{"report_id":"c9db80d9-93f8-45b4-bf4b-597d9b04239b","version":6,"status":"done","tags":[],"date":"2026-05-29T11:12:06Z","url":{"schema":"http","addr":"hmsfuar.com","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":0,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"https","addr":"hmsfuar.com/","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"title":"Claim Your $PENGU | Pudgy Penguins","dom":{"size":1227,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1226), with no line terminators","md5":"fa7272dd457113cd148a65c7265aaa69","sha1":"a307f36e09758be5cd692a88b06d238375b2fd79","sha256":"ce13a0191c9254b9a4474b02d74cfd8c2c744da1dacc5193b9c0452df8ecd976","sha512":"881beef949c54d345133c497d3181d28a93d74949546dd3737de999d7493be1172c7e3d980061d0317b57172b7fb9b4868dae9694a7bdf121079af215d651f81","ssdeep":"","tlshash":"1d2184f2a8119c1d201b97d9dccaa04ea943fe1dd74068c8bdc9885e9ef293c558588c","dom_hash":"domhasha7ce9831867c09b28197a3aa472cade4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hmsfuar.com","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":0,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-03T11:12:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-29T11:11:45Z","timestamp":1780053105,"ip_dst":{"addr":"54.216.216.4","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"Client IP","port":49904,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)","source":"{\"timestamp\":\"2026-05-29T11:11:45.491125+0000\",\"flow_id\":1727242379033678,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":49904,\"dest_ip\":\"54.216.216.4\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058796,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed2.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":789,\"bytes_toclient\":1654,\"start\":\"2026-05-29T11:11:45.425038+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-29T11:11:45Z","timestamp":1780053105,"ip_dst":{"addr":"54.216.216.4","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"Client IP","port":49910,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)","source":"{\"timestamp\":\"2026-05-29T11:11:45.496992+0000\",\"flow_id\":1094617318653153,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.20\",\"src_port\":49910,\"dest_ip\":\"54.216.216.4\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058796,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed2 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed2.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":928,\"bytes_toclient\":3168,\"start\":\"2026-05-29T11:11:45.425185+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"claim.pudgypenguins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hmsfuar.com","ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"domain_registered":"2021-06-14","domain_rank":0,"first_seen":"2026-05-29T11:00:38.784243Z","last_seen":"2026-05-29T11:00:38.784243Z","alert_count":60,"request_count":30,"received_data":2846820,"sent_data":14002,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"zenzozo.xyz","ip":{"addr":"172.67.181.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-12","domain_rank":0,"first_seen":"2026-05-23T13:14:29.60679Z","last_seen":"2026-05-23T13:14:29.60679Z","alert_count":0,"request_count":6,"received_data":2445425,"sent_data":3028,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"claim.pudgypenguins.com","ip":{"addr":"104.20.38.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-05-23","domain_rank":0,"first_seen":"2024-12-17T14:16:48Z","last_seen":"2026-05-29T11:00:39.608598Z","alert_count":1,"request_count":1,"received_data":19613,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bsc-dataseed2.bnbchain.org","ip":{"addr":"54.216.216.4","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":4924478,"first_seen":"2023-11-12T11:28:58Z","last_seen":"2026-05-23T13:14:31.396944Z","alert_count":0,"request_count":2,"received_data":1299,"sent_data":1013,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hmsfuar.com/2b633991b9.js","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddd7160f8388b22373735ae9f583e6f1","sha1":"9a48c68620dca8bd27438239e5d1d5ab4bada218","sha256":"2eead2438e500a19004ac42925af81a80b460d810b8056ad6b8c7acc1df99c5c","sha512":"5331ae9c22694d36f982a48e509157a402ee17562da57208d6482328597588f0a55d8b3d77cdbd510daa9724a0c029fdff1fc7a907d0e2ae2e15263e3ac56d6f","ssdeep":"","tlshash":"f921cddbba52b4402785b7b6986f740d9767bd0adcda4428d4005ac23dbeb2fd0125a8","size":1416,"data":"","first_seen":"2026-05-29T11:00:45.953306Z","last_seen":"2026-05-29T11:12:09.978149Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"Function","is_inline":false,"md5":"170872ea6554d7bf02a6f17524d30e17","sha1":"3f3c62dfe73cf8a741f1cb20e2058b33e4e00f93","sha256":"4f3b8fc65a816c58c88841ab719ce0117d417b49bd52091bdc5577cbc6c4a804","sha512":"6d2909c93d37a7122a00cd8a980b1ed2aea315e6c4a1fa93767d52e930383e40ff5503ff2eab23d45659847909cc0b3e24e9bf5256fff311593a66c9a9f42d8d","ssdeep":"1536:+NGUsgjfK5Q/kKkyhPwNx4hqtdcYDECHkXs1FI412NT:+NGUsgjfK5Q/kKhxwN7XHkEI412N","tlshash":"f9040ce5db97d4ec8e2501ded473f805e1541823ceacb593ea2eddc27129f2680871ba","size":189181,"data":"","first_seen":"2026-05-29T11:00:46.061144Z","last_seen":"2026-05-29T11:12:09.991287Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/semantic-table-5.8.3.min.js","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f57a43ae96fb1eb682ffffe6158b5d29","sha1":"40d5c9816866d63558f35afef30c8615d4779e8e","sha256":"71716777a1563f5b8e115c2b93726ba7267fada703fde121d5f44f65e05984f2","sha512":"0a6da72437854186130117b6e4ef7c4e349c1b0bf2169f4445bd210edac9367c4c1696d704ab93d1d7a949f6c97f2428defe84d2127b3c982e1e8b94976577bf","ssdeep":"1536:JNrjzmEpuCseB5vMb4VqzbgoQNZqf/URwZNcAHjzol4l2E9D7L7V/zUMdmYeOZ:brjQCs+vM8VqvGqfRDzOqB9FlZ","tlshash":"9134dcd5595694e9be1601ddcc72ed04e0184c23beacf193a6eefdc1702af25805b3ba","size":232703,"data":"","first_seen":"2026-05-29T11:00:45.950051Z","last_seen":"2026-05-29T11:12:09.973782Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8bf2a4e00cb084527923df6452b904e","sha1":"f5b21050ebbb9a86fa7a2d3928d62c6800bed2d6","sha256":"b7b0b908e400f3f4e6b15d21bfc9073a6de3263ecfa91938270cf9f9a8b0a57e","sha512":"054515c3d7bc84d93458a5b6485f783d181423ebcf079ba38939563ab2178ae3c9e9966e880700f3680b608b9ce856262566b5e4ab09e8df5ebc41aa6bee679c","ssdeep":"","tlshash":"ab71ab3aeb00173bdc8fe9fdcfd5b8c42d62497262596920691ce102a16cd7487bed88","size":3634,"data":"","first_seen":"2024-12-01T16:48:11.835861Z","last_seen":"2026-06-09T02:28:11.045541Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"introduction_type":"eval","is_inline":false,"md5":"8e03bbbaca4f020a19633f508cb0df9e","sha1":"2870fff08d0bd3402a2377e7404617d6a0af0ab1","sha256":"85fbffd7f6321e59101335cc078f921fc52de34bf3136e91bb66d37ff8ad9d19","sha512":"234f9aaaf1c97da38a63b1f53d6083f3a7f0294787d4d35162da6bb7d62065ee6ecfda9d003edaf0f8247fccfdfed5716fa4394cc3660f89caf5b077b20608e6","ssdeep":"192:IDjbb3GEFI+WM9b3/hzwXi71DuRx+SplDxJjDDEY:0Id4b3/hzwXOu+2lDXDEY","tlshash":"f2e15b137497b10e01c547bf3a1863e5e06ac909da8ac04af748dee8b4ded937a4d6f0","size":7072,"data":"","first_seen":"2026-05-29T11:12:09.992775Z","last_seen":"2026-05-29T11:12:09.992775Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hmsfuar.com/blue.mp4","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:46.