{"report_id":"cb063366-3e6a-49d5-9f88-aa41d26f4766","version":0,"status":"done","tags":[],"date":"2026-07-13T00:33:56Z","url":{"schema":"http","addr":"cryptohelper.vip","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cryptohelper.vip/","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"title":"Atlas Network — The answer layer for digital value","dom":{"size":308862,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (56411)","md5":"7950f632a41129ae422a5f189f0f6989","sha1":"5c4aaa6c83d4853be308be0fb41d98b77b4d58c0","sha256":"4ad2318f4ba8a035511620cd9f2c10b867f294b8dd12b77e18a380be0e641775","sha512":"89de483d0e400ddfeb5e58070033cf1e38891ae935474d509c2a2d87c6d6745d166bf8b481071304afaea248b338a0810a85a3f3b2d6c3fc0e4f62ab8a1986f2","ssdeep":"1536:t1tOmN9iyqkODfdFq6F4au/guF8X+SMA5eCNCX6BCUPHJlhGlc9PrtYZNshJl1hK:t1AmIuH09zrOiSQDYDwfaW7CP","tlshash":"4e648822a111d53f5617a7e8f274bf6c51cde31fc8938a5a937cc5611feacb0a782a40","dom_hash":"domhash71d1c47de35f9c089b7c3562268a927d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cryptohelper.vip","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-17T00:33:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-07-12T22:30:28.701059Z","alert_count":0,"request_count":1,"received_data":487072,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cryptohelper.vip","ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-11","domain_rank":0,"first_seen":"2026-07-12T23:37:18.26557Z","last_seen":"2026-07-12T23:37:18.26557Z","alert_count":26,"request_count":26,"received_data":1271389,"sent_data":20965,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cryptohelper.vip/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f316c8db0d02e94cd3993d37b204f0c","sha1":"d683bb454f1f5ed8f63390c61de0cedce9b47b6d","sha256":"f5b8d8e600cda1e431f9945063e1911186741756578acf09e7a4df9f11864ad0","sha512":"e1c6a97be0323f5f0d9fdbf6549b8d94285aaf41c79a5cc9a28f4d78fce47d2f0d4aeaa9ded4b22ef4abe5f07a2f9a3a9237f10b2500d5ec17a9807f78d9b591","ssdeep":"384:BteQO8hSeEumJsIqejNDujQh5DVjAeKQ+m1p5mqQ3EBnzSp0OfOMEJHkJ8CjWXzl:zeQO8hSeEumGIz1nh1+mRQ3U1aEJk8CU","tlshash":"f192879afecab8056346737d007f30cf6d7e8c8cb1244a59c110e4e47da5b59ad2aa78","size":20903,"data":"","first_seen":"2026-07-13T00:33:59.126954Z","last_seen":"2026-07-13T00:33:59.126954Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/layout-segment-context-DHdnMZ1s.js","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a01a553d1cf78376b0983fb68be2046","sha1":"d178e511408bdd4a8737f6229591654e9d3abf07","sha256":"7b4bed992d003cbf81d7c3a5f6582550a12f1539c770c3c74436ebe820c0f73b","sha512":"054f1f37a3f28bf2e76709304e529ddf6f152e7310fcf13e6cd91d9a9b93a224f07a26f04cb73c156fdfbb739ec01fb025849488185aaf27abcb17b334287bf1","ssdeep":"","tlshash":"18d07d0f310195f1561e4ceec02a440a6b31402453c8431090a9106a3936d9b502ef42","size":288,"data":"","first_seen":"2026-07-12T23:37:27.850158Z","last_seen":"2026-07-13T00:33:59.118842Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"26886a84df75373a2c53664f47e08ec2","sha1":"b57179e1d049c87de800eda5b68fc95510d2b755","sha256":"6fb772f3cc0024a34bca7e623fb04fb78eea48766771172754f8e14c9bb3fc7f","sha512":"0059f2968ff9b46c6289f93189aff205ea91a44d0243805be4d79ac452fb0384b7655423c0fed4120033bad3ef74977f74d3068d6f1485e9bcdc79ca32e96094","ssdeep":"","tlshash":"98d023551cb7893075d8014710bfe79d2771215077115680c1d8cc3b7f10dd304b155c","size":217,"data":"","first_seen":"2026-07-13T00:33:59.138516Z","last_seen":"2026-07-13T00:33:59.138516Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7VK8662QES","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7d80cdc88d526ecff631f8efb7a8a3b","sha1":"afff67851a9100760cd224f8a24fb3db304f4ee8","sha256":"132b12d337321724a148a0019f9f1272c3afb53c9fc4afd3872f50d0f2a542bc","sha512":"1c280e6dbe985856d0ffb9555eddf43faa75ae859fa8e7a8f256a003a80904c9e228da416b461a54ce084234197e5e0f9c398f7d9096ca08d2d1b8477ac060b8","ssdeep":"6144:JG57o0JeYuozbF3Vb25pvMlci0SJGWox3lytZDP3OfAn8l:M5yYnFB2j4DmfA8l","tlshash":"93a4f9cdb3d674625396f478903f018ba57b28a2b44cc899f189cce42e7465a8277f7c","size":486468,"data":"","first_seen":"2026-07-12T23:37:27.834253Z","last_seen":"2026-07-13T00:33:59.134533Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/rolldown-runtime-S-ySWqyJ.js","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b9fa1f21df87441aa366e428d1ebb49","sha1":"c27a8b2d2969dd2684fa56deef86ca35ee51a5db","sha256":"5db5ba82eef00d1dee7e86e663098c9427d01183a88d357437daff295aec3e75","sha512":"055bc418ba1a4c8defbc39c1ac629930f0975620d73f171860a8453245b1ebf8da2431de7bf98bc4a54eae55694addf910119f39977deb8dc2e2d170dc9d0000","ssdeep":"","tlshash":"c501c0a72990f7f31385a2cada385581d228687d96bc70d8f7a8c9f2d4c10c610d4f77","size":694,"data":"","first_seen":"2026-04-20T17:14:48.011376Z","last_seen":"2026-07-13T01:20:16.701917Z","times_seen":1507,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/link-BJqbPaCG.js","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc621d62ea8dee4b5d96f617f5413c77","sha1":"21ab864b71cd46a388ee85146ddc9063b2982349","sha256":"ab9b022a47ca214998882fdd21e6c941fa66584e73658aed4cec3133aeff08c7","sha512":"33ddc0100b9b1dbb83c05e75e16bd61bbad94ae922b80ee2c131b90c2ac72e62dfb28c39d7a53971efe5d6fef46b89ddd13bf90a3d178a42417e607beac6fdb2","ssdeep":"192:OS58xXL79f3PVVGNImrWGcHwtHuLACJ6q5SjGnGvCBr6E3uDvRVDx77:OA8hL79FVGN5SGcHwtHuLZ5SjGnG4t+1","tlshash":"ba12d6f476d2f1a583f5151601bba606f22e0d89244d8004f2b5ac8e3a7850fd6f7f9d","size":9615,"data":"","first_seen":"2026-07-12T23:37:27.851562Z","last_seen":"2026-07-13T00:33:59.120543Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/NetworkExplorer-rMZVC0-z.js","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e1eb01ab7331161d922a3b2741d46f4","sha1":"5cf8d866b04a68a6716e46be488310f7aea74e7a","sha256":"3e3d59dfd1a693373833e74784134335d28484b2ae51ce358aaabf7fe6430bd5","sha512":"010aebd5edb61270ff299415a91d45a1df3b11bb7c93d8c099d0a526b167ad6a3e312f126f4dbf5d073e2ddb0699761864a07b7342f3b3ad9f33cbcaafcbc57e","ssdeep":"1536:MDwvu1AhkiinQ6smUmEYcUXN3g/wGjyYZ9plOJ/KL+s/CY+R4y:MDwvu1EkiinpsmUmEYcUXN3g/wGjyYZu","tlshash":"bd632b57f6f433b16acf036ae046c19e2dbfe440e1091da4b9a8d31427c49e8a36bf54","size":71666,"data":"","first_seen":"2026-07-12T23:37:27.837209Z","last_seen":"2026-07-13T00:33:59.132803Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/index-JZIf0NLU.js","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"508db7fec249a1dfc473f89426e5c5cc","sha1":"b6514d283208ae828e91c8bcf6a5da668bc16330","sha256":"a3e000ab392223c1176a3218280943690183e5342614a493251207aa1a8a2824","sha512":"c19b42e11243e336c8fc44d8b41678f25c0775b3c4ae8782c2d9d24281ad0cd0cf6117d30c0342bff9d6b2616239c4a52ea5e1722426989055e1e7d37755871c","ssdeep":"1536:8BldGFJczgB1iVN2ihSXN9uc2Lyt/l2MXKOfVzqW/vq1VfBnGV3NV2/ZsjVGW02L:gzO1iVN222wMlesxBPwGZo6","tlshash":"c68318e83280b06147fb1276c5ab5106f37f4da6184d4110f266ed8e3abd859c7bbf98","size":81115,"data":"","first_seen":"2026-07-12T23:37:27.869622Z","last_seen":"2026-07-13T00:33:59.119687Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/framework-DjPHiq1u.js","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c114b95cdd0483178fc4809461f6e4de","sha1":"eecd0039d02fe97358aa280f84f80fe7addb112c","sha256":"e1c95fc407283714d3fc4e9666d2fac09df84f3b4d479fcabdf8c4e3e53fa985","sha512":"444e06ba686e766f8a0b3b7188c7315e0a9cfec089075846beb8882126ff3a7010eeb940356f4034129f9fc2863b6b754aaaff1d0af3cbd6efc523e1f873e89e","ssdeep":"3072:zsrRJ3/poLFkikXhS6FP7LkkvO5gXMu8qOttuAhBm:4NXAFPkXgQ7LvvO5MMrqOttuAu","tlshash":"00042dec31a9b5526fa356b2006f1a07733929231c4d4860b210feae7bf544651bbfed","size":189761,"data":"","first_seen":"2026-07-12T23:37:27.853922Z","last_seen":"2026-07-13T00:33:59.131816Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cryptohelper.vip/assets/_vinext_fonts/geist-mono-00e989178794/geist-mono-44745446.woff2","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.282Z","timestamp":1783902809282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /assets/_vinext_fonts/geist-mono-00e989178794/geist-mono-44745446.woff2 HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptohelper.