{"report_id":"ddaaa91a-556b-4ed5-9fdf-6caf6fe90af5","version":0,"status":"done","tags":[],"date":"2026-06-28T13:03:29Z","url":{"schema":"https","addr":"register-heisted.xyz/","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"172.67.187.218","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"register-heisted.xyz/","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"title":"Heisted","dom":{"size":4545,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"ed3c9018da813cf1336a932d867444d6","sha1":"51787923ba7f48d4c20a5846bd940de8c05300af","sha256":"e754de5f8db6fc3742a027d1a678e39bf6eaa307cd614259c7091870ba4e5a0f","sha512":"6f89e4969cd7a95c106657b6b33607837774c13d5d94633869fdb4cb86409037935df2ec5c3da093454761025679e113f81241e3fe13aff9c231bbd0fe34c73e","ssdeep":"96:nBrtGBPAZOWy69ilJQ5+onOJCyUWdIhhl3bFU:BrtGd1Wy69ilJQ5+onOJCodsPa","tlshash":"4a9121aada9301167013d1595f678b1f6391d107da42ce1e3aee1284efca4e9dce7390","dom_hash":"domhash49a9f7d63965b8cbfe36c31311a3f512","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"register-heisted.xyz/","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"172.67.187.218","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T13:03:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"register-heisted.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-06-21T23:33:31.856708Z","alert_count":0,"request_count":7,"received_data":748065,"sent_data":5394,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"register-heisted.xyz","ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-25","domain_rank":0,"first_seen":"2026-06-28T12:04:04.973168Z","last_seen":"2026-06-28T12:04:04.973168Z","alert_count":8,"request_count":8,"received_data":288555,"sent_data":6734,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":1,"received_data":14311,"sent_data":575,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ipapi.co","ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-06-24T21:05:48.981268Z","alert_count":0,"request_count":1,"received_data":2499,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":1112,"sent_data":525,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hbeugaufg1-8-26hbaaaaddoter.fly.dev","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-03-01","domain_rank":0,"first_seen":"2026-02-09T00:40:28.837358Z","last_seen":"2026-06-24T15:26:18.1261Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":587,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4a75985d17b042829d3c167b3b64cee","sha1":"03ab7cb9805d00b14c71a79ad92dda75cc39bbe5","sha256":"9f30020220937301ac7af65d2d9b8159001c4566b0b281d32ffc02e4ca062a1c","sha512":"a090929c474a854b547f6525d939609529e6f489a8ba625a416a0228351065f91c65ded9eabf22f48d1605e949940191dcea8bba044e021093bec0f2f1cbe868","ssdeep":"6144:sIRg+b/EnLk0XAenv5eS/xghfBD1z62xCp+OHE7cqhM31zn0xlho97/P+nl4t8BV:sejUAenv5n8","tlshash":"7834caca78c2b419032778b6445fb0eeb25a4c8845181d2d9260c6f17abcf2def7f569","size":235556,"data":"","first_seen":"2026-06-28T13:03:44.255455Z","last_seen":"2026-06-28T13:03:44.255455Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/ac67146b-eb3f-40b6-8d7f-61464810c62b","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-29T02:34:35.632778Z","times_seen":4336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-29T02:32:22.261013Z","times_seen":756776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4be7b6b8aa783300ae657a82c16d2a09","sha1":"39c051c1ee899fb0fdec892c96de143739ad2628","sha256":"9ce4a40dab4ae7a062f4860f6a5f77bb0f93dd15b4a24f086e633a62dfaa26cc","sha512":"ed4f6be02687fb5ca630c617096aea4f63e85839ce294d6026bac126865ce8de8cfca9d5bfb335b13b135351e13d49cee6712e22d8274a313c9f1b15f858c66d","ssdeep":"","tlshash":"89900277b5817125574568f1842a251be61946d406544459910400862d104648651bd9","size":50,"data":"","first_seen":"2026-04-23T17:24:48.285702Z","last_seen":"2026-06-29T02:32:52.010931Z","times_seen":58176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a9a873932754173e2c9d1a9ed14734f4","sha1":"96be8e628e776192c78e5ea32ae2b2520c6f2d55","sha256":"07bc70ca4e778b4a71deefba26e62c14492dd697c8d8413bd47b5ddcc2836379","sha512":"c1d3008b8793c7a6647cbbd1cf814a9e212e359b8a1fadb928af654e1e2c1e745da288b16b87bc91460694738da6ba57cb76a35a5f591f82cfbd76f0c4414726","ssdeep":"3:N/BKL1XqX:eL18","tlshash":"015504c07440307f0410d404d350151554150501171d0405705d0cdc1730010047d540","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.266388Z","last_seen":"2026-06-28T13:03:44.266388Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8e79b467d11cf4bd90ffb836b7c14a76","sha1":"f0d32cde204f526fdf4fcd5e830e668d33896a33","sha256":"976bc47920a575c0f41008d3c17eb84267af03e2b7d877a76af1f45684b0b27a","sha512":"e0d15e0a8bd5e6a343c9e091921890fd86bbb2b80cfe2f6fc1f1dd6755946de0f7dd1aa12c645172332b0084d45437c43f2d538974ccecefc6291e8685e8b915","ssdeep":"3:N/BKL1XS:eL1i","tlshash":"ea5504c0744430730510c404d3511415d00505011d1d0505705d0cdc173000004755c4","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.273871Z","last_seen":"2026-06-28T13:03:44.273871Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"656fa1f524e9ef9852a7f1926f9f411c","sha1":"358a113517e7836bd4a32c0579ea57bcc4612895","sha256":"bd279b4d2f2e6bd8b3f5c7a4016434ff0e01acc7d95ed6fa7330cb6ff8112c01","sha512":"1cde8c02ef0b57aa160f2a1d6a6fef4eb8d5cf879d658aa4fea108f65ddecb35a4d6bcbaeaaf5e0dd2aa2764b9e4d7b87081f017d7d1ee2cf4cf18a8fce78237","ssdeep":"","tlshash":"43a004ccf141f0505303f1350c374115f11557c1041c1010554c44537d1414f4111f5c","size":71,"data":"","first_seen":"2026-04-23T17:24:48.307672Z","last_seen":"2026-06-29T02:32:52.048137Z","times_seen":57788,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b18f2c4a4ce0747404acdfd8a6cfc7e7","sha1":"902d0a8168693a45ebf42097570037800ffb9c4b","sha