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /blue.mp4 HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nDate: Fri, 29 May 2026 11:11:46 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"6fe0a-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 458250\r\nX-Powered-By: PleskLin\r\nContent-Range: bytes 0-458249/458250\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: video/mp4\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":458250,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"caba320a1d41b11529caeab98906cc5b","sha1":"8a3005cbc789dd6ca812e18be73f5cda5ebc9348","sha256":"d04c55d92bebb5842bb8cc7e03fbb64b840e59925ffeb853db193bf6724d78a1","sha512":"dcf103aa3cadd9c38b0f6db2e8b95f54086072f382a76b31c306f4496e307de1f4f2147de89ff336406489abde52c9a0054f2c82ca9910cf9f9cd28e312fa4fe","ssdeep":"12288:BqUU7oVLP2Ws+eR/7mnNRcYm2fJgBXsu+LP:BqUU7aLPBeB2Rkq2su+LP","tlshash":"61a4232113639eb5c9fc0bf977e506aa7a3bb5b8652148b4f54809ac3a884b73d0d11f","first_seen":"2024-12-28T10:25:20.054284Z","last_seen":"2026-05-29T11:12:09.962464Z","times_seen":158,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":310,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/9680bc3c22b2c494.css","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:45.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /9680bc3c22b2c494.css HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"7f42-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 32578\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":32578,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4dcc4d42ed07a57b1fc70fb12cf6cc44","sha1":"be421b4e2faf981896bdb739063f9f160a8cbef9","sha256":"f25e6642c125c13efa8f748a4235b85470acde127b095a64213f63887048cd74","sha512":"b3f9181b3a183b779321a3ade29bd5bd7f9765ef87043bb8e35a7145cd6171fe3d3535a5b35de48f7215f6eadf65005910466d84a885b9f541e9f0158675a477","ssdeep":"384:M3KrgqunLPXS5SMS3iQOUMzxx2G/dej0PUx3a/Bl9X6XuXnXLXyXjMWEuaCwPZjd:7NlHMHyKABZGqZRX","tlshash":"66e273214a012055e633df78abe74b58fa5c48235e070675bbcd234a4ff6278a3a5f8d","first_seen":"2025-07-04T00:42:00.43065Z","last_seen":"2026-05-29T11:12:09.963051Z","times_seen":96,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":221,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zenzozo.xyz/x7k/gf","fqdn":"zenzozo.xyz","domain":"zenzozo.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:46.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenzozo.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:46:55 GMT","end":"Sat, 11 Jul 2026 03:45:35 GMT"},"fingerprint":{"sha1":"DF:31:71:EA:0B:D5:3D:75:23:B7:BD:25:EE:B9:21:4E:2F:9D:A8:28","sha256":"28:48:D9:33:7A:B9:A6:F3:28:C6:C6:E9:67:6C:56:60:D5:F1:22:07:96:B0:5C:94:0F:13:C3:23:1B:FF:58:59"}}},"request":{"raw":"POST /x7k/gf HTTP/1.1\r\nHost: zenzozo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hmsfuar.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://hmsfuar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"d4iWPMVWv90hkGiIxSbB\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 11:11:46 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iutN3Uju9NHpt2wG3lhoFI%2F3RdxXDenen61ryTUFbkeTAqM63kbjGaTv0CyPp6uGxo%2FRNyLlKyvw0Ojb5Cmn66ylEtMQRfXkXqqjalWv27Tues2D%2BewN6%2F22xukRYA%3D%3D\"}]}\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a0350f6c4f0c5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2433966,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25762), with no line terminators","md5":"28d9409cf54c318b507453612075cded","sha1":"e1f4095d541cc321dd10bdb507c4c28a1c66e2b9","sha256":"8fd7830445aa66b883ecb02f7e65c85dfd7d9364a27f18afdb8f4e6428cba541","sha512":"aa321d36bfb57af4363a6a6e09cfacd8cfd358ab8e0c14e03b74c9a6da58b96ca147e644bfed81bbafc5bc2475dc625fda1fc0afd96a926160c946efb794244a","ssdeep":"24576:IZ2foOEeTA2URQ0ihexVKrHHjY2Wt5fe4PQlSR1XyreafVGNSpJoh6wkVBo/iqZ1:I8AlR5AwKLWh0PTYkUpZrBGRZl9I","tlshash":"87a5635a8673f3a49ec876e43c1162d4b9b953dfc6cda32d0b6bcce029c583c259a4d1","first_seen":"2026-05-29T11:12:09.964106Z","last_seen":"2026-05-29T11:12:09.964106Z","times_seen":1,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":139,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/secureproxy.php?e=jscdn/getFile","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:46.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"POST /secureproxy.php?e=jscdn/getFile HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hmsfuar.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://hmsfuar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"c8u4qgbs4gimsmcljs0t\"}"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 29 May 2026 11:11:46 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/7.4.33, PleskLin\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":16,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"4845f01eaa8068384625e302e9a4eb05","sha1":"fb6ff8293fa45e17ba97f84954e7d1d5b0d38f87","sha256":"8a482f2271a42c5f54c96e816a84340a6f2357a5b81f927d07d00788f5140a41","sha512":"bb58f2438524b518b19f2b74c5d598460735958f77c310ba3710520d1d88ce7975449977c9965dbca87cd6a824c8ab82e56bea6d571d79594079f0a0ea404d77","ssdeep":"","tlshash":"4160000c03030f0c00c0c03ccfc00030000c03000cc033f00000c00c000000c3cc00fc","first_seen":"2023-03-13T05:02:59Z","last_seen":"2026-06-13T10:21:47.369291Z","times_seen":11289,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/favicon.ico","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:46.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:46 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"86be-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 34494\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/vnd.microsoft.icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":34494,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel","md5":"cc84bbd877a9ba227ec8623a5626058d","sha1":"3d9a566db32aa7a1df998b906fd5db434ba1f2fd","sha256":"f6b6bb2765d371dda37b91e1eadf0b2829e7cc395624ea6b8474dcd07df62830","sha512":"37133c415c6201a898105dbb8cb03d574e8f33b5e4e3379218d824fbfab4e5bb87b72fbd44c87f0e5d088696ed56f28eb83f8c803367785d6a257559bca50389","ssdeep":"192:2UVJE8AswLBg0hiPu6TprqcnyZMxpWL7ozjqHln:2oERsBPu6TpJnyUALM6Hl","tlshash":"36f29ac749c17ed4f8583270522d08b811579f9b99dca43aa5bc3a63fdb3212942afc7","first_seen":"2024-12-18T05:35:34.272677Z","last_seen":"2026-05-29T11:12:09.966061Z","times_seen":156,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zenzozo.xyz/x7k/gc","fqdn":"zenzozo.xyz","domain":"zenzozo.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:45.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenzozo.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:46:55 GMT","end":"Sat, 11 Jul 2026 03:45:35 GMT"},"fingerprint":{"sha1":"DF:31:71:EA:0B:D5:3D:75:23:B7:BD:25:EE:B9:21:4E:2F:9D:A8:28","sha256":"28:48:D9:33:7A:B9:A6:F3:28:C6:C6:E9:67:6C:56:60:D5:F1:22:07:96:B0:5C:94:0F:13:C3:23:1B:FF:58:59"}}},"request":{"raw":"OPTIONS /x7k/gc HTTP/1.1\r\nHost: zenzozo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hmsfuar.com/\r\nOrigin: https://hmsfuar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 29 May 2026 11:11:46 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YocvIMChqfB8T1MZcBoe0fSuefaks%2BS7PM7Fykoj1jp8RT70m8xz24C%2FV4gRDC1Yh1D4KDwVB0wYqCqvkmfxiuisLBlFZkAavxyTDrQfybSNjSS5tzgzO7XbKJx1Kg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0350f686819c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T10:33:11.41944Z","times_seen":16384135,"resource_available":true,"data":null}},"time_used":709,"timings":{"blocked":303,"dns":91,"connect":1,"send":0,"wait":100,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/ethSolana.mp4","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:46.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /ethSolana.mp4 HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nDate: Fri, 29 May 2026 11:11:46 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"179cb-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 96715\r\nX-Powered-By: PleskLin\r\nContent-Range: bytes 0-96714/96715\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: video/mp4\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":96715,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"f191e78b35b7d70c845c701a201192c4","sha1":"3549cf362fadb3a9d10ad71da755b18cdb1c1555","sha256":"01e4ec0f3bae133ab756c2616d30e2c0c70afc2e1af1b6334d9549534a67dc5e","sha512":"21adce9c3b601a62e5e6e2fd3a195193d43f0c0e5976085a9e09f7afcb00e654fab367e50b821955905f91f1c322954fbb5ac50ad3276356cb3e5fbf05665bc4","ssdeep":"1536:w/yo/WFEbshmvjEaUAEuzvE5wMcJurBd10GE6H5WZz9ZW6pSWXogtB44jBqA7hkN:wKSDwxluQ5w5W10g4z9FSWtSaBqANk+K","tlshash":"95931292affcd1d0c42605b7e265bb1d7f605ca1a31f83d2d1a33910b4b6f550ac3a95","first_seen":"2024-12-28T10:25:20.051004Z","last_seen":"2026-05-29T11:12:09.967207Z","times_seen":157,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/ethSolana.mp4","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:46.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /ethSolana.mp4 HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nDate: Fri, 29 May 2026 11:11:46 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"179cb-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 96715\r\nX-Powered-By: PleskLin\r\nContent-Range: bytes 0-96714/96715\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nContent-Type: video/mp4\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":96715,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"f191e78b35b7d70c845c701a201192c4","sha1":"3549cf362fadb3a9d10ad71da755b18cdb1c1555","sha256":"01e4ec0f3bae133ab756c2616d30e2c0c70afc2e1af1b6334d9549534a67dc5e","sha512":"21adce9c3b601a62e5e6e2fd3a195193d43f0c0e5976085a9e09f7afcb00e654fab367e50b821955905f91f1c322954fbb5ac50ad3276356cb3e5fbf05665bc4","ssdeep":"1536:w/yo/WFEbshmvjEaUAEuzvE5wMcJurBd10GE6H5WZz9ZW6pSWXogtB44jBqA7hkN:wKSDwxluQ5w5W10g4z9FSWtSaBqANk+K","tlshash":"95931292affcd1d0c42605b7e265bb1d7f605ca1a31f83d2d1a33910b4b6f550ac3a95","first_seen":"2024-12-28T10:25:20.051004Z","last_seen":"2026-05-29T11:12:09.967207Z","times_seen":157,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/8393ee9793b05532-s.p.woff2","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:45.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /8393ee9793b05532-s.p.woff2 HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hmsfuar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"50c4-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 20676\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":20676,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20676, version 1.0","md5":"1f4afd89337fa7da3b15cb7b5e1c4109","sha1":"9dc5d1382c6609b410ba1a4264c566700a0a6150","sha256":"6617feddfedca9f981b2b79ae8fea2e51f8232ac59ed4f1be7f730520f9291cb","sha512":"a54f0b4c05f825ffadb550498e507525210d6ae89cfa9fddc419c60f6132677e44e30b99b66d7bf2b60d99b496f78baedf57e2d205ab50aa462de50653bd125f","ssdeep":"384:PqTtkTmzHRqq9fxoqyXLOLnzzMkgipH+86p2o7z7kgMnqp61pRV8UEdpH/O:PMtlkq9faUbzhgitT87BMbpRVvuHm","tlshash":"fc92d0b69d6785b0e7e181bc502c98618286d4ff258cf2b59c62bd4c40f4ae4391e6e2","first_seen":"2023-11-25T16:51:58Z","last_seen":"2026-05-29T11:12:09.968189Z","times_seen":147,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":212,"dns":1,"connect":73,"send":0,"wait":74,"receive":74,"ssl":153},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/15e962c9c86fca1e.css","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:45.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /15e962c9c86fca1e.css HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"108b-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 4235\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4235,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1332fc2aeddc65c889363184f9841f0a","sha1":"7fa912441bb0d8ee22a9a79975b94768d40ed4bc","sha256":"143e5f97f7e60eb95af59d80065922e7adcf91e0bf99d98e182f1a2a0dcfbfdd","sha512":"13c42d5219fa1b3e3382e4b5d1acc3ab8fac67522fdec638c13e9bf5d79c28c0782a1684e02117a4ed91668f4d01f4e421a1678aed92cb38f6f5e6b71553b3a5","ssdeep":"96:+lYZwcFoQDDSXJ3uwvXa5yu4Im8g2momq695u:BWufSXJ3uwvXa5B4Ihg2XP6vu","tlshash":"eb91ff64080f50159a332b7bb397071eed2fa477ad562a613ad811498fb267c53d0fbc","first_seen":"2025-07-04T00:42:00.435947Z","last_seen":"2026-05-29T11:12:09.968915Z","times_seen":95,"resource_available":false,"data":null}},"time_used":534,"timings":{"blocked":220,"dns":1,"connect":75,"send":0,"wait":74,"receive":0,"ssl":158},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/f7d7f92d7c0c9d0b.css","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:45.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /f7d7f92d7c0c9d0b.css HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"1c7e-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 7294\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7294,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"76a262c806d5804d5e0da247da59dd1e","sha1":"238e91861f335d0ba525243789ba3d19af498d08","sha256":"64268095718e0edcb4427ca74cd141d5f7150f5707268d3b26f75f58e9547a5d","sha512":"81a30c5c00e9497061a32e3e20d64b0cd62b204b1a67f138adf5b5dd7eeb8ca872941ea2f6350ddd5ccdbc30ea0e93597a9cfab4f14bbb2e3a2480b090f511f5","ssdeep":"192:qSfJsBB+xs8Gx8zEleeWK9KjSLJbvzUUOSmJ80JdU:6BBcsrx8zEleeWK9KawG","tlshash":"e4e1ff3555256050ee375f38b3579aadee0a84e3ac8645b076cd22098ff11f8a7c6f0c","first_seen":"2025-07-04T00:42:00.453383Z","last_seen":"2026-05-29T11:12:09.969687Z","times_seen":96,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":277,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/c679fa54-bc68-4f2d-87ce-88bba54f2064.jpg","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:45.