{"report_id":"d50a8a49-ec1a-442c-9514-a51385edc541","version":6,"status":"done","tags":[],"date":"2026-02-24T16:32:50Z","url":{"schema":"https","addr":"heavenv2.xyz/","fqdn":"heavenv2.xyz","domain":"heavenv2.xyz","tld":"xyz"},"ip":{"addr":"172.67.134.164","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"heavenv2.xyz/","fqdn":"heavenv2.xyz","domain":"heavenv2.xyz","tld":"xyz"},"title":"heavenv2.xyz/","dom":{"size":130,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"bdc8adb6b24e9f7d4d541d08a1186899","sha1":"5cf14f1381d086e65812498bfe3c6cdcfa69180a","sha256":"c227d415b708a6cc24ea05fb9e5e10f5ebf0caf4166a1aa065c6156982c9508a","sha512":"fc4499103006245f7e77f97da71698bc44d5433a38e69726d432d92c1fe0ea536c37911453686e7fd3884d4f7d9251287d7cdf5a75539547c31c6fda31c0bd8d","ssdeep":"","tlshash":"01c09b5d7c568d5844985ec4a4e5e37994285154b001dd04bae154a46f597ce1d04585","dom_hash":"domhashe7878feada357c83b98d617f7576c066","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"heavenv2.xyz/","fqdn":"heavenv2.xyz","domain":"heavenv2.xyz","tld":"xyz"},"ip":{"addr":"172.67.134.164","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-31T16:32:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"heavenv2.xyz","ip":{"addr":"172.67.134.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-03","domain_rank":0,"first_seen":"2026-02-24T16:32:50.860796Z","last_seen":"2026-02-24T16:32:50.860797Z","alert_count":0,"request_count":1,"received_data":143973,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"heavenv2.xyz/","fqdn":"heavenv2.xyz","domain":"heavenv2.xyz","tld":"xyz"},"ip":{"addr":"172.67.134.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-24T16:32:28.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"heavenv2.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 21:22:36 GMT","end":"Wed, 01 Apr 2026 22:20:15 GMT"},"fingerprint":{"sha1":"39:78:85:AC:8F:40:2E:49:80:6E:8B:03:22:83:F1:D8:61:44:0D:7F","sha256":"13:3B:6D:22:38:87:52:21:16:B2:39:A4:83:21:86:4A:B6:47:4F:0D:2C:CC:39:03:D9:1C:59:4C:36:1A:A0:29"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: heavenv2.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Feb 2026 16:32:28 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 03 Nov 2025 21:31:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qNcrIHWt27P8vOGqvd9OBfMoEn%2BuFf03D4Vy0oAgcFkDtHJYcXUZBAjp%2FaSbSPQvjL5TpLcbBJBKjgnEL2hKVtMyTnXGK2GezN0ybg%3D%3D\"}]}\r\nage: 1201165\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d305bf44af4ea57-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143152,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (53556)","md5":"80a8c28764e107d7ce98b60567dc341f","sha1":"ac8c184cf338988f283c75693694377629a80580","sha256":"8d273ef650c24bcb0f170733420b84408adcc59a4be949fdbd38b380ecd649bb","sha512":"391a2080836ee5ddafda68aca2e1af5879533567d19c695c77fcbbc8834f57f9e13909cac93d5384646a48bc02f6aaf85c6b8f1ede7fdf132b74810efce661d5","ssdeep":"3072:C5T94ohrjQk0UWaG8Cr378VQZkt5FfgVPC/W2G:2mohrjQk1Cr378VQZkt5FfgVPCjG","tlshash":"17e3f9297508113d7d2782f8e3d8b6bc6129f0c0de3749b9b6ae00259bc3bf528b7554","first_seen":"2026-02-24T16:32:53.059569Z","last_seen":"2026-02-24T16:32:53.059569Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":94,"dns":58,"connect":8,"send":0,"wait":27,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}