256":"38c8224de70127ea82f97793b5745deb8e32ad267c0f3cf98b78dc3203a81973","sha512":"d910eae8fd865d03c7f30660b62e73e661425b5740415c93924ee516479c96f1af3655adb877530b873fd826ac1634ff6b77af36d02425dfa5b563fa1e2bd602","ssdeep":"3:N/BKL1XPT:eL1fT","tlshash":"c95504c074c030730410c404d350151550051501171d1405705f0cdc1734004045d540","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.278861Z","last_seen":"2026-06-28T13:03:44.278861Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12ce396aa34dfec","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0991bc8c3d450177fab87a5566ddf9b9","sha1":"accea1d74253cf173b1b2e46772b1cd5a61f39f6","sha256":"3974ec2ff5cda648bb66f72b3f42907a262e24f7a701e9b964eadbffcb76a679","sha512":"0ab7ad7f3f0bb8f9a449d972f02a8203d54b25f4fecfb772fd3f3c8f9586ccf293607b4ac85eb530992251577143a3cf7eed853496c33fff69e00f4a970c80c6","ssdeep":"6144:CshOvAjPsCggH9SpRO4b/9Cqd+R77ULDMVYWtODgGDGgoHMTcNA1Gk4QxkMIV2wg:1oWW","tlshash":"1a24b7cf74c67807022715f5842ff04f625e4dc4821c292a5a2186e07abdf799b7fab9","size":218345,"data":"","first_seen":"2026-06-28T13:03:44.241423Z","last_seen":"2026-06-28T13:03:44.241423Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d8e3d4585f33fea9fa2359f337900a8a","sha1":"ee80838eb15882353c7703c5ce02fd5d0ab85e98","sha256":"1a8f5b6bf26a5341b485fdedcbce51a45097f26659bd2a24c2d9783962b44a57","sha512":"fbc9d6ccba291ef4ca41f765ed7fcf1df2dffe08ca8a9e26db53e1cae72295d3919fcb7ee945651bb7ee4e20c8f81b0cd99f4adfdcb304cce958aaf6463ccf21","ssdeep":"3:N/BKL1XNn:eL1d","tlshash":"095504c0744030730410c40cd3507415500d15011d3d0505705d0cdc17300440455540","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.281123Z","last_seen":"2026-06-28T13:03:44.281123Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f7d7ed96300d3e95410bad6641377df5","sha1":"b04269a84e4e97ec9a1b3f9a885336c2cef5962b","sha256":"649f366bc6aacd084611b24cf7a6ff6cea0ccc01a3d6bcca46c19471c2f53482","sha512":"97e37dff56a345813c29c8488a4000a162165249b0eebd15f77cb1f2d12b32cc15afdbfe7beef2ec37ee26fa2cdc7bfbbbafffc339d8c4819a3138c4fbf33ac1","ssdeep":"3:N/BKL1XLn:eL1bn","tlshash":"795504c0744030734550c40cd370141550150501151f0405705d4cfc17310000455740","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.282852Z","last_seen":"2026-06-28T13:03:44.282852Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/33ccbcee-b5cf-409c-ae79-6b37260db634","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-29T02:34:35.632778Z","times_seen":4336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/?__cf_chl_rt_tk=GRfv90XYREVX8R7S2KRbrHzjcrrn6ZN0yz.6CVHFy8w-1782651779-1.0.1.1-DVAnfd0PfciqyVa_GkdaAN1RyLKIejQoLk4jA02DdoQ","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-29T02:32:22.261013Z","times_seen":756776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d9659c3066f02d9662e70e265e26f05a","sha1":"22c6b4096cd7e2529990600ce4611f4c04a99e56","sha256":"38e2260b63760fc2a9a3dccd21bd2f4221d8f12a85ae29fd964dd893a036d36b","sha512":"a3033d6e982234801968855388deb13a4c4d80cfc3911ff28afb07a25de580d5b4e71f2339a36b0166e6b1db876f56e13c772aa6a18b4c45b1f2f0bcf2a722fb","ssdeep":"3:N/BKL1Xjn:eL1z","tlshash":"125504c0f44030770410c404d3d0141550150505155d0407705d0cdc17300000455540","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.288666Z","last_seen":"2026-06-28T13:03:44.288666Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/loader.js","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7272fe2592742ccbc5163a7e5216671","sha1":"1ab800f6d98d40d02680c2acb42c0b59b5760f8f","sha256":"d07dc00d29b770243e35018d56daff42fa4b6fcb318f6485f0da1d768e3bf860","sha512":"c68484bfb9136e6bb5c8dd60056b8c24480437f659631928597af5dbefca57dea339745e1faa118e6d51bce4ee93686dac1c69156f74635dff07d60073803161","ssdeep":"768:0L/69nZD8RUR2xOVAEZ83idtOEpytAq+WBkz+wpB:b9oUYxOXEitpyt/tp4","tlshash":"dae2c88d7be53132422361780ebb16447536e8435544d8287aace3903fe4b3e65bbbf9","size":34047,"data":"","first_seen":"2026-06-22T19:51:15.20729Z","last_seen":"2026-06-28T13:03:44.235449Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"be4c32442d5b674c78456acffa0bc473","sha1":"ade3d4a3152a8b916a61bb43447e4dbe81b660d3","sha256":"e73ab049da9f98e22e556b68d7059bd457a0ff65d609232d84502fe26061fa98","sha512":"070fe250b8b915410c981887e9cf60cc9a867a8d07824434f0993d07f8e7f83266eb92eeac092ba2299dd13d7f27414af7f44fb77202136c13e6ab57b43d20e8","ssdeep":"3:N/BKL1XHn:eL1Xn","tlshash":"9d5504c074c030730410c40cd350341d50070501151d0405705d1cdc17304004c55540","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.292304Z","last_seen":"2026-06-28T13:03:44.292304Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d544931b8becae2477683b7d9ddcb1eb","sha1":"791da7da723f11b3fb002873d4ac691247a8d54e","sha256":"212b03e51e31a02b47a4ab29b4e5638b06c9c7de1f6befa6a559b086941561bb","sha512":"81033008dc6becc4d87c3cdcae7598605d37f426d2bb9488b94604c7d43bdfb13470ed273cf54c3bfb574c3d0f2edaf059b827e315c2816c8e53bc46b9869203","ssdeep":"3:N/BKL1Xa:eL1q","tlshash":"4f5504c0744030730410c40cd7507415d0050501151d0405705d5cdc37304004457540","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.296755Z","last_seen":"2026-06-28T13:03:44.296755Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6749d9cd9b349ae9d70f9625ac644bad","sha1":"c9791fe5599afad550cc7eb5abd0118818c5ee68","sha256":"93f1160d62cdc4e48bb9050ce5003509ce88ffaf5f8e8311ba8376f2135ee0de","sha512":"65262e1fc47e0aa49922f27a998199a7fdebff9e14b6c1447f68cab86d9bf2a317f89edcd4b242f2c289b2fc748727bc519c6ef0e2e7bc192cb0c155d4d043f2","ssdeep":"3:N/BKL1XYc:eL1oc","tlshash":"385504c0744030731410c404d370141550150513153d0405705d0cdc1731000055d540","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.298763Z","last_seen":"2026-06-28T13:03:44.298763Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e50fcfc8c