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /c679fa54-bc68-4f2d-87ce-88bba54f2064.jpg HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"63a8-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 25512\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":25512,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 721x720, components 3","md5":"bc235279dd7d782407efc87fb6bc9344","sha1":"7ffa82a2fda36e900b9d02032e52d208ae515482","sha256":"38aeafc4800bc73720ebad06734b6a1fbbabc772d4f703a027015d5a72548d1c","sha512":"32497be39544859061ae39fac8a5be7b81f3b6f97a9f0baa1319dfa8e8f992b4768916897140bb7bffef71d2cf90be9450d1d7fb06ae8b9daa7ef6f71b3da342","ssdeep":"384:N9Vf5kJQX61dSHP6IQenwAeKFsdqigIsQqh/xRMjRmAG3hZ05tEwtJ3HRxE84+s:9aJE68P6KnwAyqigNpDLbWq+bE7","tlshash":"11b2e0adfed84e92db00d0f213e9cf242179916b21bce34e273d87a5470a5e1e13b519","first_seen":"2024-12-28T15:43:31.935174Z","last_seen":"2026-05-29T11:12:09.970376Z","times_seen":107,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":656,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/css2.css","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:45.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/9680bc3c22b2c494.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"840-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2112\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":2112,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"94008a89c8d6024db3d861cb7ba4a4f4","sha1":"51705aa43b6b5fe174beb82b06c56178246906ec","sha256":"0a0b13c690f1a1ed9e59cf520667bb9f3d3cee7e8ea89318a03f40ba9b9cf05b","sha512":"e54628d0a2daf050618534f61b4283e15f80ba17123dab3289050740e501a76d9dff62026199c6e2c7df929a7e2d7e3c56b0e22d47a4877dfcd71176264467e0","ssdeep":"","tlshash":"41418b80087ba504d7931cc122ce7e32ee2db19064459d346ffe1498fc5bd59a3b2b4d","first_seen":"2025-01-25T17:56:03.203401Z","last_seen":"2026-06-13T05:32:08.549047Z","times_seen":886,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-29T11:11:44.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:44 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:07:10 GMT\r\nETag: \"35962-6521f9f47a380\"\r\nAccept-Ranges: bytes\r\nContent-Length: 219490\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":219490,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4990)","md5":"b6d1092a27262f0e8b96d5730b722c53","sha1":"a124000cf1ce130e387c346016e37e4fd02f7018","sha256":"155953df36459c092f736a3b59780580ee74d7646fbdcdbdb8224a5800eb2aec","sha512":"a612d280845d43aa3718ae15ea33c7545c4378b70b96b606fb6386d1468488ca292de1d4e443c93d53b6740bd8b2bae5b6458ffcd4fc755a1f31696bea85663e","ssdeep":"1536:D8vCwxluWyXcLo+TVpbr8jIY6VGV8GKWM70mRlgt8heS/7IYTYQDok16wWlsTKN+:oq6kijv1qAP+C","tlshash":"ae245f661e5c23adb6235bbdc753603e3e8224ffa60884df75de34e8cb1105c8665ca6","first_seen":"2026-05-29T11:00:45.991182Z","last_seen":"2026-05-29T11:12:09.97154Z","times_seen":2,"resource_available":true,"data":null}},"time_used":688,"timings":{"blocked":191,"dns":0,"connect":60,"send":0,"wait":61,"receive":245,"ssl":127},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/286c0c7c193bbacc-s.p.woff2","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:45.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /286c0c7c193bbacc-s.p.woff2 HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hmsfuar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"4e58-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 20056\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":20056,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20056, version 1.0","md5":"1c5adb0ce67bcc296c754a8799253362","sha1":"edc2f273e8013e423c3610f4fb024ad7eb9b9cf4","sha256":"3932afcb4b34e743459d09ddb48cc47ca1910b27d965f2a23ec56f467c2ef171","sha512":"9510e67114c4ffd3f5541e3276288bed7834950ea6d5123a0f396762643c06de5e35dfb6ecf7a3ef7d326d088aee5344cf4049fdb654170a390c51a142a51e83","ssdeep":"384:VDxiBTSDpotkzg1HSjILRPER3rpAFyFTbrbfAO60pvnpaDyYQ:UIotp1fRsR9NFTbnc0JpaDyYQ","tlshash":"6792cf6d746999c28c130739ccdcdba102ac0df7836cd82c50e2db5ed66e5b1bb9942e","first_seen":"2024-12-28T10:25:20.026473Z","last_seen":"2026-05-29T11:12:09.972274Z","times_seen":146,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/b30489573339f853.css","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:45.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /b30489573339f853.css HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"8d56-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 36182\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":36182,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4c59318ae1e020282da2e9eb1345a633","sha1":"620d44fb0b3c0a285a9b319027919a5159401c5f","sha256":"4e87279eb728c3c74c3d22ea90ef9711d66d4b3fcc66617f09cc5422660200d7","sha512":"18067ccb86c523089343acbc1aa56bfee94b5ab90e8b3806160f412417137ae9a1cce54116f6ea3a74165a39374087e94b29cbb343bd505ed193fe47a96b17bb","ssdeep":"384:TKUS1R3v9M4RfBfMbz9VVC6itvwaMHi0zpibRIngjNpwpcSXhp:+USzyzpibRIMNpwpcYhp","tlshash":"a3f2a9007d1e3e1832275b6842e547ccba233b6bdd6903657dd412ac4b687a83bcbd79","first_seen":"2025-07-04T00:42:00.471095Z","last_seen":"2026-05-29T11:12:09.973205Z","times_seen":96,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":159,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/semantic-table-5.8.3.min.js","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:45.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /semantic-table-5.8.3.min.js HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"38cff-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 232703\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":232703,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f57a43ae96fb1eb682ffffe6158b5d29","sha1":"40d5c9816866d63558f35afef30c8615d4779e8e","sha256":"71716777a1563f5b8e115c2b93726ba7267fada703fde121d5f44f65e05984f2","sha512":"0a6da72437854186130117b6e4ef7c4e349c1b0bf2169f4445bd210edac9367c4c1696d704ab93d1d7a949f6c97f2428defe84d2127b3c982e1e8b94976577bf","ssdeep":"1536:JNrjzmEpuCseB5vMb4VqzbgoQNZqf/URwZNcAHjzol4l2E9D7L7V/zUMdmYeOZ:brjQCs+vM8VqvGqfRDzOqB9FlZ","tlshash":"9134dcd5595694e9be1601ddcc72ed04e0184c23beacf193a6eefdc1702af25805b3ba","first_seen":"2026-05-29T11:00:45.950051Z","last_seen":"2026-05-29T11:12:09.973782Z","times_seen":2,"resource_available":true,"data":null}},"time_used":657,"timings":{"blocked":279,"dns":0,"connect":0,"send":0,"wait":74,"receive":304,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/blue.mp4","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:46.