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 14712\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"0a061fcd397d240d6d02f2e4d16d1fa6\"\r\nserver: cloudflare\r\ncf-ray: a1a4324e09edb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14712,"size_decoded":15012,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 14712, version 1.0","md5":"a27466d069120e75e25b4fd06edd5be2","sha1":"fbd56f5f92011dd1c11b39396cef32d44d8be3ab","sha256":"745994b5cd950ec201b66526375f057d540847cccfc70f4f24f5f571d26d3923","sha512":"89473445d0878dd61443068b0da548ebba3a90a896ab4cb3eaa4e909c5268d5e9d2ec7df37890d117ff6e3ce088585ae2df67e9837d921cc3bc48944b1d407d6","ssdeep":"384:/YRIFwozr/0lYEiUQD7W6epaz6oXEb4v8p0cQ:/YRjo/0lYn3vepa7Tv8CcQ","tlshash":"a062d00063331b6eda05b5fb733c8d70b12e0c16ee4a11e5a85a4aaf87cb536258cf45","first_seen":"2026-06-13T10:52:29.203089Z","last_seen":"2026-07-13T00:33:59.118224Z","times_seen":17,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/layout-segment-context-DHdnMZ1s.js","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.292Z","timestamp":1783902809292,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /assets/layout-segment-context-DHdnMZ1s.js HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptohelper.vip/\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"27f068a86f6c921b98fd72ee7279fdc1\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1a4324e1a00b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":288,"size_decoded":520,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"4a01a553d1cf78376b0983fb68be2046","sha1":"d178e511408bdd4a8737f6229591654e9d3abf07","sha256":"7b4bed992d003cbf81d7c3a5f6582550a12f1539c770c3c74436ebe820c0f73b","sha512":"054f1f37a3f28bf2e76709304e529ddf6f152e7310fcf13e6cd91d9a9b93a224f07a26f04cb73c156fdfbb739ec01fb025849488185aaf27abcb17b334287bf1","ssdeep":"","tlshash":"18d07d0f310195f1561e4ceec02a440a6b31402453c8431090a9106a3936d9b502ef42","first_seen":"2026-07-12T23:37:27.850158Z","last_seen":"2026-07-13T00:33:59.118842Z","times_seen":2,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/index-JZIf0NLU.js","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.295Z","timestamp":1783902809295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /assets/index-JZIf0NLU.js HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptohelper.vip/\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"feabba9c23d9d76d19defd40bd1ee396\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1a4324e1a05b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81115,"size_decoded":24748,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42538)","md5":"508db7fec249a1dfc473f89426e5c5cc","sha1":"b6514d283208ae828e91c8bcf6a5da668bc16330","sha256":"a3e000ab392223c1176a3218280943690183e5342614a493251207aa1a8a2824","sha512":"c19b42e11243e336c8fc44d8b41678f25c0775b3c4ae8782c2d9d24281ad0cd0cf6117d30c0342bff9d6b2616239c4a52ea5e1722426989055e1e7d37755871c","ssdeep":"1536:8BldGFJczgB1iVN2ihSXN9uc2Lyt/l2MXKOfVzqW/vq1VfBnGV3NV2/ZsjVGW02L:gzO1iVN222wMlesxBPwGZo6","tlshash":"c68318e83280b06147fb1276c5ab5106f37f4da6184d4110f266ed8e3abd859c7bbf98","first_seen":"2026-07-12T23:37:27.869622Z","last_seen":"2026-07-13T00:33:59.119687Z","times_seen":2,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/link-BJqbPaCG.js","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.298Z","timestamp":1783902809298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /assets/link-BJqbPaCG.js HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptohelper.vip/\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"f40a7fbbe5872a25e7f1eab5204c40db\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1a4324e1a10b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9615,"size_decoded":4026,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9413)","md5":"fc621d62ea8dee4b5d96f617f5413c77","sha1":"21ab864b71cd46a388ee85146ddc9063b2982349","sha256":"ab9b022a47ca214998882fdd21e6c941fa66584e73658aed4cec3133aeff08c7","sha512":"33ddc0100b9b1dbb83c05e75e16bd61bbad94ae922b80ee2c131b90c2ac72e62dfb28c39d7a53971efe5d6fef46b89ddd13bf90a3d178a42417e607beac6fdb2","ssdeep":"192:OS58xXL79f3PVVGNImrWGcHwtHuLACJ6q5SjGnGvCBr6E3uDvRVDx77:OA8hL79FVGN5SGcHwtHuLZ5SjGnG4t+1","tlshash":"ba12d6f476d2f1a583f5151601bba606f22e0d89244d8004f2b5ac8e3a7850fd6f7f9d","first_seen":"2026-07-12T23:37:27.851562Z","last_seen":"2026-07-13T00:33:59.120543Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/.rsc?_rsc=KsQaSH2L7Z4e6Q5N","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:30.026Z","timestamp":1783902810026,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /.rsc?_rsc=KsQaSH2L7Z4e6Q5N HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/x-component\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptohelper.vip/\r\nrsc: 1\r\nx-vinext-interception-context: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=6yr_ksXoBIOre0ypGqDKCQBzsIND7qjzLgbyGQ09V3M-1783902809.9708254-1.0.1.1-i3XurCPR5abWHL5VQ_lcwMKrPJkcRT_WYoBE8fhMCd1daGwiqt80TA_Q7_fpyumJ06NWSeyVRkuJ9VC3f.Vx3.AHk4GkTFCGO32.8wFy0pvMvQ9xodffDP8ABFJB23Rn; cf_clearance=siYe6eW_SAvDLVXoEgJRBJc2Vje13HPh70Q8jd1xdyk-1783902809-1.2.1.1-sc0MTcs9JNLHacuzT9A6j.HTPh2f8btVNOaojesdfD8V86P1u8Xm2Th1efn6naAPLKlzAgC2wiQxiGf4HnUSdBk.AptfD._D14mliLj65DL.CSLN2fEJ98igIfmpl8Ui.w.U21M4hjPiJRKasdjZXwDlMKBXq0rljzqBbncnKzRtLkbO81k4OKYdR6v9oIIfjAMJnRmFcmNUs1dhlhFvijjMr1IKSxho7LzJGQMipe1IfRxjR3vAKYN9CnwvyuE5XpVtsp91aofZFRAAo8j7QfUxvv9MS1KYAib3TTWbY6k5Sj2NASnc3UFYGLCL54.LsCiQ_de3usS5saqO77yrKw; _ga_7VK8662QES=GS2.1.s1783902810$o1$g0$t1783902810$j60$l0$h0; _ga=GA1.1.1178209334.1783902810\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:30 GMT\r\ncontent-type: text/x-component; charset=utf-8\r\nvary: RSC, Accept, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Next-Url, X-Vinext-Interception-Context, X-Vinext-Mounted-Slots, X-Vinext-Rsc-Render-Mode\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1a43252a847b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40732,"size_decoded":10362,"mime_type":"text/x-component; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (12974)","md5":"c49428aba2af55397096f2540ac44059","sha1":"379840c738fca8702fdc23df42db005bfa1c74b8","sha256":"3b3982a22e6e6c31ab746d781da7bf1225cb2392d6ae6f60e2956956d62ba37f","sha512":"7c021976f46b85bde07e769b18ea346a6b919b2fc157decbae3de46df3f3059e07548cfa191048199f97ab85d4c5d1a43dec0f9cba496187be309e2ebd461d6a","ssdeep":"384:vD9dw/jgtwCItoPce6W/Le3tvxTQXURfiz4Pkl2wdx2y3lCmXf9cz+oh5OxBjdYu:rw/jgbNEBfvPWXxRwmXf9at5SBjdxVQy","tlshash":"9003fd3f5b086a7d3fbb03c5647fd21e622d022f96951db6a6ae6e2803950b53d137c0","first_seen":"2026-07-12T23:37:27.872607Z","last_seen":"2026-07-13T00:33:59.121323Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/_vinext_fonts/geist-8ac0455e797f/geist-52306abf.woff2","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.265Z","timestamp":1783902809265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /assets/_vinext_fonts/geist-8ac0455e797f/geist-52306abf.woff2 HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptohelper.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 7968\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"7bb065bb02cfe38bcb0f3ec73d71b654\"\r\nserver: cloudflare\r\ncf-ray: a1a4324de9beb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7968,"size_decoded":8267,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 7968, version 1.0","md5":"dea7cff2e11a000dc4e0e913992f9c21","sha1":"8ce1f5e06cbb4acfbd5d9a947e6e87604950459b","sha256":"f689f638f29fff460a2d5749edb5d5c38d7bef0389f32032d871f23fc6ebb008","sha512":"12cb0e929f50e8ee0f28142aa2d0d7a2087c5e572ac5fac563777f9439d79e1c85ffde53883c7b91e539cd9a778fa72643cb3eb9d6ed7186bd04518a1533aa61","ssdeep":"192:bhfoainuV2s0ZcnJs0iklIEJQKQOBG66ypQBvxI/QD:bKRnu70ZcnW0CoQKQGLVmGQD","tlshash":"bcf1bfdac7295970f0f68d1e79783d41a523bed252d23141d130a46ddceacac286028b","first_seen":"2026-05-19T07:46:34.994553Z","last_seen":"2026-07-13T00:33:59.122138Z","times_seen":14,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/_vinext_fonts/geist-8ac0455e797f/geist-001175b1.woff2","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.269Z","timestamp":1783902809269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /assets/_vinext_fonts/geist-8ac0455e797f/geist-001175b1.woff2 HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptohelper.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 16540\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"48408de840b6edf2b99673d87ae791c2\"\r\nserver: cloudflare\r\ncf-ray: a1a4324df9c9b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16540,"size_decoded":16840,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 16540, version 1.0","md5":"49215a3bccaeb5d483f4cf8fceb24776","sha1":"66a33f6a78ae71cd10e9cce31bd3c987af14297e","sha256":"58a6b173d5ca1dec92166ea3c6cb1a84a4144556d10928ac14e8e6b40e4787bd","sha512":"2e09071e4ca485800a943ce87cb49d0aa28bb0894774f0d2e98f3f2a6d32827141535261aef13ddb9f28fb137907ee28d8c64bb0e0224855bd72fb206078a9da","ssdeep":"384:iwgjyObLwXx1xbmkVrx6WOIsUUjyqmDKflU:iwgjyObLmx1xtKWO6Ujo4C","tlshash":"0f72d0abad10df0ed660d3fa3531acfe5b8ec09231902e59b700324b4fe442d6ae6574","first_seen":"2026-05-14T18:06:22.109345Z","last_seen":"2026-07-13T00:33:59.122973Z","times_seen":184,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/_vinext_fonts/geist-mono-00e989178794/geist-mono-f6b33328.woff2","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.273Z","timestamp":1783902809273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /assets/_vinext_fonts/geist-mono-00e989178794/geist-mono-f6b33328.woff2 HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptohelper.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 6204\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"cf92bb89651f698abfff6636bec3e412\"\r\nserver: cloudflare\r\ncf-ray: a1a4324df9d5b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6204,"size_decoded":6503,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 6204, version 1.0","md5":"bc06a1ea50382b6956e53aeb91c889c1","sha1":"e79d03bf3f306cb5f72e58da4e48a77a58d9e459","sha256":"e27f657e38d52887baa3b6b2f812bef93dfdd356f0810e40edd4ee284cc7e9f6","sha512":"73d2f1084edbf0a04d37b74ee568238a275232c718c510ae4154cd60b0edc6a1d9809f2e00911ae2d93943f5592f20701566cecec6a18390f4e51f6c30c31510","ssdeep":"96:JGaIFfsVUV1CaWqMawayYQxvIj5kOA/RQNDlA/CUMv:4ZFffVbwayWOOUQ13","tlshash":"77d19e94d209985fe850b03c15abdcf5ad8d12346353837c466caac67c11ee9bb305fe","first_seen":"2026-07-12T23:37:27.882394Z","last_seen":"2026-07-13T00:33:59.123571Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/_vinext_fonts/geist-mono-00e989178794/geist-mono-44e03052.woff2","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.275Z","timestamp":1783902809275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /assets/_vinext_fonts/geist-mono-00e989178794/geist-mono-44e03052.woff2 HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptohelper.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 12872\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"4f346f1c69e58aad904a0db45d0b09ac\"\r\nserver: cloudflare\r\ncf-ray: a1a4324df9dbb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12872,"size_decoded":13172,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 12872, version 1.0","md5":"c10faa6c8fbd7a47d8f00e75e82935cb","sha1":"c2458988c25917f90fb76380aa01a2517d1aa12c","sha256":"75b3bedbebc35f347c0ae3b416aa871941555357e7b0f83767eb5987875589ed","sha512":"9875c5a123a31c9bbfb1aaa79fecac62287340a6d5ce2579057530f643cc168d39d8009288195cbef76281a7f28eec004c2800524699e50f5980c619c328d84f","ssdeep":"384:YaaWxJbHlaVhbI24HbrMQTN9ESleSp3uZk9:trbHlaPI2EbIQTN95eSBuZk9","tlshash":"6842bff1000c7148b7eed3f351a8eca29bd6b85129d784d4babe859ff011dc2115550b","first_seen":"2026-06-28T11:03:16.40915Z","last_seen":"2026-07-13T00:33:59.124276Z","times_seen":7,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/_vinext_fonts/geist-mono-00e989178794/geist-mono-971fb274.woff2","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.279Z","timestamp":1783902809279,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /assets/_vinext_fonts/geist-mono-00e989178794/geist-mono-971fb274.woff2 HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptohelper.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 7728\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"49e8b88ad3acef6a678bd1231d92334a\"\r\nserver: cloudflare\r\ncf-ray: a1a4324e09e4b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7728,"size_decoded":8027,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 7728, version 1.0","md5":"42a21c981b367f31bd04683072dae1c1","sha1":"7881dbe72f7e536546e5ea03574bb6538c5d24ca","sha256":"16e1d48b6dd29eb240aec5db36184eb182933c082cd43de7f35af686d58087d2","sha512":"0459d4291ac981fbb0b24bf964ece06404cd99f8cae26fade1700b3e48a97c5a18870564579110b7b469471a701250a2918c0c9e8a267de40f0f482bf4ce6ab6","ssdeep":"192:mmXK/O/lu7eywXFMvZtWkHcugIr8x7X5OlsVko:S/O/lweyEevZQa8lJOlsV/","tlshash":"a3f1ae057a1d8f21d03d627946a3caf30be94aa62b28edb193940558d833191f6e74bf","first_seen":"2026-07-12T23:37:27.846628Z","last_seen":"2026-07-13T00:33:59.124844Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/brand/cryptohelper-logo-128.png","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.308Z","timestamp":1783902809308,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /brand/cryptohelper-logo-128.png HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptohelper.vip/\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 19933\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d3a2d7d961f232dc6a48358cb71947e3\"\r\nserver: cloudflare\r\ncf-ray: a1a4324e3a2bb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19933,"size_decoded":20218,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced","md5":"c4865efb565fbefb5188a7a79d280c0d","sha1":"9ed35e55954b36cb714f2e25b7e66fb00d7c1d20","sha256":"ee3af207e62aa9983a5b5dcb13fb7b859da6982791514c2d61c82797dee81ee8","sha512":"271eef13bd2d574b67d9370fc4e8653dc3a476268b451447b889962d75b7ec617f6a2c61f18d0c2e04fa3e2b35f358f9530797b407aad7b5c357105afaae0a12","ssdeep":"384:x1nzRVH7Mf0V+lHEW6W2np0b2ruglFxboQrna1MO2n5TeS+W/:xZNVH74HrGpy2jlFHSCVe7W/","tlshash":"bb92e09ac48be408c6f2249edd5d6c54faa074914703af6e1f071e022ad5bcf997d12e","first_seen":"2026-07-12T23:37:27.857983Z","last_seen":"2026-07-13T00:33:59.125963Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/cdn-cgi/challenge-platform/h/b/scripts/jsd/80a697ecdece/main.js?","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.746Z","timestamp":1783902809746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/80a697ecdece/main.js? HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=tKxYaW7AArBYW6LAkIetVEUJdnJ_MYQugZkX5pnxyxs-1783902809.5368423-1.0.1.1-OFdkMLFCb5ly0A0HwEYK.Hn57H5SIeZB_aPD9orjWpKW7JyqNFtCqpsODGpPF46j6WBn8Z6Y_47sJfOwlshE75GOCGtO6P.YtFunsBZssDLU9lsy_35hNmDIWqIvGOGf\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=lMSuViopUN_KRUm89tjPYsth_DkQFlhHU0yWjamrBGU-1783902809.7484434-1.0.1.1-u5J0UxjTR75sRiCr_1Yo8ggR5gHyvxLb8CtZJBa5e.cG4WJGLXuGWjWmMt9Mt8Sr.UOBxo4HthEnW.a7Ms9C35EXdxBshkUG2Z7MvJENDngMUkDsX_sqSWA4Lo6dl9RG; HttpOnly; SameSite=None; Secure; Path=/; Domain=cryptohelper.vip; Expires=Mon, 