752175ff807841572530cf","sha1":"03ad81477e761297b3303f079f659d0269fcd829","sha256":"31f8094427d685dd7b752b1d660ec2612ce236cf5402d8351c685ae1654acce6","sha512":"d3af1b45d5b712563fb0b88ed05ee831eabdbfcf04056f2fd8ed9cb37f4cb2241a83e8523977ae0a06b91fa1572bce52ae3050f47c46889e3e4259aa5cd8ccbf","ssdeep":"","tlshash":"8ac08c887a80e014c28125351c6b428ae638de6008581003a0425249b6a071003aaf0f","size":137,"data":"","first_seen":"2026-06-24T10:51:52.241503Z","last_seen":"2026-06-29T02:34:35.65622Z","times_seen":4493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3349df9352fc7ce2804730d6f82a84be","sha1":"12d1dcacb9392230df028c99cc51e2a278d89639","sha256":"222098461b6bee5e75f61e620b6f823534d1f840591c96890c7e0891b6bca0d1","sha512":"de13225b50cc481ae368daee14b9e3a790f4a98636dea97822b1ba8407b205355f0461d44a14d535a6f9e5a039f059291d1635bde0b33b1362424128ea56101d","ssdeep":"3:N/BKL1Xz:eL1D","tlshash":"415504c0744030730410c414d3701415500705015f1d0405705d0cdc17310000475540","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.30171Z","last_seen":"2026-06-28T13:03:44.30171Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f51a4a9d0f72d5ab16878a96988cf482","sha1":"adf86bf2f31f71f93ea98e73c030f86dd2b45e6d","sha256":"627c6f2946a568588d076461a6efeea9d85b88ea6fc76bcc33bbf754347bd674","sha512":"853c39d43533e9495669616f9ee1c829c2ab459041892de6dd3dd144157626e465ec7d2ba4cbabe199781e353b3f4bf1f672a5b2f76ecfe74493d9a8bcb3a1e6","ssdeep":"3:N/BKL1XIn:eL1Yn","tlshash":"415504c0f44030770450c404d35014155005050155dd0405705d1cdc17300100455540","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.30361Z","last_seen":"2026-06-28T13:03:44.30361Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"48092175aba634160eafe3e3b13096d7","sha1":"e87b05c1504e3ec3e9de6067c0c71083b8b639de","sha256":"a27aacb996e05b8fae7ef00b046baee595ec13c2aee44636be3589cf57fcc689","sha512":"9bed59a29c39264144fa60765187a0ed79a8ac89f93285c8a344b6e605a53318bbcdf28a37dba269c81a813cd46fd1e662003b9ac833400c6e8ce08bf7d8934f","ssdeep":"3:N/BKL1XS:eL1i","tlshash":"545504c0744030770410d404f350141d50050501155d0405f15d0cdc17300001455540","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.306683Z","last_seen":"2026-06-28T13:03:44.306683Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"a465517dd985116cd6daf2f14c453683","sha1":"1cea5d6471836301a65ffb41ca25cab470001b29","sha256":"3774e8156362e01b9dd54b67e274bf244ed682074be5f54453fdbb5837f0782e","sha512":"d475e2a92c215f50fd007b9a90f269146fbed7fd14425c6a68a35673a3547a5618c5c3617297339ca45803c714365fe4aa993d4ee562a4cf9c5bb0a88b16f716","ssdeep":"3:N/BKL1Xm:eL12","tlshash":"0f5504c07d4030730410c404d350341d50050501157d0405705d1cdc1730400445d540","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.308875Z","last_seen":"2026-06-28T13:03:44.308875Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"956a78f227b4abc4b5fee12bcf69446c","sha1":"cd5156e83be411e656808d05949a165867b1046c","sha256":"60cb471d1878487edd223cb2db9096ea09b72082c053d849bebb854e327cf119","sha512":"16102038468f9caedceec4067f3656e44f6e472161ea1aac735500865e5604919d2d605ea38733eee5190d78bff47d6a888ab6cf313655dbb6d1287d2ecd2b95","ssdeep":"3:N/BKL1XSWn:eL11","tlshash":"215504c0f44030730410c405d350141550150501151d0405715d0cfc1730000045d5c4","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.312965Z","last_seen":"2026-06-28T13:03:44.312965Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f79d458b57aebc17f6cfcda00b95bfaa","sha1":"40974cf48e41d7447269a482139f364beebb9630","sha256":"8a8829c72d01b74a75a3c167c7834392553164705c21d2b1ae69f5c945e992ed","sha512":"ab093577a67d050405c7a51997a7cff047022f49b9e0cf60596a3c1f0d0a9ba547bfbe4ee6cdbbe93504095a68ef760dc44a1ad58e034be76292ee44048d7d2b","ssdeep":"3:N/BKL1XJWn:eL1ZWn","tlshash":"375504c0744030f30710c414f3515415d0050501151f0405705d0cdc17300000455570","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.315176Z","last_seen":"2026-06-28T13:03:44.315176Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"93e354e833ee7b4feead7057a3f33168","sha1":"4025c763f11cdc2eef6318108989528620fef9e7","sha256":"80b90237b40178e74c34d6652d95b3918d01b603ba83f9dce47ba6b19343c245","sha512":"2b37a9bb6f2c3e2ad3624228638881eaeb961c98a31e60a424d9c6146f002a852cec318a17772a5be5015fd197ad4582b007eb0b15335ba6d25412b27b576c13","ssdeep":"","tlshash":"19600000c0303003000f0000f00000033cc000f0cccc0003030c00f000c000c0cc000c","size":13,"data":"","first_seen":"2026-04-23T17:24:48.301435Z","last_seen":"2026-06-29T02:32:52.031487Z","times_seen":58112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"50bda72e04f85f9b4338c0f939c34b9c","sha1":"d53056a9d7a7424238f0faf0b93b098f28d4d3ca","sha256":"db8d20f2dfaf9df3877967927de5ecb9648fecda131ab44bf854f8d72baa2b23","sha512":"3e55d7e8940bd66ef537062f73d3d2c6982a25a4e9fe9ac98e18253782cf28e01f106382d2e9dbbc05b6cdd62aae372b75cd430aa5a7ce2e327fb2ece33a30d0","ssdeep":"","tlshash":"736000030c00cc300033000c0000003c30f00c3003cc000c033003f003c030c0000030","size":15,"data":"","first_seen":"2026-04-23T17:24:48.299417Z","last_seen":"2026-06-29T02:32:52.013088Z","times_seen":57840,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4f3b294a1fdf27618bd0346e203847e5","sha1":"112fdd6b5cfd3c8d58244be14cb02722b20543bb","sha256":"7354ec60a7e8ab203998d660b1c53927e27911004ea3321240f68d43273707bd","sha512":"fbb24910d938a0c38e53eb8cc2085ec03d0c6799ff7c225efd9a8a5dbc1ae25ca936481487a8142a8bfc959fda0c4211cd8aa4175bd6ba2073922cca46352a6e","ssdeep":"3:N/BKL1XE:eL1U","tlshash":"d35504c0f44430730410c44cd3d05415510d1505171d4405705d0cdc1f340044455540","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.319405Z","last_seen":"2026-06-28T13:03:44.319405Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"94081036cbf595a3dac383955367903b","sha1":"4c78fee58d05c79