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /blue.mp4 HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nDate: Fri, 29 May 2026 11:11:46 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"6fe0a-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 458250\r\nX-Powered-By: PleskLin\r\nContent-Range: bytes 0-458249/458250\r\nKeep-Alive: timeout=5, max=89\r\nConnection: Keep-Alive\r\nContent-Type: video/mp4\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":458250,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"caba320a1d41b11529caeab98906cc5b","sha1":"8a3005cbc789dd6ca812e18be73f5cda5ebc9348","sha256":"d04c55d92bebb5842bb8cc7e03fbb64b840e59925ffeb853db193bf6724d78a1","sha512":"dcf103aa3cadd9c38b0f6db2e8b95f54086072f382a76b31c306f4496e307de1f4f2147de89ff336406489abde52c9a0054f2c82ca9910cf9f9cd28e312fa4fe","ssdeep":"12288:BqUU7oVLP2Ws+eR/7mnNRcYm2fJgBXsu+LP:BqUU7aLPBeB2Rkq2su+LP","tlshash":"61a4232113639eb5c9fc0bf977e506aa7a3bb5b8652148b4f54809ac3a884b73d0d11f","first_seen":"2024-12-28T10:25:20.054284Z","last_seen":"2026-05-29T11:12:09.962464Z","times_seen":158,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":61,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/c85a4b4b1494dc85.css","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hmsfuar.com/index_1.html","date":"2026-05-29T11:11:46.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /c85a4b4b1494dc85.css HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/index_1.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:46 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"15420-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 87072\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":87072,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65472)","md5":"1dc7db814ed2b58e9439147a882ee651","sha1":"6031fd16811199519075e3f54136758f7798d6e3","sha256":"6d3ca009a604e51857e447021d7cca1f8a4ef80d138bdbc6aa45e6adbf9ce442","sha512":"654c3869f9bdc3006c6f257aa7d180e753701ff89b2266f6e71c46fad4e806714410cbc61734decf552e7254ea4f03dd9d7062473a0e873a2ede2d403eaab6a3","ssdeep":"768:m2pwS9f0gwU1bbWIVZNUr4M6yyfWytuxBrSWxDhbVd:m2exYbbWIq6yyfWytuxBrSWxDhbVd","tlshash":"82832e1db752003f3c2384f9e29ce9ae911675c4ee3a6ae7bd8222018bd57f35d93254","first_seen":"2024-12-21T19:32:48.694184Z","last_seen":"2026-05-29T11:12:09.974731Z","times_seen":95,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":84,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/secureproxy?e=jscdn/getFile","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:46.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hmsfuar.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://hmsfuar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"c8u4qgbs4gimsmcljs0t\"}"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 29 May 2026 11:11:46 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 07 Feb 2024 07:01:02 GMT\r\nETag: \"328-610c54203efc9\"\r\nAccept-Ranges: bytes\r\nContent-Length: 808\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":808,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"a943672a32297727bab01c3e76977550","sha1":"3a667c4b7a457ef6c586cc581d533c128737bf53","sha256":"b9347f234dc3c8d56e015e86d88a1400415db8f7a5ad91f02b6a2323c10a4187","sha512":"0965d415f3a0cef31953702fdae345d46fefd72ce3c4c7a0255aede74a76e10b856892700529a444453a622793e0257248c5c99fae17d5b0b9fd4118e208068c","ssdeep":"","tlshash":"2e01bd0a08e0501bc0d3915169a0f22dc9c2f997aa5b180079ed91c6cfd5f89c9d35ac","first_seen":"2023-03-08T11:42:06Z","last_seen":"2026-06-13T09:47:56.534738Z","times_seen":37542,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com//secureproxy.php?e=jscdn/getFile","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:46.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"POST //secureproxy.php?e=jscdn/getFile HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hmsfuar.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://hmsfuar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"c8u4qgbs4gimsmcljs0t\"}"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 29 May 2026 11:11:46 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/7.4.33, PleskLin\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":16,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"4845f01eaa8068384625e302e9a4eb05","sha1":"fb6ff8293fa45e17ba97f84954e7d1d5b0d38f87","sha256":"8a482f2271a42c5f54c96e816a84340a6f2357a5b81f927d07d00788f5140a41","sha512":"bb58f2438524b518b19f2b74c5d598460735958f77c310ba3710520d1d88ce7975449977c9965dbca87cd6a824c8ab82e56bea6d571d79594079f0a0ea404d77","ssdeep":"","tlshash":"4160000c03030f0c00c0c03ccfc00030000c03000cc033f00000c00c000000c3cc00fc","first_seen":"2023-03-13T05:02:59Z","last_seen":"2026-06-13T10:21:47.369291Z","times_seen":11289,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/934ca5d86cb8ad40-s.p.woff2","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:46.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /934ca5d86cb8ad40-s.p.woff2 HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/15e962c9c86fca1e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:46 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"5198-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 20888\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":20888,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20888, version 1.0","md5":"e52aa0b07244c4a3acdee247b1f6e829","sha1":"b7b827fcda2a948e66c45d119ad8d02d66c7a83d","sha256":"fd1d69c9fe04a9b4ed9e78286299b09cbbf23efab96c8ab7fffad59ebf3d6f9a","sha512":"7ecd78194903e44f47dd3b41dcd23c0c785928002fc799e510345a456ea974db609a6ebf8ce46e434946de1ea63313929c89d637cc7b2fbf3042b6440ebbff5b","ssdeep":"384:YgjIF9Spa3GQ4uMEYK6GOaIAGs0R135QgGVmVp3/4Pq3K:FEkaWNdEYI6U695G0BQq3K","tlshash":"4f92e1e4fac80e2680d7ae2d2d05a0909433d051cb5a88ff6d6716691b673b3cd9b638","first_seen":"2023-12-15T11:46:57Z","last_seen":"2026-06-13T03:56:50.866186Z","times_seen":159,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/pengu-jump-white-opt.mp4","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:46.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /pengu-jump-white-opt.mp4 HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nDate: Fri, 29 May 2026 11:11:46 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"79065-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 495717\r\nX-Powered-By: PleskLin\r\nContent-Range: bytes 0-495716/495717\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: video/mp4\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":495717,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"2f532b6ce8334ddc23e4cee4b474aac9","sha1":"9d2e146dfa52735f4f7fe5e6b6b6277c57681da6","sha256":"ac85791a1723f578e68ee08f70305d1058d261dfe0a21fdf13fa5637f9c9e36a","sha512":"524b301c31e54f623ec2683b8c39d1fb6aea0beba089563fee853a9164afb125b0be89c92231aa59eb098dac3dcbfe5d44ea8a3de6f75e0da58ecfb9ffa1d78f","ssdeep":"12288:VLkDO/Tnmc6INODFXv684VUwqjSXaeYXe1YI+UhPf:ZkDuDSIqXv68BjO1n+U1f","tlshash":"11b4232437281af5e5426e358ee5cf642424712f670def5eab7876527cf18ba07e0306","first_seen":"2024-12-28T10:25:20.053175Z","last_seen":"2026-05-29T11:12:09.976852Z","times_seen":162,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zenzozo.xyz/x7k/gf","fqdn":"zenzozo.xyz","domain":"zenzozo.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:46.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenzozo.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:46:55 GMT","end":"Sat, 11 Jul 2026 03:45:35 GMT"},"fingerprint":{"sha1":"DF:31:71:EA:0B:D5:3D:75:23:B7:BD:25:EE:B9:21:4E:2F:9D:A8:28","sha256":"28:48:D9:33:7A:B9:A6:F3:28:C6:C6:E9:67:6C:56:60:D5:F1:22:07:96:B0:5C:94:0F:13:C3:23:1B:FF:58:59"}}},"request":{"raw":"OPTIONS /x7k/gf HTTP/1.1\r\nHost: zenzozo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hmsfuar.com/\r\nOrigin: https://hmsfuar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 29 May 2026 11:11:46 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bGe9YLta%2Fxpslp9BRZW6ctFuzHMZkY8Yi87FTNRDKzC2BBDomVd5ffzDN2yIqT%2FXHieSGXelY7ufYgG%2FVI92FAl%2Fg6a3YKmEIJLTcsdtJRFry5in5S3Qm1kgTwuUYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0350f6bfdfcc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T10:33:11.41944Z","times_seen":16384135,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim.pudgypenguins.com/apple-touch-icon-180x180.png","fqdn":"claim.pudgypenguins.com","domain":"pudgypenguins.com","tld":"com"},"ip":{"addr":"104.20.38.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:46.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim.pudgypenguins.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 May 2026 11:17:07 GMT","end":"Fri, 07 Aug 2026 12:17:03 GMT"},"fingerprint":{"sha1":"01:1C:C7:5E:81:70:45:F3:32:9E:53:83:85:84:F6:93:94:87:53:CA","sha256":"29:39:DE:78:AF:99:E0:78:CF:50:1D:B2:B0:33:B6:81:53:5C:C1:56:6A:69:2B:66:D4:C7:A7:EB:04:3E:C0:07"}}},"request":{"raw":"GET /apple-touch-icon-180x180.png HTTP/1.1\r\nHost: claim.pudgypenguins.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 11:11:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 18882\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"apple-touch-icon-180x180.png\"\r\netag: \"91a82cccdf40222506426fbf1b125a90\"\r\nlast-modified: Fri, 24 Apr 2026 19:22:43 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /apple-touch-icon-180x180.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ntcss-1778822809686-31c776b424a6\r\ncf-cache-status: REVALIDATED\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a0350f6f4c3eb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18882,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"91a82cccdf40222506426fbf1b125a90","sha1":"edcbce6f295d8531c6e2c411fbd6a45dd76e166e","sha256":"db8514641f93f2518661d22f2b00bc6d208c0721465d05a951f92bec0d6b546a","sha512":"2fe4f5b1ec353105ef8739323b95e5ed713efd6cefca915844888a3090543d5d2ef7e4622579f950e25ef760bc5965c983f49ed1dd8f84afee5e51558cbbc723","ssdeep":"384:lakZPn7uVtQYDrcV1+LAdNR/xjeXoSm0kkWRv17YuuEnbr9ghD:7CVtQYDr5AdNRheE0Uv1+Clgx","tlshash":"e482d0bff88c458047b868d3774aa42f00fc79f98f4903e51346d6765ab0a1a452afb7","first_seen":"2026-01-03T06:20:47.664592Z","last_seen":"2026-05-29T11:12:09.977456Z","times_seen":102,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":82,"connect":1,"send":0,"wait":146,"receive":1,"ssl":85},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"claim.pudgypenguins.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zenzozo.xyz/api/fp","fqdn":"zenzozo.xyz","domain":"zenzozo.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:48.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenzozo.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:46:55 GMT","end":"Sat, 11 Jul 2026 03:45:35 GMT"},"fingerprint":{"sha1":"DF:31:71:EA:0B:D5:3D:75:23:B7:BD:25:EE:B9:21:4E:2F:9D:A8:28","sha256":"28:48:D9:33:7A:B9:A6:F3:28:C6:C6:E9:67:6C:56:60:D5:F1:22:07:96:B0:5C:94:0F:13:C3:23:1B:FF:58:59"}}},"request":{"raw":"OPTIONS /api/fp HTTP/1.1\r\nHost: zenzozo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-worker-hint\r\nReferer: https://hmsfuar.com/\r\nOrigin: https://hmsfuar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 11:11:48 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=53uA86qQzu0dK%2Bgqd0lFONUfLFskEHjUUCwihVJNMtPXFGa3PQv28NbkYwHwuVh%2B6S7JvADU3xe%2FKLwW2bFgyDvsyO6imUMiXgkmhZc6%2FZSvNPP8zeamVOOVd6rgtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0350f7a1a245ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T10:33:11.41944Z","times_seen":16384135,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/2b633991b9.js","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:45.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /2b633991b9.js HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:03:36 GMT\r\nETag: \"588-6521f92864200\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1416\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1416,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1416), with no line terminators","md5":"ddd7160f8388b22373735ae9f583e6f1","sha1":"9a48c68620dca8bd27438239e5d1d5ab4bada218","sha256":"2eead2438e500a19004ac42925af81a80b460d810b8056ad6b8c7acc1df99c5c","sha512":"5331ae9c22694d36f982a48e509157a402ee17562da57208d6482328597588f0a55d8b3d77cdbd510daa9724a0c029fdff1fc7a907d0e2ae2e15263e3ac56d6f","ssdeep":"","tlshash":"f921cddbba52b4402785b7b6986f740d9767bd0adcda4428d4005ac23dbeb2fd0125a8","first_seen":"2026-05-29T11:00:45.953306Z","last_seen":"2026-05-29T11:12:09.978149Z","times_seen":2,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/934ca5d86cb8ad40-s.p.woff2","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:45.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /934ca5d86cb8ad40-s.p.woff2 HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hmsfuar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"5198-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 20888\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":20888,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20888, version 1.0","md5":"e52aa0b07244c4a3acdee247b1f6e829","sha1":"b7b827fcda2a948e66c45d119ad8d02d66c7a83d","sha256":"fd1d69c9fe04a9b4ed9e78286299b09cbbf23efab96c8ab7fffad59ebf3d6f9a","sha512":"7ecd78194903e44f47dd3b41dcd23c0c785928002fc799e510345a456ea974db609a6ebf8ce46e434946de1ea63313929c89d637cc7b2fbf3042b6440ebbff5b","ssdeep":"384:YgjIF9Spa3GQ4uMEYK6GOaIAGs0R135QgGVmVp3/4Pq3K:FEkaWNdEYI6U695G0BQq3K","tlshash":"4f92e1e4fac80e2680d7ae2d2d05a0909433d051cb5a88ff6d6716691b673b3cd9b638","first_seen":"2023-12-15T11:46:57Z","last_seen":"2026-06-13T03:56:50.866186Z","times_seen":159,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":214,"dns":0,"connect":76,"send":0,"wait":75,"receive":74,"ssl":154},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/52160bc5d6d7cd1b.css","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:45.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /52160bc5d6d7cd1b.css HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"f58b-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 62859\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":62859,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9055b639a95b471291c230d8b40530cc","sha1":"8120873c9f818a32a9c89ee686b80557db9db862","sha256":"6e6be5fe021b9e2b092480c49aca666db11ee08f17df7dfff9339d600e04625e","sha512":"859b883ada76c9e6ea2950bf449b38969118b17050dabb3b5a8e5faf3218ab2d68e60886644d7b00fb77ab3979281781e027bacc0ba7e992234efe0904cbd6ef","ssdeep":"768:921XCiL9r+9yFPKz8zja+QnKowWo4uLjSdHVPhBW:YCw91q8z/owWkIHlq","tlshash":"ec53b72045055046aa33bbbcb7e3432cea8944235e2349a977ed725a4ff31bce291f5d","first_seen":"2025-07-04T00:42:00.465696Z","last_seen":"2026-05-29T11:12:09.978894Z","times_seen":96,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":61,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/index_1.html","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:46.