689fb3d15ec227f848ff69f72a4c023b913a4cee375af8","first_seen":"2026-07-12T19:10:10.045483Z","last_seen":"2026-07-12T19:10:10.045483Z","times_seen":1,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"helphumanfirst.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}