857142f6a1823b584e693d678","sha256":"a3c4f20a8b17293aceca90edf64056d45c645f5adc2d5c853448063f6fa56a8b","sha512":"99084ac603dabfdbf3736d9064ab97c259689afaf02fe04dccc45f4ed0dbb4be9af01b5e797fa80f5f6881c3f1f245f4b0d79fa6472f1eb8e2aa07f5404e5e69","ssdeep":"","tlshash":"64600000000000000000000cc00300003cc0003300cc0300c30c003000cc3cc0000000","size":13,"data":"","first_seen":"2026-04-23T17:24:48.314042Z","last_seen":"2026-06-29T02:32:52.011405Z","times_seen":57947,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0ba0d3ab6bcdf1174c164bf246f0b686","sha1":"8efb89378b22bccb3acc374688978a248fe3b959","sha256":"bd7f999de58cb84d4cdb89a7192cda409c8a1e1262717d93c74bd3f47e99b84b","sha512":"064f815556928dd4c19a0ff70216cb5f4e84a05c63dff8af825e724b3e6d9fdf0bacd73d76cdab68ba6dcf8a29e2ac38b1a6fe79d144cb02014bb256a0d76910","ssdeep":"3:N/BKL1X9:eL1N","tlshash":"925504c0744030734410d40cd3d0d415500d1501153d0405705d1cdc173000c0455540","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.331737Z","last_seen":"2026-06-28T13:03:44.331737Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-29T02:32:22.261013Z","times_seen":756776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f9803ef88f4459431070ef103c0b48d3","sha1":"04f45168bac45cc11d198315f3c8823ca4a5302a","sha256":"f250768a91a2cf0717d05d048c3d60954c73b3878458280bc2cf5668a5d9e5f4","sha512":"a10a4ec112bb425e879fe8a4e1432ca2f0e518494284ab1145a251a7f51067aca6b4f42b62f24ebee5665e0a50ab0c7ce24023ff860a97293519b442a1ad8a7d","ssdeep":"3:N/BKL1Xj:eL1z","tlshash":"415504c07c4030770510c404d3501415f40745031d1f0405705d0ddc17300000455540","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.343153Z","last_seen":"2026-06-28T13:03:44.343153Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/c53a72d2-5188-4a91-8395-493be57b704a","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-29T02:34:35.632778Z","times_seen":4336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d26819e314c7334b3a5dd5a004898650","sha1":"559b39e547d32af023ed6ab08c369e93db0c7f80","sha256":"9715b51191ac5c467c5b8d983bf9f77c688c61987ab80f94fe3b4c452429cbf4","sha512":"9f4ea7965bdfe1afd68bd1dbdf79cdaa039492ef8e1d29a4966ec6ae8d9b8cc6af8f8920964deab2926662041ee1ac0feb7d70df7df9e6f0e55c5d130adc818c","ssdeep":"1536:4oYt3AYYdolrsHspjxegN8t5LMhfS8OpyJr:b8+onxeg6Dgc6F","tlshash":"3a632cc472aa7877129ac0f0a03b6753b3267d36a84cc850d427dc65277de869173fba","size":67081,"data":"","first_seen":"2026-06-24T10:51:52.15506Z","last_seen":"2026-06-29T02:34:35.608029Z","times_seen":7171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"487607353513d80bd239580e741860d9","sha1":"1ed9cda8f6e7813f8e57670432415d0c55958599","sha256":"c7f496be442c4f294718c47e431332b860221855c22eaec955bc5059e08c5905","sha512":"61e34bc65be0b774d0f67840edf40abdb6131fcf72a54e12714553974d08cb62db23887a8d9b97c3bbf35a290dd239135eb53c0a51d10470475e154f2520505e","ssdeep":"3:N/BKL1XZWn:eL1pW","tlshash":"bd5504c0744031730410c404d3501415500d05031f1d0405705d0cdc1731000055d541","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.347815Z","last_seen":"2026-06-28T13:03:44.347815Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0c0e5b2988af7bd54086bf8234f93110","sha1":"825ae62b7c5cf78a7ad4bb96ed46286a51d749eb","sha256":"9f6552a426dca3d203b652395efa556c12b0882f8fed5731d147b89e878849d2","sha512":"53fc6ce78ad49d3c0ff9caa939630fe68dec20c42e8843f5692e423d491bcdcc2f1e7136afb4aa3f7d8f126967ed8c4bb076a266270eef513e3ce1fcb01ce45f","ssdeep":"3:N/BKL1XX:eL1n","tlshash":"bb5504c0744130730410c40cd3505415500d1501151d0405705d0cdd17300040455540","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.350031Z","last_seen":"2026-06-28T13:03:44.350031Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b90e109f07d6751b373b66e80bdc914e","sha1":"8f428a844345156ad1701dbff33e1921ac43bf17","sha256":"0ed144afbb133c245f57de2589bf2dbea46a25b6aca9397ad8373553942d1c25","sha512":"46c93c78f06d138543a517d91de8038fe4931d4006e5ef8a6ec96d8ae96de309d2c4e60a12d5c20bdb3eabb21833ccf2eea3b8fcefea00d6756f55ba59378260","ssdeep":"3:N/BKL1XwX:eL1AX","tlshash":"4f5504c0744030730c10c404f370141d50150501151f0405705d0cdc17310400455550","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.352859Z","last_seen":"2026-06-28T13:03:44.352859Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e50fcfc8c752175ff807841572530cf","sha1":"03ad81477e761297b3303f079f659d0269fcd829","sha256":"31f8094427d685dd7b752b1d660ec2612ce236cf5402d8351c685ae1654acce6","sha512":"d3af1b45d5b712563fb0b88ed05ee831eabdbfcf04056f2fd8ed9cb37f4cb2241a83e8523977ae0a06b91fa1572bce52ae3050f47c46889e3e4259aa5cd8ccbf","ssdeep":"","tlshash":"8ac08c887a80e014c28125351c6b428ae638de6008581003a0425249b6a071003aaf0f","size":137,"data":"","first_seen":"2026-06-24T10:51:52.241503Z","last_seen":"2026-06-29T02:34:35.65622Z","times_seen":4493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e46aa1f3b9258d1cad102333bd29edc6","sha1":"9aaa1386293f2e41bad72245450569cb7f7af171","sha256":"8c8a1f9c33bd90e2ecd5b4d622d62fe3e343daa60428109e9bf88a999f81a6c5","sha512":"9de3dcad565e496c3950bad4644e2c6c506c90e09a0b5b3e22913f8d0615bbec842d285302f7af606b4e1fb5cf3807334d0f6abac687c33f72995cf390f7bd45","ssdeep":"3:N/BKL1X2S:eL1F","tlshash":"4f5504c07dc030730c10c404d3541415500505011f1d0405715d0cfc1730004045d540","size":1337359,"data":"","first_seen":"2026-06-28T13:03:44.365907Z","last_seen":"2026-06-28T13:03:44.365907Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"The next request for the Private Access Token challenge may return a 401 and show a warning in console.","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":186068},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":186068},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj185 