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:46 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"4da-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 1242\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":1242,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1241), with no line terminators","md5":"7331f5b2dfc6be83823ff8df0d3d8051","sha1":"712f3afb43d8373d604e769354c12772582d1517","sha256":"2a17d40be36cd122cb39f91312de2f5ad4c9ba95b3652389db199d2bc5801c26","sha512":"bdf844790707f8339f21168546c790736ce815ad471637f47639fd249eb28c06fd5bb3cae862bf921e835faf71ccc9a1c9df6223c1d9fe92a205d107d0b39869","ssdeep":"","tlshash":"462187f168119c1d201ba7d9dccab04d9943fe1dd74158c8bdc9985e9ef293c554588c","first_seen":"2025-07-04T00:42:00.464324Z","last_seen":"2026-05-29T11:12:09.979811Z","times_seen":13,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zenzozo.xyz/api/fp","fqdn":"zenzozo.xyz","domain":"zenzozo.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:48.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenzozo.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:46:55 GMT","end":"Sat, 11 Jul 2026 03:45:35 GMT"},"fingerprint":{"sha1":"DF:31:71:EA:0B:D5:3D:75:23:B7:BD:25:EE:B9:21:4E:2F:9D:A8:28","sha256":"28:48:D9:33:7A:B9:A6:F3:28:C6:C6:E9:67:6C:56:60:D5:F1:22:07:96:B0:5C:94:0F:13:C3:23:1B:FF:58:59"}}},"request":{"raw":"POST /api/fp HTTP/1.1\r\nHost: zenzozo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hmsfuar.com/\r\nContent-Type: text/plain\r\nX-Worker-Hint: 38f5f763dabb8de33bc4e7238af667a4\r\nContent-Length: 1292\r\nOrigin: https://hmsfuar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1292,"data":"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"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 29 May 2026 11:11:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JIJnOZfAkYPakwYKB3qy7qz1GgVErvZp9MTa6mm28oKKLgXJQH%2BdxCrvhheVARtUxZvDUdyUsgVmv6vT3PoZUrNOmsmlpyVr3ljujOKGUePXMgL4yFDce%2BjtJBnjCQ%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a0350f7a4a495ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":270,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"881ace1cd05f708cd21898513ffee1b5","sha1":"b559d6331ab666af6a02389f1129fbc54c19e697","sha256":"35efd6abccc6a32345d699e1e8961b7cd9b3299a632bc420b6ede23677fc47dd","sha512":"e3cb380dd0e659653695d0fc7ddce21dbabe6a7963c92d15a4816396fb800a9e34e0b31a84486cd1f8f75c5080934826529d423c277c311a769ce7702569b20e","ssdeep":"","tlshash":"34d0eb650da88221ca400b404062b2e10085803afe3304490088702317380714be3caa","first_seen":"2026-05-29T11:12:09.980394Z","last_seen":"2026-05-29T11:12:09.980394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zenzozo.xyz/x7k/gc","fqdn":"zenzozo.xyz","domain":"zenzozo.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.240","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:46.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zenzozo.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Apr 2026 02:46:55 GMT","end":"Sat, 11 Jul 2026 03:45:35 GMT"},"fingerprint":{"sha1":"DF:31:71:EA:0B:D5:3D:75:23:B7:BD:25:EE:B9:21:4E:2F:9D:A8:28","sha256":"28:48:D9:33:7A:B9:A6:F3:28:C6:C6:E9:67:6C:56:60:D5:F1:22:07:96:B0:5C:94:0F:13:C3:23:1B:FF:58:59"}}},"request":{"raw":"POST /x7k/gc HTTP/1.1\r\nHost: zenzozo.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hmsfuar.com/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://hmsfuar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"d4iWPMVWv90hkGiIxSbB\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 11:11:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VF4wRO9uSQch33RGRgaHEdzKjfjVPz0GAppQ3YPsx6ZfKA4JWC3CQiVnjUyhxL4Oiugx0N1xI9QVDl9heyQgHcooN6Sam6fuRhvoSpVRyX%2FUaeGzzdALr7NdydgMfQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a0350f691b36c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7080,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5158ff9d116428360616eb4f6974879c","sha1":"c4a51ec6a5e3f80c843c8fc87c48d464061bced6","sha256":"5b3bda0dbcce02e1f58c35c4970d88dc7056d61a685fac303ff3af90dbf7a3d6","sha512":"113b761eb82aabb56523f35b15145086814b771eec3956e733f6cd9cdc59cf6074e781a482d29f7222579b26768b1fd6bb8c27e03415809bfe4d16c0a00fe460","ssdeep":"192:mDjbb3GEFI+WM9b3/hzwXi71DuRx+SplDxJjDDEj:+Id4b3/hzwXOu+2lDXDEj","tlshash":"f1e15b137497b10e01c547bf3a1863e5e06ac909da8ac04af748dee8b4ded937a4d6f0","first_seen":"2026-05-29T11:12:09.981548Z","last_seen":"2026-05-29T11:12:09.981548Z","times_seen":1,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/coin.mp4","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:46.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /coin.mp4 HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nDate: Fri, 29 May 2026 11:11:46 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"2abb6-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 175030\r\nX-Powered-By: PleskLin\r\nContent-Range: bytes 0-175029/175030\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: video/mp4\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":175030,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"0c203934d757f7a51ca86b9f2221478c","sha1":"abfd0e5fae59c675411c8f5734440f42aa50bc81","sha256":"368a99ab85c7fb7b75d36b973f0ebd6372f755e700903b206c811743fb4f3990","sha512":"c7a9af37ed53d8dd1601144460d860113606c87e03e0d990a6cb6584cfa93833692bdeadfc8e1f665e0bbf916e796605a4eb3920e1f400932a1d01511a1d6722","ssdeep":"3072:D/TzVYUlR/1M3dqZITKwYt3HoIUep/uXpoSg6XO+3JSoR9RBG1tYfcL6g0hblrYt:DHVYY/1M3YSRM3HoI35Gg4OETRBLcahM","tlshash":"c50413c0d64181cad334ab36da89f3805ff587f4de55ad2ffc198c2aa55a5862a43838","first_seen":"2024-12-28T10:25:20.052089Z","last_seen":"2026-05-29T11:12:09.982537Z","times_seen":158,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":302,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/coin.mp4","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:46.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /coin.mp4 HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nDate: Fri, 29 May 2026 11:11:46 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"2abb6-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 175030\r\nX-Powered-By: PleskLin\r\nContent-Range: bytes 0-175029/175030\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: video/mp4\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":175030,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"0c203934d757f7a51ca86b9f2221478c","sha1":"abfd0e5fae59c675411c8f5734440f42aa50bc81","sha256":"368a99ab85c7fb7b75d36b973f0ebd6372f755e700903b206c811743fb4f3990","sha512":"c7a9af37ed53d8dd1601144460d860113606c87e03e0d990a6cb6584cfa93833692bdeadfc8e1f665e0bbf916e796605a4eb3920e1f400932a1d01511a1d6722","ssdeep":"3072:D/TzVYUlR/1M3dqZITKwYt3HoIUep/uXpoSg6XO+3JSoR9RBG1tYfcL6g0hblrYt:DHVYY/1M3YSRM3HoI35Gg4OETRBLcahM","tlshash":"c50413c0d64181cad334ab36da89f3805ff587f4de55ad2ffc198c2aa55a5862a43838","first_seen":"2024-12-28T10:25:20.052089Z","last_seen":"2026-05-29T11:12:09.982537Z","times_seen":158,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/bbc59b565fd70203.css","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:45.