13 Jul 2026 01:03:29 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1a43250ed8bb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":20903,"size_decoded":10012,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (20903), with no line terminators","md5":"6f316c8db0d02e94cd3993d37b204f0c","sha1":"d683bb454f1f5ed8f63390c61de0cedce9b47b6d","sha256":"f5b8d8e600cda1e431f9945063e1911186741756578acf09e7a4df9f11864ad0","sha512":"e1c6a97be0323f5f0d9fdbf6549b8d94285aaf41c79a5cc9a28f4d78fce47d2f0d4aeaa9ded4b22ef4abe5f07a2f9a3a9237f10b2500d5ec17a9807f78d9b591","ssdeep":"384:BteQO8hSeEumJsIqejNDujQh5DVjAeKQ+m1p5mqQ3EBnzSp0OfOMEJHkJ8CjWXzl:zeQO8hSeEumGIz1nh1+mRQ3U1aEJk8CU","tlshash":"f192879afecab8056346737d007f30cf6d7e8c8cb1244a59c110e4e47da5b59ad2aa78","first_seen":"2026-07-13T00:33:59.126954Z","last_seen":"2026-07-13T00:33:59.126954Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/cdn-cgi/challenge-platform/h/b/jsd/oneshot/80a697ecdece/0.8321024729898276:1783898123:oVbn3D20D63Recf5CZrBFz2uWe4OSDCXo1hFD41IN6c/a1a432406d75b28a","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.967Z","timestamp":1783902809967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/80a697ecdece/0.8321024729898276:1783898123:oVbn3D20D63Recf5CZrBFz2uWe4OSDCXo1hFD41IN6c/a1a432406d75b28a HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13824\r\nOrigin: https://cryptohelper.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptohelper.vip/\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=lMSuViopUN_KRUm89tjPYsth_DkQFlhHU0yWjamrBGU-1783902809.7484434-1.0.1.1-u5J0UxjTR75sRiCr_1Yo8ggR5gHyvxLb8CtZJBa5e.cG4WJGLXuGWjWmMt9Mt8Sr.UOBxo4HthEnW.a7Ms9C35EXdxBshkUG2Z7MvJENDngMUkDsX_sqSWA4Lo6dl9RG\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13824,"data":"$7ehKNL2dblDDukFmuH2ueOiYEemVR1vlXViKiaiB0-ehluAHGkS+lU1baqt5ctc1ZFFN49kjz4LdTuVrgLciDZA1wpQGxNtkR4xPEWhbAJtDLfWrRRD+3PcYgjoA2UIYlqbE1FjmddjGViIdilKX3MjDHaGi$7i7o0xVVKjJOvTXp-Mr05NfnlLayjqxsPmxhxxggELCfheGluB9uEzasPCR2Y2cNyNkX9p3MY7rCYcUmA7+MiXh5BSoz$xEOcUfDlvUEY$DfLEFKiTBsSmIOx8pIGgDiExRQC1G8am7Fqvw$wrtHZjOceF+iYCWwl98oTnZQBFEXF3SRDONAhSspMuhguaf1fX-$nwP+5jmjIvFKkoz8DZCR3AmvmTLUP7q00Svst4PGLSIgOBwxZ5WekcKBFFYyCiKUdYiMH3-cWdymWH7NSiMazRlSyD71jmkuq3l-4d9buCF+DwcQ8UE7VeMsMW1ElatlqNUu5gjzl8LuQThFFSTdbQAX4Nc1HQvDDYR-skvNKy8s12vW7wLjl1K1q+JJOG8FHP-KqY-NRMl3cF90qptTSM2ZJGZUPD-N-rJrJeavSYoQOJEUKuslOXJBchSMKa-98eAn+kTze8B11908bBgKKUSVL3S7D4AIvyoF8UlXyltM9+nsB4c-LfS9wIu174TVDjEnFAzgOf-uA$Ox+oZemuVxpXfSJjpgxLlNxdHueAbvhd8lIAgeqeHSIaBTLJjsi99JuHjkF8x3u9HiEI8c9uV0AhFbC2+Olw5xppEJQ+sMqw3uXWLaaK14YLCkJpLlouuhtHrqi19Xf8OsVUwF2VU-gwx7urT97LpW34Bct$kczz2qHWR$9giYa74nNXgoTcZxW1lgJTA+c8RUTRX$hm8u2DcxuFbplPRAtCNSqiXn3b8JZFZLbqcnOL5G5-obWKCDUaJLiEX2E9ITVVptvMtiFJB3DhX2vcb9pADcvCFIGoUGasFifXlhuNXhM4ClmzkFfOTvWj+mbw8j8Qe5K9SXSMYbPs1Czi4nShN0zLB1lIQrKiCAqrUVvqL5kKV112gzBKhXJpl2$Q+VI5c+hvkPL78$3mJlHAfzv+4VjJnqTqkToQ8tqfKqfoS5XcMe8N5MPlxlMKsabTYTd$hK4tseppE3bszXHkD7xN+o2O+CdVCLlak5Q9df0AicSL9$bNTyZXnY8oOZmHEZOJxHy8voeHXwbfTEQ3Gl5pQajuOIeCBwRSfLX-mWsPI3O4DkeOh8-IMPa$BtQa03$xk7$DbRjpyJCJKb4zcOKuQdm+ha5oC7TwGqtbDEQ8ry7HlPnjhOxfNMEoxNc0f1da-qZQOkJ+zuPtOEZjmL2lqiYh+ZrP4WAZLmQ1xZFcNZfhBgM+7M2cefpE8WUtwrFxLuFWMpropstHyUH0QFN2DgQNEGRR-+j4XWVk-jO-pS5i7o9Ie95xuB4+soAglWySrzXlyETbZI93qewaO-vkp-k+ZIv7uOpFi4vWGP8O$3x$JrRppqxItZ83lSYZXSSbPgVFvIP434A2Wd1oIRB$fFVODw$CyL38C-5mf0upEdg8Q2qrx0d$Nd-zBaclaNwUB4qSxtsuF$pOARCgEZk1sYm7R1yvOrzHwoVzsfYTkaroS3YY2ztRvMsMw1-d+38jtzyB5z1fJaB8OjBE5Sb9+9ORlt9wjkbDbFoXF54kJTt2xSePVAzHLYI$v0M9x8vJIG5MRVTP39usvKd32OOkV-HFT8ETm0fSQqhCXHQnk+885aWSp0J2sqpws$ESTPLL$qbR4mPQ7E8AGym4OndGia$E21eF-gYr$wcCsbvAIZ7XVdAN5T$YqcwjMfCaXFTcmHWl4CGyT+wVDXW3PteDJeLkKxtEKmtML0N0VL2iZwFsGVPsuGXiw-5oNhmBnfTn79m2$HLKQ25flIuYduNoE9Scy952fozits3U-ZqiZBjb+8j5e7o38KIbj3SmaXeaDCX7VHT3m+k4qTbFGlUwblNROGkcLnzZgCevmoo-ghy41peHaVZPT4+zCUz5hNJmzZ+UbkaVV8MQM$l$YpDHEmWTS3-Yj+$j15MbcpzSxcamQLU7+9GYscdNUq82fUeXgu0+5IBDqYbXQ1dOIKGSeWHr8PosHWb+QwBFoeI-fs8pWVEzvHuFwKosksYJvcPFvM4XScvwysEFPfRr40NxqHu-NtRJ7hGGwUrKdmc0HMvyu-dQNJnwMCW-xuyDRSfMfAlw9yZoLgStnM3$RwSVJzHv9uUoitmzn-0CTZ11KOqBBzNk8TfViuUJdNvJ8wD$UieD+YKxvySf55kMy3uSG9Kg5dQgIiI9Bw8P02rObx8iU3OqCttBHw1pG5BYpagEtiGz1hmZdiVqRCB8oK3wSgmkh2oje9nWj4oZCvkafJASpxmiet+-PeB$iLjMcEk3oMf$5zWRXayCVqLzbEvGj$fWm3Qqgz0QvlESASeipvKEUYVu4otud4v+U4LQIvDYgDCOCFRokPuJLwVkLvrmuH7yTSVGvrH7ei-mRpqKSbL39Qmn$k4fp0YhbVmNBzK$aYKHjvzo$ovRcBxdQqvFOOQgkkuTm$JQYPOGm-FDGDS1JAi22vn5MEQRXyLwJnHkqhzdx0pr8nCdLHqPeD3TIA4PLXMXB3Su+Xpwk9gkXNx4AbrHZpc7cJ4yRBHY3Fta2H3uFH$47uc0hbs18pimhv22bqt5ZQ-bgoPGAvGSAp8JslchplHh-fIkMCKycSKJqrTZiAxiO-FHnXIyCqFCVSRaoVKp8r1THU5IKRcnOp8gi-l4xebn0PqhWpcF1+XHU$rgHRLswTpNbyVRDBNA1e9rmZztxLP8+7-5k25El4YCbMQpAjD-2jlLjUIwjWo4dZaMOGL5oJwa-+E5APAAzEcm1qepW$5qb+rgVuXWl8RV+cyLcE5IWRosQ2rONvy7Q5mGcZ+MtwxdUtfjwkg4l$pK7SpftfItxldpWrltKvXmD29vbYgMan9+vb7Bnyf57AN+yFWEFRxnT0AKQdGhkUTURAZOEdYpPG41Xffqp$jZf0UVbfy5a1WL1DdGP2FrGrclX+vdeUriHjQTPN2I9iyVZBmYU2sdTz9SJvx3a02b-$E+lFRj+qtp2$$9KX2I5plidNgDH+WTBizQAymOzun9WzXQxdJMxUqllCRnNDo4t9nXY7eWjia1vhO-eyhKkWYLhKRUSOXkiRDOzKzPwkZHgHTKhQ5Hw$i3M+AApLjc9W0yNHXsClHlWTjrT5y2RTc2wwTQgWh74lYrCCCp4Hp8xIvVBN0$jaLHrSZgMXnyQI8fXucqjX08+dHx+i$Mdh8NCWynsi442tnWDAZCVvLOeGYc7umih+Q8suc7fjtd09pL4Tey+qsxRjUP4N2ddkiKsgiFwNLxkDCaxm-BQ$mzq4ue2zdNIvStNr9LWtsIzqhelvqolUj4K3crVf7k2+InMbykrqN-WCpMMSvRyYiRN0a79zkmgaFShTMnTReBVdWF-rNj2l20CwavYtc+beHBLycEwTmGDLJx9s1sn+Wv9xCtMb04aF31IAUxCtHnONGy4FDwUphdfEMLFRLVJn14AOYyd-9nZmrZwkJ$f5Mi$RNAHOZKzAH2YZgfTpy-5HNb39RHqiGIniCBuAtjgRzETbY7i2o7O2DpppICLbmgW+NogRm2lgnvHcrGGlLVqELq95otE-PRB0KfFh70feB8bUQc1GlV5weXJ1cNCDkIxpfVAGg9KQoEeieXvUPT3SHetFmX1MjX+tTMHm0vxGXwYvYmjbj8omwnKY1UNpSFgx41yImbC-ACZw8FzhIK1wdo+nYpl8C9Pr8lHannpZRtQbUJjzRr4Exx4Hxqb3P0R8ai2uCTQ0T1BFCimxlXMHktwJCY+qM$-YRHeic-dxdFquH7HrO1B$9VTEZpT2meixYpfKuU5j2Fjdk05aqXA01TTH5sNn$+sZq22xwpgUOsMW-BREZwjfUrb9YdLY2EzMiUlWmEhtc1g+RR$VNvyPWDsRdiBqjbobly4wXiy0sGY7aQ1Fr$5PAG$C+-25yMTnvlkReGgKS22zesnp$hYzfcKFf+kE3UFQOQmkGGeJ400IK2lKj0Hof$UFmfCs7fLBmVA9HYnjbo1awS1Kzqb3zmlQtMu3$7OXllZPWGf9fNi1$s5V2+Rf+yMEsXRLa43d7P5qpGbEtiIriZJqwztnVy4wfZiTkf41y5RiWWxtoASe4OchRel3$++9TTPDrYfVV7FbcFRmDqedttcnMBAkfJ+z7u$DVY-U8VS15XtyiRh5t2IbRQLAjxGb1Z7-0X5VNd0$bpCZPkURJmggRUGj9YiYGdKAbKAWz4JQ7gNiIuWVHg7u2W2xKQegalj3T3+bTiPQEKQZx3ERRyFJ0$b-2qxqqWas2$UgVM3n0WIE9LOzB1VwGHLLB-9lF4UMy3trt-IoFbwlwGMJ$mAyLGcxKuvYqfHzASjgyFq5TLF5n-N0ZkJSjrJJkuS7sx7cOJxVYqgPIJGd0zUAALgJ1v-E7jbDszFW94EJaLulDGonM1C8scbO01dMKR$NRNpQPwFkY7fjTBn90OxSBwnUeaWW90RPU7nXleRqfHEbnGB8WNzlB+onlKxwN0aB$lUJfBbNPqjdTa$RT3Q+ZyM5YmzC2Te5Q7-112NvaMcNsjqk-X9UtUg+0fWZ8xpsv$X$X2CucsBYqFvDHyskiakfOKOzEPGXr$PCfIJqkhrdPJwkFLOe1AQQPQWxCdHqFaJdggUWjC7zOS0gRyNXXV1byzmWqDVjeY+Cje4EySNAO7hpjgn-Z$v0dvzVdgsrXbrOaGYfz8sEG8GOJ7psmjY$JrCpBFlylrgg-MhwXRHC75aryJGJMoV8nZu8S+bUYiDtaYU+8dN1oFiqTjB4y9ovkZSkoZOgPSJo+UcCab3TqL0zHunG841RYfME4sWcnrfTVPeOUvS5xdlYqucjqFUuZYXzfch3x7jWZ41Napfvxhodu+gts3jwyinLqql2GoDLUU7bbboNqjiiTqmr9evPw3dAOrLWStpXJ4IJLkhVytb+qfeQVYrEzshdmE2kIkrd4xBG4WuuFaU07Tmp4AC4WGSkKHf3h8+cddygeMw$Onax25yDGDhZl9HJlM51qCNU1rCVGmDo-q3oaWAe$s5r1$loBRMlqJR1AMO2r3mmblvU5t$MvlxpQZ1OluvQVG$CKCJzqYLFlslSRQ0-4ObnUJc+15VPph+YcUYgbJdi+3AiX1bxXzkQyo8D4+sm-4DOd9JH28BQ$mtZC4pEMuiUgTMlcRjeSj0kzJdTtn+KJZ$TPg+B2hfssc1sY8-DK0OxAiwK4UKUxPuRlvTKiHlssovycgatNYkAtOwsDQ+rdSridgtQeApBGzwhAFNhnUp00uwo9$sZbDF2NErVEhadoiVk5duabEFwq-aFjN+zVuPPP8-C85RmBRwnEhqNcdkI3JJuCB3XrvdKiMFSi7-oI9r2xny07oF-Lkvof52olfBYqdb33f3B38bv4YICTx1m9QEEJcuHoH2tBYuOrQ$TXLxbL8KuQcVQALy5WzpYWPIONjngjEckGeR1vl52mTV$IXdTUddH-DKxx-qm7I4FACFxfXgt5h4U2GWMb7OK2pxkmTgFM3KAURP3kBd-TPMkO7$dKcEglcV7djqyp1p1ScCH4jT9h-jDjdt9773$UPseg-EYVqovI3cNSjlJmrX+79R+cjH0yoK8zqj$mDX1Pl-gqlkWRHkjoveUqpar+mxKeuKc9qrASEsn$$Q7y+Hw$jehuH1uBG1BIwSXuW8pKRaIbE$FBVrjQ9KBhZ9-2gfe0$iPQiix3KfvcBPAIPzS4nGAB4KORMCprOLKoC7IwuhzAVRC1aYtFkgBqANH0gQJkF+RYXmyfzlJSXhpDsXYL0ZVtqTIariyAQmS$9J-eh4BARm-WoFyDcuQPq3FPhJBaVpLRJkFfQ+z1J2rB7DCivO1kDrkYKq-ScPTbRBRkIGAyQWTJB7Bptt9a8iSPv0oIKfW9ESbtaxiD-L74oIo7W8-zZlXsr4XopnDk2wreFafzjVG+7c0IabvPtsAPcxMvEe$Qz9UjoW23+3n5N9vXj5ewvhs$cWhBIvZWFHQVnZCXqvd3Osi283qUF1p0EA71OIq-IU$AGru1DyfbtBkNuVAjtudNONl3qUfB7dF9P0fFRnABS24ohB8cBd0DKG3AKYNISogu2syH5kmb4gd2fF$IEOa3ygO3GS$0whWrrio$9Qc+z-iuZiDeiSJ9MQwHrU5bU5imjA+pG7LZ44gYuUKq4b9kckPyfOoK0mU4xCgiGJlsMrLSgb3EYJuXDxsbS5TrgzIJVSX8ZJHxXDACInqfgLYVdAjjXuBcWfKfz7az-lse$WKemNjV2lj4wTRNjIVM-Ach0QmMoYP9ct2PfNde3WMgJ$YOFaAlNPxgjjyRLzMYIr$o4cr2o9CENQhKd$MabMuOXL$G7pzksNk-RKcpA2ZYzvXidVxUQAb4PPW5dRf+zqdBJQeORen2t8l4bF9gXtPvvQh8Z-FGoNBlbc2AYQDEL0GMPWmq0-1TXBluZhkP-$8ASrEqNUcUbx-pn-qKa$Y+RoXVxtje12tOxduoh8YTDackt8eVJMXbEie5gDnx4V5ROmxUxtWrJs3uMva-zD3dngq15jU-0g0GlvWsMenUGLhttM8LXOnj9Vk2FUwwcXEqpyPgYBjM3KRsGCjFhrGZqiQfdbMkF0eNeTdrQuRq7Qi7y3HUoL+7ordSbDwp3dm1L5bz9l+qOw1ICzYzK8wMlOAUy$kcEtiSp8vuPJRx0FuynLITWe2GjUS9n8fejhbX-D8o4h$5OQ1k8Y-aldScZfnqx2ScgA7rD1fsrW3PQL$F0Vp9aYXtOD+-gsdsp0GNfQc4I$bSh0cTrXJYHR1zQE$IrISzksbh5wqN1j7kPdgRBQUNBYhHYsxGqGfZM$QkOz1tXrNl32p$-qrBMWTuyWvZ42j1b8QMVjwF4JeGNru+vgosCf2iuFjB5r4lp7VDfCXdF7kBHH-HI5xhGzsITkQhwgpJHYtjEGS1NXa0zC2oLk8pMe11ljvDWzSdELHfhBGuX4gvKZ9Uyr0A+EWWY93o+GFkgGj1Ry9BJKiZQI8Ny-YsQ77q+DyREpPSn4lckAXPbC9Qo00AUCMvcrWk-zdStS-nXBT3ufY+$EKA59MH4FAYUscC-c-gF-OYmNJ9GjyY+ZsqIbJ5s0SqUUx4HtBvmKLILYxEOeoMR3C4pKGckNdw-fRNYWYq2-q9ZJx-XsnoBtBUA9DEScyq97iqZvCYmvjHWwtb5oN0dD9s--tnrZxbdhtEKy9qDCPWxbMmyplzvzn4MMspwHZ34MeGHD21+RezHP4qiFWb5P$EfWBvCT0LmUvMHvKm1Q1TUKMZB-IUnw1jKqhv3RQaoBRs9WZjKBANKR$HKq2fiiHjcJzhlWYdoM--CjXvT0LFMcMsFhMhOE8I-j5E$dIWfyt0aJBDlWY$b0yvMJdH3lTTg5bVcSWRqyIekRP2KBRHAFeCn3kXhHRkT8WMZhC5QGlQE2vfzZSA93lh2jHNnqPEK4dT0ok-i0aKP3xM4a3Mh0PFLJbQMMXxMyCRo25Ye--ZBLSDGiNlX32TY-J1kt7dJrUPB20MZxg0k$CMaQaIhRGAT34ZloggKbuT1L5c9wscxHEbGzAtSAGHNn8MrnB2w1Rub-AJ13ZXMW$ygUOiMcOoMxgLZl8EEBsetnxAsBz8YGg9ssamUvu$532DXOtqDPm-SixDO34QMTjS5ntECHy4vfVqmie$7HiEjNwDUKi00p1OlD+Zz0dqqg9kSx3MjvoOppngSMtjUt4gxoTrNOpi2qosl8cgvKYVCrs8FX2+wB3zGO9+EHs9DvpK1oMzB4IeUDZQdtX+kTw1GNpFYhPXUdvwrVW0fW8sDH1iPkMIQ3CW8YCFnSX40itWGVib5$4sBLrJCksj8PBBRhghLVagQhe3pAVPwF3MEayZe2MDPEd5yNc5IJxu5mfUuvJ-Y8q9Vy4RQC-ODe7aPwNN0rwuAJx5BNFiy7PfORuTkwbqsaRME2QS7Mnw2sJl$Vjm1Ot3druKSoU-XJMKRvTyHNdPh$Sq4$4XSxl4a8JtEU7AgVFNYzv4eZUp4qoaSm05PVvFoLlu5ulrbSXrhXMROa5b-T+Y8DbBIZJ5aAtxU-pNqcBNVPmv+5tIBltGgiKdPsBiA4j4lwmhfBaBsZ0d$+72Wb7QLYqRrWiWJKfgQsknpc0x-lfv1VDSFJzsGAXTOlx2KY5LKesyOVI9NXRkpQD1aYAIQwXlXQxaOGR7MwWnpD5iJwOhzenXPA-cPBwRAmpfSkf8+vVAdE80QHaShbET7-TJbieaV2Bcvl-lAPhp5Qun4H+xuSNwp$9L24HdLlbJ2RkTGxVv1sg4EIl2$xzmBeOeMIGX$Uo7SFTnA5WsdZ+40$jHW0TLXuyEWuQfagOHyHiGo8d-WyESSuyxP+mJw2aNpejAgiH0E7j5XkC0VDM7QvaUIlTzF4Q52$haGoZg5AcAi2a2POb5-Lh9QDhX$$sCEUh-T-NvyHjquJhneIjKXI+pJ2eGfnj9xsV$rkqzo0h$3b3r++MfOsVwN0oHfo+W-BjrdwMnmQqSEiVtwMNJeFQOUC-5wQSOTR1FElfRCE+xx5dJx+sb8y3tL$-e1DpvBYcEDk$jrngdoL8SVKqrTh8oCOv1fLncQLihyYrji8o5SQUgyOJWpFS8ohq1-TLBYTtvUY50LRrFSpOTnKi4Ee1UcOQmd7rkqm$vb1y-v3p5JlXIBFByCNy8RvzdSgaS1R3Q0oPbMJnL$KkrUiLeFbz7Sb4qp8NMVam$g$W3tG-95grjd2zETVWqxvtxvU9GcoG+yxY5K81TMLZ5nMFeWi03lviJPyaXO1khE15d$f-+1PUdVPhMqzhBO2V7dNDTsx4FoHEJqNFL8BLT5Cv-fMoSgQL08bc73nbsZ4Td$dUpuxn+Z7DOTxkkDXtHgBWNtM8gMDKGxbc5MQk0PYSXLEUNTA4TtFRKx7SSHiB8wfjCDobMDKh0Xd+UL-ktD0HWq8wNwbH5hi19fsean-dHx37b3YDMcn4f+CbZ3SO7+cQq$R8c5JGb-mgmMlU+RFhK8i3dLc+T$GKo4jBee$kcE8YSuZ2zL2eY8-jCl13VsE+qOjkHFL-eHusNm7rRflbkz$iBs-FL934gNxC3GhYvuH+moT$ie-a12qRKF8uUj91GISCgLZyOu5rMzK1BVMugdXYc2X7muPBcDErBtLbB8$MD3gIA-CGYYPLHx1WbHpRg9$Vy-DjHfYt-NdXnKnej0PJXZqXBju71lKZ-m3ZbsApaT-QilgPGYdCEMr1UK7VceEAbdW71TPS5Hsm4VXlqrqBVXS1YbdkEHHwx+PHl2rDhWsGuPC07moJN3p91h7N5CH9dWBYZS7Pt$JSe7g9JqCgeqzeMGydO0zLOCXNkBeY9AABIkmcdAYVeV0rNqkMbScRHfCKiICSzBcwOtuB-VNfqGqynsXts8qHsLd+RFsqPFx2B+Wj8gQKQi50R452exODWHlNvMoZCuRzm8Jv7ljvFNWk1vpsQ-VIRF4bwfqyDoWDa8LhhP0sLP1nHw1oXz9BFQwe$avyk1XDOV0F8hooxKmsu8YjKkQtIYpO8uccDUgdykdpyqQmBVh8AYFXFpCmlUJACRGhOHvht2QSMwbcz0CI+-hskqDef+$DAIE9ppUOA1k1dQxObhypkwhTJo2JAFvzG54R8KIYHpdhG8sSze7cFvdyCx34v425o4cquJ2cHF8pD7Dbk59EGX7MD0MlHbCPU3$trvZWp8WSCErJlilUxPR4rnmCysBj0EXx55mziNr7FjUhVp1Vs9Wm2z-fVsgqKeSnAVWZh8I2Ta8+HmeIm0d3dvlm1uqxhLYxR7An$2mytDDBXfJCgGPK8tMYswJxj2AmDyOB2DfUm5pH7e4bBZQ5Mi2J8e3w5r++zLoWPy5jvgFq-FTDP+xi$C$ZjHMa49GkpRfHkTMYOCFx50BNC-X233SDq8kgaz9zonYEiSGxXDTTCxnzMV4ekM-DyYOuNqd02Wrwyo4OVv3UsKOd5eJRjOkllkG1x1L1fXHqf+JUxDccpv3chyRvpZWS+YwEnh8rxKrxlJ0+cihCu0ZGSKQVeq7MCvLzO1IURfWno8nJDOhLrKS8aEIZrqFSqBJHDccosh$whdb5++xxg8WJmY7x73TrVeiXp-Dtm94GDYdT3Il5zH-9wnpfqBIye58hUpZHNZ+peOk+kJm1XXEn8i9eXUGdmQZGnqpVegNZDFL1ZbAG4-PhNvEGbiLrBS7rlgMCPGXDdqiiCJbPEIba$L-d8KMLGiSLK$MJ$Midruly$AsPzckfHj7NalBbr+0K3qyQBceAmh5jqvYJQfCucKqny5uUKelt-WHHZLkVeD8rQBJ7mSiqqMhN8lMcSQ-AWTk0oezANuJplIW$j181mJE35kOWBpOc$k3cg$njSVUk9HInvGh1poOKoXdN2evGlBPoauzeyI24V5JflLgHrGapGnwEmzf9OXFAVMNtTz5Go5WijYGk73pcUSRbax3MVO+Akx-7U8LWiJcAkuf47KuzCbWX+FL97pnrv+x8Dfx1Xx9EhKn5udz4cPK8fA4nZZiXW8PCLmQCGWgS4gVN3ISoWRylKkW$RNfiYvXfTRc0qQWnqrrZ30I51jlwoFucr5NcD9dD1nUmR-1bMA8LIqV4pEAXF+fUuYnZev0+8WkLhGxocL3gMiqRXu8B-lYU$5YNPJ5yv2QCya24jxvGFAwfPHv7UoBb280GywrorA1jNzSR9YEdcXv0gQrLIMCMeXxGg-EOt-tZLql9z+zDpvbjdxdaeYyMjXGG+PVD4WWbG-kb5UlUWqa5Yh9ao8ZnYf5IAgPfG9-AQUi7-3sCgyLlEYt0a1znvplbzL+bdPpzn-Qx9+MaktJY5kShXENegPcV$B4sGNLBa-B19mAKL4X5Iwba1YJmQ2NY3-8mRBbO0lJfLCIR+ffgmgIc9m5p8yqj0rdJqa5ZlrdC4x7DnUEK71DnapejP5+qE-2MHLtGh5sqrBlIl4uynOS-JVH7EZ1QRMxkHxNi1dfim+YCWHQFUfYt9TkJyXcQ$1-x41H4KoalouNJT2Kc43k94Jtv$UczSmGyocPB2aZfScp8iJxeZ-bTBSU$qeWoZqET1Dqtb13j$f$-LrUCstmkDEewNSVXcSfPP9HMnP72$JqYbjXAyr+R7iE5v3GGLfAnecbYaybiZxo5+CQ4nIMmtRWG2mlDxqBxMRlXOA2kw3CBmnhdJFNsRo4sUKe9gPyFINDqcJ02tNkCrBO2npCvLVsGqHq0+Sq5AlfVy4t7EEQCYrhQL+3oPCYAGdT7aTgTcMjfhst89L9PJ45bN8mUzPvYJKbdLJkXG3QCTmDjRlaQM2$$iLd4e+8LHUSBXVHRG1zc-DW+x5dHp2$xwpIA5LP$UMZWmFTejkWk7wRD2Nwn432y7UKDXA5RHINghnSgkAfh5x2hwVdHJe1k+L7t1C8JZuYZPB7GIcyKxTj1HcVIkiEothE7JgbH-OUDnd$pt-P+JZDTqGhvG5SmVXlus7jt$SvPRNFIkx0Pr$KZIrD3$xhkiqujI4jEYIS2JlINi9lsYPqdDEk3l3XPzFnTyPZnQpf1OrqQOLB+utlFgvA3iu3FoOZmXEjJaWeKESVwvnI0+haFp8JrU70bfbJrJlzqa-QRYpYweR7N39XFprEM1W7A+Az94OhkxEGOgajqqcfPMLgJokEoAzAS0vlLgLNkwbW1ITVeKgglFP+R+YrL5bCI$dX7wCcT08WxTSqDFsiWzgc2+I5XQTE085yOU8xAQ5ZAtAyrrB9WugjXCylHhfkl0KeLJT5q2beI-opLi9Sp$QPYihjStU2zYVqeKRcbCSon0SeYP0IQZiyw3HulIpxqKakMgeLVo1uo$e1ojpW$rT0JwGGukQrpKdkTGAklsi3owVg59o8L4ju8Kh-wjMJBkEBgnrAV0KCAggORY7hpXsTYHsxGoNmYcnB3nxZfUmqnXcUv2ZPsfOqAmFUHkh3PSL8RrmWCacBscYazF9IBc1JOhhIrsYVyZ2eh9uUitPrIXVTehQdKy$zF11ijm7jqAveSU2NzZThBV9xxR2LOEvtJ222LArLuXgbxr7udbj+WkoNyqV0XeMgt2ygQKmaLTTB0L5q8n5u$4pE+pTWkjWEJY2zA+rSp2bLi5fFxjA0gZSCa5qVb4g+Zvl91Bb-S+NeXd4QPqjjdsJITF2-MGUysQFol8H4x4Z3UL3dIEhWuvGrkN30qmsQpZlwpG8YItw-T0Q9TBsmBFewnioi8aLlOWq$TQaCZzMtKJzyC11XX7NXAW1f1I3yhL7$1g2CY7hgyuVJVcOLe5yoyPk9mpBAIjfM+EE1NZxGXMpsZGjaQQqQq4z8VXwBdJtvfoyt-v-jerWtu$ytd4I5TBLuhnYg7iHc9PExmzascNKg2tDKCGER2JT2wc2XHnkGRi-wfd5IRwAlyVFlu30LEAiNdCpzFy2sNbTkgGqik2YaJkuBJs43gw3YeOoGnDp+FEWWxbjJews2+CoRDxQ$EaUyo9Q2bJ8kO5k7btTbQSetGaZ2hc$aC2N-mW5sTO9-rU0YTdZUW4jwbwZg2nZ0HI9KyFrGJtCN$dapKCDRGoAb829WqnjYbJubQTWXHyW9o+emuPj8dAQbBm2Q972RhJ1c1wKh4S7G4HHhjJonlofz2Y05ry2oQ4Rt9bvYTlNUqc8aQIOd2WM92GZThYw-WY+Ab2HSMDEOiByJN+uS8NsF$UJKf-IkczLKbedSb+jS7aUqoGY9IWakEl1GF8-h8JAB97WNcwNRwUwwFYjUgRZMrl1X8qh0KcQejww5g8ZYeB$ENfb-n71J130ZGBSNtm-vcwhagc-t3oli0vq8NS3FJsuXEoPJYP5M-ixi$zrBHDFNQ+7bTQZX$SyrXKnILvhk4ia9U7r5DxgYOUyN57B3xA+FaKRqBPLbsavMsKRrWX7xTtgZLsfQjH2MC-XepwOY0-rFLUuf8ld8rPnSvGQmo0Chp1Uk0v-2RUQkpjqIv$9J0qTfa$bBsa1GeEuJ5RIPSNrU$ms7XHtV2DfuT-SeUMjcMqgTey3+jLm4fiiVqNnRA--iT1eHfUx0hvF3iAwIT9DwGV1rTNRWQhe+5A2HDuVIuM$8abMNL8ioAD9Tb1pTcfSApItc7SUVgeDKOxiXV-T5qswwpNuCGxPONLUE4fZg7SjpVf8bzpKwx2ZJotwI9bF1xcF2h2tWkCQnPQlHIWM-ILM+QmUG$M74snW2MybWQ+9ybUswRCsvKOJGz0h7TH1-UhjUqzgjyjCqluRsGWxra9zD7OsWlypBLqPhMvZswtmZTba3jM$Vctv5PK5L1$7lYhlsxlnIz1ul+v+Vge8MaosJpCNmikwWO4v4DN48xk+1ZfIEw7H-c3OkoDHbycn4D85X7Dv3wXFSNEJWjW7jLw-xOqvbnTff+7O9KMwFnX7cz0R8HF8NSf58$eLeh1bqXdzhMkFmyiKharGce-a7k+0uml0TRJ2Durv3bnrVwl1esQh0dgK$fqLgvLn5BLmCiJ0m1fh1R7ZW37s8Ch-E$feJTsAntVdnWOt-mLjC418MOTCbsj8VECGPLBLBYes9Vt5bmfDEYJjZIRfXouaUWPX2l7dU4h7V1d3QHQp7iQEbgpWySWzFiKerorJJAf02+h4cVdJp9vDmUjX-Dz3-z2pIKorHpJaVvGOKd7DVSwfkzza2cxYgmywlNUnlhrF+Jgb"}},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-chl-out-s: GOePzrL+ZkwHPqE2nlUBpdE1S6YBka7XRIu5QMKFVQ+h5nSM5BlpQN4oC/m/Y2NC7opAeBXvod2qgrkTN4iz0JtjvWfM1uw+wSXm6OW32Kq/bwunfLj3BQoF+pIzit26mRyMnBkRxVb0jp2hllf0KW0nQmTtAOJhSgrbbBjdbu99zZDNqtazy1jDNbMJpTIDm+RpN0Q5Vuq/y6f090tJvdyB9nmggRz47zTbpOIzzNZbZcxjD+Nj3356+PajvElSksi1ZPyMSLpfUPe6TJhoaw==$8pVmcT0T6QRgsT6RrUd0bA==\r\ntiming-allow-origin: https://cryptohelper.vip\r\nset-cookie: cf_clearance=siYe6eW_SAvDLVXoEgJRBJc2Vje13HPh70Q8jd1xdyk-1783902809-1.2.1.1-sc0MTcs9JNLHacuzT9A6j.HTPh2f8btVNOaojesdfD8V86P1u8Xm2Th1efn6naAPLKlzAgC2wiQxiGf4HnUSdBk.AptfD._D14mliLj65DL.CSLN2fEJ98igIfmpl8Ui.w.U21M4hjPiJRKasdjZXwDlMKBXq0rljzqBbncnKzRtLkbO81k4OKYdR6v9oIIfjAMJnRmFcmNUs1dhlhFvijjMr1IKSxho7LzJGQMipe1IfRxjR3vAKYN9CnwvyuE5XpVtsp91aofZFRAAo8j7QfUxvv9MS1KYAib3TTWbY6k5Sj2NASnc3UFYGLCL54.LsCiQ_de3usS5saqO77yrKw; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=cryptohelper.vip; Expires=Tue, 13 Jul 2027 00:33:29 GMT\n__cf_bm=6yr_ksXoBIOre0ypGqDKCQBzsIND7qjzLgbyGQ09V3M-1783902809.9708254-1.0.1.1-i3XurCPR5abWHL5VQ_lcwMKrPJkcRT_WYoBE8fhMCd1daGwiqt80TA_Q7_fpyumJ06NWSeyVRkuJ9VC3f.Vx3.AHk4GkTFCGO32.8wFy0pvMvQ9xodffDP8ABFJB23Rn; HttpOnly; SameSite=None; Secure; Path=/; Domain=cryptohelper.vip; Expires=Mon, 13 Jul 2026 01:03:29 GMT\r\nserver: cloudflare\r\ncf-ray: a1a432525fcab28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":16174,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T02:55:22.330136Z","times_seen":17202442,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/_vinext_fonts/geist-8ac0455e797f/geist-ff2310f5.woff2","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.262Z","timestamp":1783902809262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /assets/_vinext_fonts/geist-8ac0455e797f/geist-ff2310f5.woff2 HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptohelper.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 7252\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"54d0ff6eaa1fbe2df67445a7afe6fa8b\"\r\nserver: cloudflare\r\ncf-ray: a1a4324de9b4b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7252,"size_decoded":7551,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 7252, version 1.0","md5":"f4a75186954722ca80df35984adf581d","sha1":"e05ad86bd3fd6e9e03980230930aedd9930b9839","sha256":"b7a545bbb08256bd809f11cfe66d88da3e22d169ea4407737b1ef0ec1ed3d791","sha512":"aa78effa6ea3ff2e5667196f14ea369b099612799fde717ea6e9b2455eaa6dde52bb35f777c99e28d0c6ecb18d5d0ca8b83dfd886e51a971995e6e6b0fd0f465","ssdeep":"192:IQsGXwBOftX0l738235pQECRvKerGogNTxzEgIyu3:IBGXwBOfB273jpQjRdk943","tlshash":"79e1bfadb2305240cf7db0b151c69884a970fc1833e3b74bb80bd68c2827707629625a","first_seen":"2026-07-12T23:37:27.862814Z","last_seen":"2026-07-13T00:33:59.128691Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/_vinext_fonts/geist-8ac0455e797f/geist-98bbbccb.woff2","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.272Z","timestamp":1783902809272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /assets/_vinext_fonts/geist-8ac0455e797f/geist-98bbbccb.woff2 HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptohelper.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 29288\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"cd6be894fb3193969112ca2e3d47ebba\"\r\nserver: cloudflare\r\ncf-ray: a1a4324df9d0b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29288,"size_decoded":29588,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 29288, version 1.0","md5":"f4634c3bc1fa7cb53247e1f2872adb5a","sha1":"9d846db84c501327431670fe23b1a8ea1d2a5349","sha256":"9b6f5ff45b278c744b5f379a2c4ecbaf858a842b8eaf82ac8d21b699ca16c608","sha512":"e480a1ca3a52fdfd2f59daf185b56c9f203c4b0daa7a36537410ccefee9bfab229308145026aeea53a49d02cd7f0e89de8d4c05ec15fe80a2b09e754197afa49","ssdeep":"768:ePXLNqwQ5RnlpBAyv/2+NR6C36OojNMUp06QIhgXZY2Ko1K:e/LNHQtpBAQO+NR6k/eFp06zE0","tlshash":"27d2f155036f442269023b6a0619a9a0c172469fa9bd73c2407a6a931f67fd7d37dc8c","first_seen":"2026-05-13T23:24:18.838523Z","last_seen":"2026-07-13T03:46:57.91988Z","times_seen":6905,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/_vinext_fonts/geist-mono-00e989178794/geist-mono-013b2f2f.woff2","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.284Z","timestamp":1783902809284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /assets/_vinext_fonts/geist-mono-00e989178794/geist-mono-013b2f2f.woff2 HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptohelper.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 23108\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"bd6b2c3ecdc73d359df7a1b391954407\"\r\nserver: cloudflare\r\ncf-ray: a1a4324e09f4b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23108,"size_decoded":23408,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 23108, version 1.0","md5":"cd5b25781181c5c03d99ac2cbf88016a","sha1":"0e04bb6e7b54057d64c421b959c8c22774ae632d","sha256":"5f3d6ad60f29d6cb708414ec6887163d63bf197377ef5417d2483ff31ace6c3b","sha512":"f41989a87c7438a19dff3325c3546aaad0039f2433b4fe8550f3831bb01acfae9956c3e6d402d83fb6c38df647156cab2e4ed2ccc321007e858760e9af7ffe6e","ssdeep":"384:4CAnZnTSz1wLaDPA2knsJ9ufQnGaWPegCLyUrMF97Vg8RWP94KiBjJRMbkcYCaXp:4CAQzec94U9uonMP7BF97V9RWl4KyLMW","tlshash":"aea2d004c129ac1911b6017780694ce99eef64d51cac357f9cbe2cbaddb5252fc3be28","first_seen":"2026-06-08T23:37:37.659571Z","last_seen":"2026-07-13T03:46:57.944681Z","times_seen":3606,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/index-rBGAkEmI.css","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.288Z","timestamp":1783902809288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /assets/index-rBGAkEmI.css HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptohelper.vip/\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"22ea28fb65e9c918267bd0e5bad751aa\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1a4324e19fbb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58489,"size_decoded":11631,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (58420)","md5":"6d24a52fffde546d1efd5ac75e0f113f","sha1":"fd681df9ce17c37a30b9d1403d18d3a3d195a0bc","sha256":"ed01c01fde2ae1d2dfa7df68e7b21e7011a26b195099e43712255a4036c3dcac","sha512":"3d25f11789fdd457ff722bf6198bddf6cdb802d5f86c1e9992a7658696b86806b0fb18a5263b3b1fc3eaa1e257e15efbfca31327b29c6c923a84dc6de52a4989","ssdeep":"768:we8E7+06UVj45nToooRkP180jSds0nfeXSdL20jq70:4E7+06UyxoRkP/C4XSdL2CK0","tlshash":"ae43a321f335da3fae3769b9e79cf48c6208a056cc1257f8f91366124acb3f35915a09","first_seen":"2026-07-12T23:37:27.867574Z","last_seen":"2026-07-13T00:33:59.130588Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/rolldown-runtime-S-ySWqyJ.js","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.293Z","timestamp":1783902809293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /assets/rolldown-runtime-S-ySWqyJ.js HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptohelper.vip/\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"94807fc241dde3f0a31f570739360808\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1a4324e1a04b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":694,"size_decoded":717,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (694), with no line terminators","md5":"0b9fa1f21df87441aa366e428d1ebb49","sha1":"c27a8b2d2969dd2684fa56deef86ca35ee51a5db","sha256":"5db5ba82eef00d1dee7e86e663098c9427d01183a88d357437daff295aec3e75","sha512":"055bc418ba1a4c8defbc39c1ac629930f0975620d73f171860a8453245b1ebf8da2431de7bf98bc4a54eae55694addf910119f39977deb8dc2e2d170dc9d0000","ssdeep":"","tlshash":"c501c0a72990f7f31385a2cada385581d228687d96bc70d8f7a8c9f2d4c10c610d4f77","first_seen":"2026-04-20T17:14:48.011376Z","last_seen":"2026-07-13T01:20:16.701917Z","times_seen":1507,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/framework-DjPHiq1u.js","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.296Z","timestamp":1783902809296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /assets/framework-DjPHiq1u.js HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptohelper.vip/\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"0383d0fe45bc18ad054160ffc7a53212\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1a4324e1a06b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189761,"size_decoded":59214,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (44222)","md5":"c114b95cdd0483178fc4809461f6e4de","sha1":"eecd0039d02fe97358aa280f84f80fe7addb112c","sha256":"e1c95fc407283714d3fc4e9666d2fac09df84f3b4d479fcabdf8c4e3e53fa985","sha512":"444e06ba686e766f8a0b3b7188c7315e0a9cfec089075846beb8882126ff3a7010eeb940356f4034129f9fc2863b6b754aaaff1d0af3cbd6efc523e1f873e89e","ssdeep":"3072:zsrRJ3/poLFkikXhS6FP7LkkvO5gXMu8qOttuAhBm:4NXAFPkXgQ7LvvO5MMrqOttuAu","tlshash":"00042dec31a9b5526fa356b2006f1a07733929231c4d4860b210feae7bf544651bbfed","first_seen":"2026-07-12T23:37:27.853922Z","last_seen":"2026-07-13T00:33:59.131816Z","times_seen":2,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/NetworkExplorer-rMZVC0-z.js","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.300Z","timestamp":1783902809300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /assets/NetworkExplorer-rMZVC0-z.js HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptohelper.vip/\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: text/javascript\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"48cae88ce07dea7b06deb4bb01e2c8d0\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1a4324e2a16b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71666,"size_decoded":21477,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65531), with no line terminators","md5":"7e1eb01ab7331161d922a3b2741d46f4","sha1":"5cf8d866b04a68a6716e46be488310f7aea74e7a","sha256":"3e3d59dfd1a693373833e74784134335d28484b2ae51ce358aaabf7fe6430bd5","sha512":"010aebd5edb61270ff299415a91d45a1df3b11bb7c93d8c099d0a526b167ad6a3e312f126f4dbf5d073e2ddb0699761864a07b7342f3b3ad9f33cbcaafcbc57e","ssdeep":"1536:MDwvu1AhkiinQ6smUmEYcUXN3g/wGjyYZ9plOJ/KL+s/CY+R4y:MDwvu1EkiinpsmUmEYcUXN3g/wGjyYZu","tlshash":"bd632b57f6f433b16acf036ae046c19e2dbfe440e1091da4b9a8d31427c49e8a36bf54","first_seen":"2026-07-12T23:37:27.837209Z","last_seen":"2026-07-13T00:33:59.132803Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/brand/cryptohelper-logo-128.png","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.533Z","timestamp":1783902809533,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /brand/cryptohelper-logo-128.png HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptohelper.vip/\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 19933\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d3a2d7d961f232dc6a48358cb71947e3\"\r\nserver: cloudflare\r\ncf-ray: a1a4324f9bf6b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19933,"size_decoded":20218,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced","md5":"c4865efb565fbefb5188a7a79d280c0d","sha1":"9ed35e55954b36cb714f2e25b7e66fb00d7c1d20","sha256":"ee3af207e62aa9983a5b5dcb13fb7b859da6982791514c2d61c82797dee81ee8","sha512":"271eef13bd2d574b67d9370fc4e8653dc3a476268b451447b889962d75b7ec617f6a2c61f18d0c2e04fa3e2b35f358f9530797b407aad7b5c357105afaae0a12","ssdeep":"384:x1nzRVH7Mf0V+lHEW6W2np0b2ruglFxboQrna1MO2n5TeS+W/:xZNVH74HrGpy2jlFHSCVe7W/","tlshash":"bb92e09ac48be408c6f2249edd5d6c54faa074914703af6e1f071e022ad5bcf997d12e","first_seen":"2026-07-12T23:37:27.857983Z","last_seen":"2026-07-13T00:33:59.125963Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-13T00:33:22.983Z","timestamp":1783902802983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlink: \u003c/assets/_vinext_fonts/geist-8ac0455e797f/geist-ff2310f5.woff2\u003e; rel=preload; as=font; type=font/woff2; crossorigin, \u003c/assets/_vinext_fonts/geist-8ac0455e797f/geist-875ccdd4.woff2\u003e; rel=preload; as=font; type=font/woff2; crossorigin, \u003c/assets/_vinext_fonts/geist-8ac0455e797f/geist-52306abf.woff2\u003e; rel=preload; as=font; type=font/woff2; crossorigin, \u003c/assets/_vinext_fonts/geist-8ac0455e797f/geist-001175b1.woff2\u003e; rel=preload; as=font; type=font/woff2; crossorigin, \u003c/assets/_vinext_fonts/geist-8ac0455e797f/geist-98bbbccb.woff2\u003e; rel=preload; as=font; type=font/woff2; crossorigin, \u003c/assets/_vinext_fonts/geist-mono-00e989178794/geist-mono-f6b33328.woff2\u003e; rel=preload; as=font; type=font/woff2; crossorigin, \u003c/assets/_vinext_fonts/geist-mono-00e989178794/geist-mono-44e03052.woff2\u003e; rel=preload; as=font; type=font/woff2; crossorigin, \u003c/assets/_vinext_fonts/geist-mono-00e989178794/geist-mono-0638449e.woff2\u003e; rel=preload; as=font; type=font/woff2; crossorigin, \u003c/assets/_vinext_fonts/geist-mono-00e989178794/geist-mono-971fb274.woff2\u003e; rel=preload; as=font; type=font/woff2; crossorigin, \u003c/assets/_vinext_fonts/geist-mono-00e989178794/geist-mono-44745446.woff2\u003e; rel=preload; as=font; type=font/woff2; crossorigin, \u003c/assets/_vinext_fonts/geist-mono-00e989178794/geist-mono-013b2f2f.woff2\u003e; rel=preload; as=font; type=font/woff2; crossorigin\r\nvary: RSC, Accept, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Next-Url, X-Vinext-Interception-Context, X-Vinext-Mounted-Slots, X-Vinext-Rsc-Render-Mode\r\nset-cookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; Max-Age=7776000; Path=/; HttpOnly; Secure; SameSite=Lax\n__cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi; HttpOnly; SameSite=None; Secure; Path=/; Domain=cryptohelper.vip; Expires=Mon, 13 Jul 2026 01:03:28 GMT\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1a432406d75b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":308795,"size_decoded":33692,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (56371)","md5":"d3a4f9d077d25055da5ae3b9182e0547","sha1":"6e99700c2478baa18bd33ed795f73c35e02a17cb","sha256":"360ef9162b19be759f6d534b4ff8695648408e11fed1470a2ba58985b1800e07","sha512":"9e03ca36a448e4e8098ff74c630b726dfbaf8ed32475a38f25aabd5ceb23af2443b8dc1f7fec419d7bba2510afc7adf71ff33bd58f40e183e27139a362287d49","ssdeep":"1536:D18OmN9iyqkODodFq6F4au/guF8X+SMA5eCNCX6BCUPHJlhGlc9PrtYZNshJl1hn:D1nmI7H09zrOLJQDYDwfaW7Cw","tlshash":"d0648822a111d53f5617a6e8f274bf6c51cde31fc8938a5ad37cc5611feacb0a782a40","first_seen":"2026-07-13T00:33:59.133537Z","last_seen":"2026-07-13T00:33:59.133537Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5989,"timings":{"blocked":-1,"dns":994,"connect":1,"send":0,"wait":1875,"receive":0,"ssl":3118},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7VK8662QES","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.290Z","timestamp":1783902809290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:35:29 GMT","end":"Mon, 14 Sep 2026 08:35:28 GMT"},"fingerprint":{"sha1":"4E:CE:B0:5B:5A:94:F2:15:05:64:F7:63:8C:23:58:95:2F:72:74:7B","sha256":"16:29:FC:E9:EC:BC:FF:2E:2F:4D:FB:5F:6A:E5:8F:51:7A:25:FE:6D:73:E4:66:1E:AE:DF:5B:F6:06:F3:36:E9"}}},"request":{"raw":"GET /gtag/js?id=G-7VK8662QES HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptohelper.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\nexpires: Mon, 13 Jul 2026 00:33:29 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 165048\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":486468,"size_decoded":165652,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"a7d80cdc88d526ecff631f8efb7a8a3b","sha1":"afff67851a9100760cd224f8a24fb3db304f4ee8","sha256":"132b12d337321724a148a0019f9f1272c3afb53c9fc4afd3872f50d0f2a542bc","sha512":"1c280e6dbe985856d0ffb9555eddf43faa75ae859fa8e7a8f256a003a80904c9e228da416b461a54ce084234197e5e0f9c398f7d9096ca08d2d1b8477ac060b8","ssdeep":"6144:JG57o0JeYuozbF3Vb25pvMlci0SJGWox3lytZDP3OfAn8l:M5yYnFB2j4DmfA8l","tlshash":"93a4f9cdb3d674625396f478903f018ba57b28a2b44cc899f189cce42e7465a8277f7c","first_seen":"2026-07-12T23:37:27.834253Z","last_seen":"2026-07-13T00:33:59.134533Z","times_seen":2,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":41,"receive":61,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/brand/cryptohelper-logo-512.png","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.531Z","timestamp":1783902809531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /brand/cryptohelper-logo-512.png HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cryptohelper.vip/\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 291525\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d53c8315c4d0a18c5954b56391eb90e0\"\r\nserver: cloudflare\r\ncf-ray: a1a4324f9befb28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":291525,"size_decoded":291811,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"650b58510a23f56dbbad548840b15b79","sha1":"707c425f44ec0be0acf1f088118cc1fbe05cded0","sha256":"4b053f8df130d856416c60f84fc492846220c63ff9e3f6cdedea1319aefa3bfe","sha512":"32f3765284fb76cde3bbebf50eca69126658500295f2eda73a91902ee467f388b022e133776e7484dbec7a52c8dc1401d43dd6df7a8c770be3bb5236ecb2de22","ssdeep":"6144:OvLgy4IG+8ijtqg+GjF952LccAg2ocLo+T5Me46l:1IZ8i175oczt1h","tlshash":"b4542397809c1bb2505302cadf4a8e9727002c416ea696d0733febd73656bdff639912","first_seen":"2026-07-12T23:37:27.855928Z","last_seen":"2026-07-13T00:33:59.135768Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.535Z","timestamp":1783902809535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/80a697ecdece/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=tKxYaW7AArBYW6LAkIetVEUJdnJ_MYQugZkX5pnxyxs-1783902809.5368423-1.0.1.1-OFdkMLFCb5ly0A0HwEYK.Hn57H5SIeZB_aPD9orjWpKW7JyqNFtCqpsODGpPF46j6WBn8Z6Y_47sJfOwlshE75GOCGtO6P.YtFunsBZssDLU9lsy_35hNmDIWqIvGOGf; HttpOnly; SameSite=None; Secure; Path=/; Domain=cryptohelper.vip; Expires=Mon, 13 Jul 2026 01:03:29 GMT\r\nserver: cloudflare\r\ncf-ray: a1a4324f9bfab28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T02:55:22.330136Z","times_seen":17202442,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/_vinext_fonts/geist-8ac0455e797f/geist-875ccdd4.woff2","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.263Z","timestamp":1783902809263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /assets/_vinext_fonts/geist-8ac0455e797f/geist-875ccdd4.woff2 HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptohelper.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 14900\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"3199b1dbd10de9f40ee276ed86c9b656\"\r\nserver: cloudflare\r\ncf-ray: a1a4324de9bab28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14900,"size_decoded":15200,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 14900, version 1.0","md5":"9a45f5a5937490fac6d4f5043a36c125","sha1":"c71bf42ee30cd73ffba5e13ee5a7454ca1269c42","sha256":"6129fc8571c3e0cb0a4c41f5160c974a843b055009dc4ad8858bd808e18a2d86","sha512":"8d723fdc1c862fea748a7ed1eba3d19a206b8de4a57a7f5c7b3a5b160d48a4982c88ec92b3503f831b8cfaa0845bbfd238ebfccb8b46aa1fbf28a612305974ce","ssdeep":"384:g6x0atJIuTms3TnnwnGSHVPZhAl7u53ThPgJlID:f0WXz37n/SHhQqhTaJlID","tlshash":"8162c0914b3ff01671f6557c0934a3fb06d218b87b2bcb8903d9466899383f921997b0","first_seen":"2026-05-19T07:46:34.969556Z","last_seen":"2026-07-13T00:33:59.136522Z","times_seen":42,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cryptohelper.vip/assets/_vinext_fonts/geist-mono-00e989178794/geist-mono-0638449e.woff2","fqdn":"cryptohelper.vip","domain":"cryptohelper.vip","tld":"vip"},"ip":{"addr":"162.159.143.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cryptohelper.vip/","date":"2026-07-13T00:33:29.277Z","timestamp":1783902809277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptohelper.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Jul 2026 13:41:51 GMT","end":"Fri, 09 Oct 2026 14:41:43 GMT"},"fingerprint":{"sha1":"2E:B8:D3:98:B4:89:87:D4:86:FC:6B:B4:CA:4A:F3:16:2F:14:A2:B5","sha256":"B0:D6:F5:56:09:95:7D:76:70:15:91:1F:88:00:D8:E1:46:94:7D:6F:0E:75:D4:B0:0D:23:5A:B2:A7:8E:22:CA"}}},"request":{"raw":"GET /assets/_vinext_fonts/geist-mono-00e989178794/geist-mono-0638449e.woff2 HTTP/1.1\r\nHost: cryptohelper.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://cryptohelper.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __Host-appgarden-visitor=34f3c066-fc4e-462b-848f-a7ff4b1d2708; __cf_bm=zn6iaLRPaFYja9aA_Avgli8pYA3TEhapize8EIPRVKQ-1783902807.1028326-1.0.1.1-oe5DyD3s0SxeYr3wA14oWFyzt2pPJvenw8G2VfWvyMcpVbM3KIQqz4v4VbrzFXJ1xv1tNr45vX7H0lc3wyW_LXkH3.Yrmk8iCdXzliUTlyfq8K8GAeD5e5_dkp2fTACi\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 13 Jul 2026 00:33:29 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 5892\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"547cf9a61d13952dfdb7b06c746f1d02\"\r\nserver: cloudflare\r\ncf-ray: a1a4324df9e0b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5892,"size_decoded":6191,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 5892, version 1.0","md5":"58bcf4f276e0844890901b91c411447c","sha1":"55e5a488c6929ad2a88a00c175ad81e3ea0a3ab1","sha256":"d67e4a94ba498635f764ddca7d1ec4271f5642f032eb24b426764480f66f8497","sha512":"92babc59a8245f7da6c2e157b3374580a9c9b0033acf9b3808da32675aa08b90ef212904bae64fbc4f2d885d2a50c41353875f832f1370375fee3bfce62425bf","ssdeep":"96:UccwsSdNEMjKXPZqaeHeTfgv39ACwcS1aze27/RRK7RzO9LPUiH8sjTfdPnpWCKv:U4PBOoae+Tq39dxSAzJ/CRzUPUE7WLTj","tlshash":"50c1af70d39d231dd0afc7b71e93d6ba1d76afa1c41752e132ea622250b4318bc58653","first_seen":"2026-06-14T11:43:13.878463Z","last_seen":"2026-07-13T00:33:59.137551Z","times_seen":7,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"cryptohelper.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}