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":186068},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj188 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process8//obj189 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":186068},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj192 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.014463860685545393] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":186068},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248622},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248622},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj187 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":186068},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj190 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process8//obj191 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":186068},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj193 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.014463860685545393] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":186068},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248622},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248622},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248622},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248622},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248622},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248622},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248622},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":248622},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":186068},{"level":"error","text":"Failed to notify visit:NetworkError when attempting to fetch resource.","filename":"https://register-heisted.xyz/loader.js","line_number":182,"column_number":6826}]},"http":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1022166842:1782648016:EOKH8QvoUSOKg41iakUNyoOIEU6U3nncr5Ho3yWMwhs/a12ce39b1d900afe/p898XVOJcbOYj6fw9DYw1DZNZkA87jlK5u3jh6lY3B8-1782651780-1.2.1.1-nK.FVfGuBSm.8t7f1sr9kHmiRLOxxVVmIJChqbe_OOlbjrEGq8RBsZlhq3aQ7KxS","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T13:03:00.766Z","timestamp":1782651780766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1022166842:1782648016:EOKH8QvoUSOKg41iakUNyoOIEU6U3nncr5Ho3yWMwhs/a12ce39b1d900afe/p898XVOJcbOYj6fw9DYw1DZNZkA87jlK5u3jh6lY3B8-1782651780-1.2.1.1-nK.FVfGuBSm.8t7f1sr9kHmiRLOxxVVmIJChqbe_OOlbjrEGq8RBsZlhq3aQ7KxS HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: p898XVOJcbOYj6fw9DYw1DZNZkA87jlK5u3jh6lY3B8-1782651780-1.2.1.1-nK.FVfGuBSm.8t7f1sr9kHmiRLOxxVVmIJChqbe_OOlbjrEGq8RBsZlhq3aQ7KxS\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4674\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 13:03:00 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 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$e54zGYhBnTvBWDvfbDRNxg==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12ce39dcf850afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383600,"size_decoded":288980,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b4402e1d3e05653ce066371d57182463","sha1":"ea5412aeacda6cc4639718a299e18b5aa8c01c10","sha256":"fb08a9306d970e699aef1333f3add6f7ae4a7aeed56e218f1e40d401626dd5f7","sha512":"835c34c23668525580d1e272e8ef367a16ad6c7623bf8263c33727969ed6125f6acde73737a3ed33a7ed386730cf03c60872d32bb32d92b079968917a1d108c3","ssdeep":"6144:VGAZydPv4dUREeIw6ocBNFcdrtk3It/1kJuspoWHQS0UTi1vYKuFdbdr9lyYhIz8:zZQ4dUf6owoe3IR1YRH30xvYr3b5yGc8","tlshash":"ff84227c39727ea7870ec60119d4a8562e8287120c1254d0aef41f4bdb7fc98a639f67","first_seen":"2026-06-28T13:03:44.233051Z","last_seen":"2026-06-28T13:03:44.233051Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1022166842:1782648016:EOKH8QvoUSOKg41iakUNyoOIEU6U3nncr5Ho3yWMwhs/a12ce39b1d900afe/p898XVOJcbOYj6fw9DYw1DZNZkA87jlK5u3jh6lY3B8-1782651780-1.2.1.1-nK.FVfGuBSm.8t7f1sr9kHmiRLOxxVVmIJChqbe_OOlbjrEGq8RBsZlhq3aQ7KxS","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T13:03:02.428Z","timestamp":1782651782428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1022166842:1782648016:EOKH8QvoUSOKg41iakUNyoOIEU6U3nncr5Ho3yWMwhs/a12ce39b1d900afe/p898XVOJcbOYj6fw9DYw1DZNZkA87jlK5u3jh6lY3B8-1782651780-1.2.1.1-nK.FVfGuBSm.8t7f1sr9kHmiRLOxxVVmIJChqbe_OOlbjrEGq8RBsZlhq3aQ7KxS HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: p898XVOJcbOYj6fw9DYw1DZNZkA87jlK5u3jh6lY3B8-1782651780-1.2.1.1-nK.FVfGuBSm.8t7f1sr9kHmiRLOxxVVmIJChqbe_OOlbjrEGq8RBsZlhq3aQ7KxS\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 89015\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 13:03:02 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: yLX9Mg8AJraYxGHmTJ4s2VSP3SazPepDmuLHU/YEYViWc01UuIvkqEcFdr+gfJjt$hyx8Lzp2Ro2E6oa/jwFYEA==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12ce3a82f070afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34364,"size_decoded":26253,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (34364), with no line terminators","md5":"0ce4c76200d71fd1e7e4159ba4453d19","sha1":"433df97f69b14704ab2070b3ed59958690433bd8","sha256":"245d9435af7c7cab5cb3dd44c782485aea4ca9c3c2c39bc3f67a03945055821d","sha512":"0f142e86ec152a1ad2a894150041360c5559e02e039176ef2cf0101f37fb12da43e6f41abc8dc548791c61357be0e05fcfd96aa120328e3812a80e2f75d36c85","ssdeep":"768:na5nmMiREecWN8o6CWJh6IeUACy3ZiYy9Q6kmIZO6/Sx:aHiRE3WNhLWJhRACy3rb6k7z/Sx","tlshash":"eef2013f9f7fa354896264d361ee9e66e7a06e30d5e0d8f30ba75f0168e3180236850c","first_seen":"2026-06-28T13:03:44.234255Z","last_seen":"2026-06-28T13:03:44.234255Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/loader.js","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://register-heisted.xyz/","date":"2026-06-28T13:03:06.972Z","timestamp":1782651786972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-heisted.