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /bbc59b565fd70203.css HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"e99-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 3737\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3737,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6bdddbd8afe28aef149f06f6df873e5a","sha1":"48d17e78c18371e5fbb12d23a866e15f19aa590d","sha256":"fe870cd7b72b4b34da84d9b8e8317621f59c50ca400c210b0702e112a78d294e","sha512":"0c808f762ffffca4ce6d591e696c936f7133817841ac1cce721d058a6a7bd4cf215b4d168c818170bd9d70df96a60da43aed434c4b4c23000bda1719f24f8dd0","ssdeep":"","tlshash":"74711212d01258c1ad326f6827ee5a9afa1954131d8a0aa67bcc1a414ff33b8e7d1f4d","first_seen":"2025-07-04T00:42:00.438579Z","last_seen":"2026-05-29T11:12:09.988325Z","times_seen":96,"resource_available":false,"data":null}},"time_used":547,"timings":{"blocked":226,"dns":1,"connect":74,"send":0,"wait":74,"receive":0,"ssl":164},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/d2d8eb5aee14a174.css","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:45.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /d2d8eb5aee14a174.css HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hmsfuar.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"6bc1-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 27585\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":27585,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ea5cbae261190d4cf3dc245201d9676a","sha1":"99c7533988caff93c56b232d15275d08e7c6a912","sha256":"d36280fbd860768048dd96abf65756175a1d898f221dcad3d5dc82451a54df17","sha512":"dc704de583346758e947c90bbab9e1e30409dc7c6c054bcc9a2a0b2c28bfd181b6d7ce4007b22e802f9010c600ec5bcc5fd686bbd4c924cc7a584991b0f56eda","ssdeep":"384:euGJKZCMmdDctwVwWN8v6VCKGtFZYaF/8bMuLh0Hoblpz3ezYLH:euGJBxw7Z5Fmbn3Jz","tlshash":"31c273265af35c046c5a18adb7de6359b62c508b8e2fec64fbcd21068fc41b866d4f4c","first_seen":"2025-07-04T00:42:00.451815Z","last_seen":"2026-05-29T11:12:09.989019Z","times_seen":96,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":277,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"54.216.216.4","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:45.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:51:35:3C:6A:BD:00:80:7E:C2:BB:61:75:B1:0A:D8:28:8C:62:89","sha256":"3E:F5:AA:B6:AF:7A:6B:4C:8C:99:02:80:C8:8D:C7:A8:56:7D:40:10:01:15:9D:68:B3:94:4D:05:F5:41:C3:94"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://hmsfuar.com/\r\nOrigin: https://hmsfuar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 29 May 2026 11:11:45 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T10:33:11.41944Z","times_seen":16384135,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":206,"dns":86,"connect":31,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hmsfuar.com/3818f1bd4832a6dd-s.p.woff2","fqdn":"hmsfuar.com","domain":"hmsfuar.com","tld":"com"},"ip":{"addr":"46.20.146.46","port":443,"asn":48737,"as":"Dorabase Veri Merkezi Hizmetleri A.S.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:45.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"hmsfuar.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 May 2026 05:24:22 GMT","end":"Tue, 25 Aug 2026 05:24:21 GMT"},"fingerprint":{"sha1":"90:66:CF:19:2F:13:41:C3:DF:AC:B2:62:86:3E:91:D6:B3:32:06:D7","sha256":"D6:39:32:2C:BF:27:2C:00:36:5C:1F:A7:07:6F:2F:85:CF:DC:87:6E:97:96:FE:37:A5:A0:B2:B9:C9:4F:83:FE"}}},"request":{"raw":"GET /3818f1bd4832a6dd-s.p.woff2 HTTP/1.1\r\nHost: hmsfuar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hmsfuar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 29 May 2026 11:11:45 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 18 May 2026 23:06:14 GMT\r\nETag: \"4f10-6521f9bf12580\"\r\nAccept-Ranges: bytes\r\nContent-Length: 20240\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":20240,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20240, version 1.0","md5":"f2876713dafd87b89cb83196ce9491f9","sha1":"dc0576a80f9da5655f6779fb672e3e0f123c1051","sha256":"d2bd57b70a659047662f84c4629d8e5939d7267dac5a93dde52515397ed3c596","sha512":"b8f1bf78538191f56af381b66a08a07ccff7753a04a1d47fe8d2d667e59e90f559062ada2e2309e127b2ad5f5a9c07ef21c7c5a332f508c9b69585bcbbccffff","ssdeep":"384:tFiXRL13VSD6wOPV7BQOsZG0b2vJOg2DSGXUWTIRTpN1P4Zx0L9vqt/en:tFWZ13MIV7BYZRQwdxTSb2ZWJmmn","tlshash":"a092d0808f479b84cbda3b2f1741d4a1fba110be4ad351425f480b8a4d4bedc42af2e0","first_seen":"2023-11-25T16:51:58Z","last_seen":"2026-05-29T11:12:09.98975Z","times_seen":109,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":176,"dns":1,"connect":59,"send":0,"wait":60,"receive":60,"ssl":126},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-29","alert":"Sinkholed","trigger":"hmsfuar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-29","alert":"Phishing Block","trigger":"hmsfuar.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed2.bnbchain.org/","fqdn":"bsc-dataseed2.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"54.216.216.4","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hmsfuar.com/","date":"2026-05-29T11:11:45.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:51:35:3C:6A:BD:00:80:7E:C2:BB:61:75:B1:0A:D8:28:8C:62:89","sha256":"3E:F5:AA:B6:AF:7A:6B:4C:8C:99:02:80:C8:8D:C7:A8:56:7D:40:10:01:15:9D:68:B3:94:4D:05:F5:41:C3:94"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed2.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hmsfuar.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://hmsfuar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"eth_call\",\"params\":[{\"to\":\"0x1AC7d768E37B147c993dE943D704c4e92d7861A1\",\"data\":\"0xb68d1809\"},\"latest\"]}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 29 May 2026 11:11:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: 457ab5d8f2bd9486de17313d22975697\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9aa6b08e0eb036d7bcc7237e86944e86","sha1":"b18da56418c46b54bfe181eb9fe75c62e1b79324","sha256":"f63b1a8594201ed0037b32ae13e0c6731c9e877e0ba76bcb8d9e48243eb12f39","sha512":"86c3bdf5af07d13887b738bfe496fb8fb5aa24761b5c486958edc83d482a3a13a2d2ea9b6f73b67bb3d86577e3fe65ac78c03d9e8e26bdc9f0aa18a605a9df3c","ssdeep":"","tlshash":"0ed012d0020b0eb2d09c0c40500473012b313ec985c03d42480c1cc011452827715231","first_seen":"2026-05-23T13:14:35.311753Z","last_seen":"2026-06-11T12:18:06.702448Z","times_seen":6,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}