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 17:12:02 GMT","end":"Wed, 23 Sep 2026 18:08:32 GMT"},"fingerprint":{"sha1":"7C:A4:F1:4E:B9:CE:9C:50:06:58:B8:71:29:E1:2E:29:D3:E7:2C:39","sha256":"82:52:F8:5D:90:21:E8:FC:86:77:FC:74:5D:08:0A:61:9D:9F:3A:3B:35:75:DB:EC:5F:EA:3F:DB:0C:E0:D4:A8"}}},"request":{"raw":"GET /loader.js HTTP/1.1\r\nHost: register-heisted.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://register-heisted.xyz/\r\nCookie: cf_clearance=UV0S8wri857fbGfPpRZuWhkvahJdNg7da3SKzYWNwXg-1782651786-1.2.1.1-xQYKdbXpayaMhO3MsDQRBZT2ds3VPxfPxmHrQyrIX5iyw.G5upVv6G_NIUJ1ArxAP_a_rhLraj3SrxNsy2R9UtyaOKj6iS7Iz7EjF2aASl.ZtrWSSBzLtf90Te3kbvfq7XlbkQ3.Qyo.0xIRXBpV68pVEdq_TbzOSQA2zWQBIGt43p7nPOfp0i3o4bX9uuZUzvKOZ54R3iLpwk9rEj1v7kvzPb5y0eWfN1WhbjnmRvXbqAHh5MeGhhbDTWiB1Ig0ZKV2Qw8s.N7Q.z1iwQB85egVm9mdlgcX1l4eTSiBRBnRgnVNgKXO2YwA5Zc0Kpkpsl4aCJvdDskZSwEKNynbAYykV3u1RTAtGZ9CwxY3MNMDz7H13KcGBwjqpoBV3HtUUV16VzMp1WZ0S2kZRiOJC5RhLMKhD5CCWTEDGR0foepvVqlgr7WPKgPYi76Q2zk9DTdOOYu0u16DonoCCBoazHMvngl29Tmf_G5UX0V3ay8yLnfq0Bes2FoR73VOUDGC\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:03:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 25 Jun 2026 17:09:04 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6a3d60b0-84ff\"\r\ncontent-encoding: gzip\r\nage: 3569\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Za7YsXpsmXiChHiLEQrdGZp2bvGtKnvp3q84%2FAs6NcxjPqoDjYMYE70gVKT2FLlrfN0vfxZNe692%2FnFfOdJaKRlDvBKQrXqP4nK%2F6LhrrLijnv0Tqfq6speHeSHjdaQKGnqO5Sk12w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a12ce3c498d5dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34047,"size_decoded":12021,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6876)","md5":"c7272fe2592742ccbc5163a7e5216671","sha1":"1ab800f6d98d40d02680c2acb42c0b59b5760f8f","sha256":"d07dc00d29b770243e35018d56daff42fa4b6fcb318f6485f0da1d768e3bf860","sha512":"c68484bfb9136e6bb5c8dd60056b8c24480437f659631928597af5dbefca57dea339745e1faa118e6d51bce4ee93686dac1c69156f74635dff07d60073803161","ssdeep":"768:0L/69nZD8RUR2xOVAEZ83idtOEpytAq+WBkz+wpB:b9oUYxOXEitpyt/tp4","tlshash":"dae2c88d7be53132422361780ebb16447536e8435544d8287aace3903fe4b3e65bbbf9","first_seen":"2026-06-22T19:51:15.20729Z","last_seen":"2026-06-28T13:03:44.235449Z","times_seen":21,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"register-heisted.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://register-heisted.xyz/","date":"2026-06-28T13:03:00.252Z","timestamp":1782651780252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://register-heisted.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 13:03:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Mon, 22 Jun 2026 14:37:30 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://register-heisted.xyz\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12ce39abf38723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67081,"size_decoded":22177,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d26819e314c7334b3a5dd5a004898650","sha1":"559b39e547d32af023ed6ab08c369e93db0c7f80","sha256":"9715b51191ac5c467c5b8d983bf9f77c688c61987ab80f94fe3b4c452429cbf4","sha512":"9f4ea7965bdfe1afd68bd1dbdf79cdaa039492ef8e1d29a4966ec6ae8d9b8cc6af8f8920964deab2926662041ee1ac0feb7d70df7df9e6f0e55c5d130adc818c","ssdeep":"1536:4oYt3AYYdolrsHspjxegN8t5LMhfS8OpyJr:b8+onxeg6Dgc6F","tlshash":"3a632cc472aa7877129ac0f0a03b6753b3267d36a84cc850d427dc65277de869173fba","first_seen":"2026-06-24T10:51:52.15506Z","last_seen":"2026-06-29T02:34:35.608029Z","times_seen":7171,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":5,"connect":14,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/favicon.ico","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-heisted.xyz/","date":"2026-06-28T13:03:00.282Z","timestamp":1782651780282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-heisted.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 17:12:02 GMT","end":"Wed, 23 Sep 2026 18:08:32 GMT"},"fingerprint":{"sha1":"7C:A4:F1:4E:B9:CE:9C:50:06:58:B8:71:29:E1:2E:29:D3:E7:2C:39","sha256":"82:52:F8:5D:90:21:E8:FC:86:77:FC:74:5D:08:0A:61:9D:9F:3A:3B:35:75:DB:EC:5F:EA:3F:DB:0C:E0:D4:A8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: register-heisted.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://register-heisted.xyz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:03:00 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2FksQDJmwxndAsnl7f6BLolzX8QBgmWf1oTSbRt%2B6t0GvDza6z9%2F1IfBk1GreYWb8adHRzE6byBICSEOjibyUD6wB9PrYvo%2FaO%2BJvfZzh7jqkyaACY2VaALG%2BBajo9%2FFVDNUMA3e1Q%3D%3D\"}]}\r\npriority: u=4,i\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a12ce39acaeedfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":871,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"040ce45d9b35525f3d0c5f9db67ed56b","sha1":"fd37fad716c128b43ea7ca2f62b1869358fc6278","sha256":"12dd69708edc1721f608e6a1a2aa7f4c2c7e8b3341a1e62cac8760ce02df87c4","sha512":"0bdbb29b53a5d7ed06d017b67e08553a4fead691bfe5771b3484ad5f0f5f3b2c3e521a4b2b5af4bf6505ed90f4ee2fe2686d419632aa51e7e8371faece20845e","ssdeep":"","tlshash":"cad0ebeea043a3870d9210b038c211c2264c12f6b03a41a87d83e887429883fce8b9c8","first_seen":"2026-06-28T12:04:10.206825Z","last_seen":"2026-06-28T13:03:44.23713Z","times_seen":3,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"register-heisted.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/a12ce39b1d900afe/1782651780773/spC_th4728Gtxd3","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T13:03:01.405Z","timestamp":1782651781405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/a12ce39b1d900afe/1782651780773/spC_th4728Gtxd3 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 13:03:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 2824\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a12ce3a1ca3f0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2824,"size_decoded":3045,"mime_type":"image/png","magic":"PNG image data, 27 x 98, 8-bit grayscale, non-interlaced","md5":"014b20148083f405edef15932b7a7ea8","sha1":"4973a88840fa8c6f4399b20cdd02945865d52905","sha256":"5bc1855285c8a719b9c6f487da28ac9cbe9091c671af4a63605944dd3b8217e9","sha512":"9f2f848dd699a8a04bcf75d0d06a2ffb83294038005845aee98dee334528744af2c6dce32ffaa38dbf076a3a3d6e625e0f68261f6756cbdf8c8830e651bfee9c","ssdeep":"","tlshash":"485111caa380ec38c808033b803828a0ce300a3820238b8a000f88220f02c8c82a8383","first_seen":"2026-06-28T13:03:44.237892Z","last_seen":"2026-06-28T13:03:44.237892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sharetechmono/v16/J7aHnp1uDWRBEqV98dVQztYldFcLowEF.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://register-heisted.xyz/","date":"2026-06-28T13:03:07.121Z","timestamp":1782651787121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/sharetechmono/v16/J7aHnp1uDWRBEqV98dVQztYldFcLowEF.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://register-heisted.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13500\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 28 Jun 2026 12:03:37 GMT\r\nexpires: Mon, 28 Jun 2027 12:03:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 3570\r\nlast-modified: Mon, 15 Sep 2025 16:38:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":13500,"size_decoded":14311,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13500, version 1.0","md5":"65d3eea7a186c2ff5f3ed8bf89642ea6","sha1":"ea30f8dd250111e82e53180de8ad09b6f23320c6","sha256":"41e6b9f297f7d9a2df2aaa274092f76d2f72711a15ca455f7f4f4f92caf16b72","sha512":"19ce13e7d94cfd2e9a56e128c29761d853adef646954014f2dea54bf6b8518143ed4404a9cdbd4c25d3fc04fec98520adc42d3bd357840db0b6cb2fa3c031c94","ssdeep":"384:JTOTPyx11kthS/no9Xuf8F+0pxVTS385wlKEC5FU:JTdxHchYo5uf0oM5wYp5FU","tlshash":"8b52c081d7ce258bf9b505dc14a1187c4ab3642864b75fe49881c540b1fbf2da9cec55","first_seen":"2023-05-08T12:42:22Z","last_seen":"2026-06-29T02:59:51.819641Z","times_seen":2159,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":3,"connect":33,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T13:02:59.575Z","timestamp":1782651779575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-heisted.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 17:12:02 GMT","end":"Wed, 23 Sep 2026 18:08:32 GMT"},"fingerprint":{"sha1":"7C:A4:F1:4E:B9:CE:9C:50:06:58:B8:71:29:E1:2E:29:D3:E7:2C:39","sha256":"82:52:F8:5D:90:21:E8:FC:86:77:FC:74:5D:08:0A:61:9D:9F:3A:3B:35:75:DB:EC:5F:EA:3F:DB:0C:E0:D4:A8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: register-heisted.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-JK0ChFX60WFCfeP3Kkx3TG' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a12ce396aa34dfec\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tTKnwkotV0Z2VKGOHGEg8h2N0Nr2mrYdcDesYB9O7g4am0KxZzrfgW495UyMOPujN5lgWN7oVJix01hyGFN7x0%2BetPtngV7%2FmhT2l%2BWnP9OexbJB6ZpGGKh4b9tpfaXUMiu2PJIQsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 28 Jun 2026 13:02:59 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a12ce396aa34dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5581,"size_decoded":5556,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5581), with no line terminators","md5":"c008b6f8b7efc5ede16601c2749ca70e","sha1":"9a22820a0cd99941b13f05c00bd539fe2f13260c","sha256":"3d22ec8c28a06ea4d95d635bfcb1c14ce44f689cc39a8075ca21d8210adc5129","sha512":"55145c2fe16cbd6506d610ff3457d89b80c008bdb21ee6054f00f4aee900e1ad9d908fcd6814c6cb65c1f0283407a42c5ade7ec6dd3fb865d164d8c39a2d9abf","ssdeep":"96:PNy0/toXZzIEb0EaW87Pp29OwNGdEsPY5HVYsuuC3rQt54r9Yzueh8Sbmw:PNltkCBPRZqEY5HCsuuC3Y5S6yVw","tlshash":"0eb129b3fe32442757b96f6628ba736c9231b24a7b0180c8e5d2ea6c53cde5f81481d4","first_seen":"2026-06-28T13:03:44.240068Z","last_seen":"2026-06-28T13:03:44.240068Z","times_seen":1,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":32,"connect":14,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"register-heisted.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12ce396aa34dfec","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://register-heisted.xyz/","date":"2026-06-28T13:02:59.917Z","timestamp":1782651779917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-heisted.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 17:12:02 GMT","end":"Wed, 23 Sep 2026 18:08:32 GMT"},"fingerprint":{"sha1":"7C:A4:F1:4E:B9:CE:9C:50:06:58:B8:71:29:E1:2E:29:D3:E7:2C:39","sha256":"82:52:F8:5D:90:21:E8:FC:86:77:FC:74:5D:08:0A:61:9D:9F:3A:3B:35:75:DB:EC:5F:EA:3F:DB:0C:E0:D4:A8"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12ce396aa34dfec HTTP/1.1\r\nHost: register-heisted.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://register-heisted.xyz/?__cf_chl_rt_tk=GRfv90XYREVX8R7S2KRbrHzjcrrn6ZN0yz.6CVHFy8w-1782651779-1.0.1.1-DVAnfd0PfciqyVa_GkdaAN1RyLKIejQoLk4jA02DdoQ\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: zstd\r\ndate: Sun, 28 Jun 2026 13:02:59 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a12ce3987a99dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218345,"size_decoded":79116,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0991bc8c3d450177fab87a5566ddf9b9","sha1":"accea1d74253cf173b1b2e46772b1cd5a61f39f6","sha256":"3974ec2ff5cda648bb66f72b3f42907a262e24f7a701e9b964eadbffcb76a679","sha512":"0ab7ad7f3f0bb8f9a449d972f02a8203d54b25f4fecfb772fd3f3c8f9586ccf293607b4ac85eb530992251577143a3cf7eed853496c33fff69e00f4a970c80c6","ssdeep":"6144:CshOvAjPsCggH9SpRO4b/9Cqd+R77ULDMVYWtODgGDGgoHMTcNA1Gk4QxkMIV2wg:1oWW","tlshash":"1a24b7cf74c67807022715f5842ff04f625e4dc4821c292a5a2186e07abdf799b7fab9","first_seen":"2026-06-28T13:03:44.241423Z","last_seen":"2026-06-28T13:03:44.241423Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"register-heisted.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/cdn-cgi/challenge-platform/h/b/flow/ov1/696527360:1782648014:9d2O0z3myJv4qbZfR7y4-7FH_SdDggY7nf2vir9BYug/a12ce396aa34dfec/V88MJ4xGFSdD5EyW3xzLtx1jW5RSWYGd7_fIqbvkSms-1782651779-1.2.1.1-za9VsD329jZR04FVhaMqyZYEa1c0IDSFiSQiTy4WNt8IpO4_UwAvufTp3_02f_bE","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://register-heisted.xyz/","date":"2026-06-28T13:03:00.279Z","timestamp":1782651780279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-heisted.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 17:12:02 GMT","end":"Wed, 23 Sep 2026 18:08:32 GMT"},"fingerprint":{"sha1":"7C:A4:F1:4E:B9:CE:9C:50:06:58:B8:71:29:E1:2E:29:D3:E7:2C:39","sha256":"82:52:F8:5D:90:21:E8:FC:86:77:FC:74:5D:08:0A:61:9D:9F:3A:3B:35:75:DB:EC:5F:EA:3F:DB:0C:E0:D4:A8"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/696527360:1782648014:9d2O0z3myJv4qbZfR7y4-7FH_SdDggY7nf2vir9BYug/a12ce396aa34dfec/V88MJ4xGFSdD5EyW3xzLtx1jW5RSWYGd7_fIqbvkSms-1782651779-1.2.1.1-za9VsD329jZR04FVhaMqyZYEa1c0IDSFiSQiTy4WNt8IpO4_UwAvufTp3_02f_bE HTTP/1.1\r\nHost: register-heisted.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://register-heisted.xyz/\r\ncf-chl: V88MJ4xGFSdD5EyW3xzLtx1jW5RSWYGd7_fIqbvkSms-1782651779-1.2.1.1-za9VsD329jZR04FVhaMqyZYEa1c0IDSFiSQiTy4WNt8IpO4_UwAvufTp3_02f_bE\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2242\r\nOrigin: https://register-heisted.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: IKQ7/CSz/ZXgiR9pv7Re28dShuYZ6Zmrh08+gw78Fn4=$r/C9dd9U/BXi3K/lMvoGVQ==\r\ntiming-allow-origin: https://register-heisted.xyz\r\ncontent-encoding: zstd\r\ndate: Sun, 28 Jun 2026 13:03:00 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a12ce39acaebdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19232,"size_decoded":14845,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (19232), with no line terminators","md5":"f5cb4a31e43935f9c801fc69d9fa931b","sha1":"3db9550c1f1641e18a895464e5dcedec3a3d7071","sha256":"d657d9606557b634359aab0697136c91ecd5b5b9b67f07cf1f49985bcc2a2423","sha512":"c1c7f4c4e794584c81082a00a9b381e5faeafc05348e2581bc2f4477bfe7b65486340e9a5835ecaf7b3f688e34e3ed32a3666288996fe533888e902d226c3b62","ssdeep":"384:EW1PmVqAGnrZA6qjcOBD//7cMWVqKG6EZle1SfddOxG:EAPmVqoPDX7fH6sfddUG","tlshash":"3d82e115cd8967989e5c5f4f1ce8c72c525e4c3427fa91c6a2c58a38ce7656ccdf2c0a","first_seen":"2026-06-28T13:03:44.242926Z","last_seen":"2026-06-28T13:03:44.242926Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"register-heisted.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://register-heisted.xyz/","date":"2026-06-28T13:03:00.337Z","timestamp":1782651780337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 13:03:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-KA4XNum6hAGQbWPHGBDB6M' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self' https://hagen.challenges.cloudflare.com https://brunhild.challenges.cloudflare.com; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types gIqNx7 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12ce39b1d900afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: w6xhrgj0;dur=253423, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253423,"size_decoded":98152,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"32e126c7fa2aa63e875518f077304fd5","sha1":"844afd39219abfbf4cd4cb95e8bb7204880127eb","sha256":"db01195ad58444801510c29255b16b8f01e6b6fad4f67945b74fff55bae5dbaf","sha512":"7c9497150d9f34f27a2639c70f1cb606be8fe549728ca0ddc17f27ad0185a74c708df3a92c8ee6d5d1af7b910369e16361eb9f751be87e290764274421db78e8","ssdeep":"6144:+IRg+b/EnLk0XAenv5eS/xghfBD1z62xCp+OHE7cqhM31zn0xlho97/P+nl4t8Bl:+ejUAenv5nM","tlshash":"ab44ebca78c27019072778b6445ff0eeb26a4c8845181d2d9260c6f17abcf2daf7f569","first_seen":"2026-06-28T13:03:44.24446Z","last_seen":"2026-06-28T13:03:44.24446Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T13:03:00.456Z","timestamp":1782651780456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 13:03:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a12ce39c4e890afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":305,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit grayscale, non-interlaced","md5":"970652f4229e8de4907e4b0931e8c227","sha1":"82e4de5c82a01575a3d248954b5ef8af2edf93bc","sha256":"835d9c92897bd12bfe0cdb453ee1d15a615aec89859982dbb8601158d23e9fbc","sha512":"58cc9d48f084042b3da87057cfe2cb39a52bf6d5686657519964fcc899f23314f797430df22a50ff4679f5e0e0960f58c5231b1a33e70bf12d7654994aba4e00","ssdeep":"","tlshash":"36a012c56184ad27d34a0232c2900120f8303066011211341043c8110452f048798d42","first_seen":"2026-06-24T16:26:37.398395Z","last_seen":"2026-06-28T17:17:56.495804Z","times_seen":10,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/a12ce39b1d900afe/1782651780773/fbde9f9bd72031729da4cd6a133eec7c4b12b42dad8560297b59eba16b230638/b7zYMAaQqL6JeA_","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T13:03:01.238Z","timestamp":1782651781238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/pat/a12ce39b1d900afe/1782651780773/fbde9f9bd72031729da4cd6a133eec7c4b12b42dad8560297b59eba16b230638/b7zYMAaQqL6JeA_ HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/hox7p/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\ndate: Sun, 28 Jun 2026 13:03:01 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 1\r\nwww-authenticate: PrivateToken challenge=\"AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g-96fm9cgMXKdpM1qEz7sfEsStC2thWApe1nroWsjBjgAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAxDKbk4RYZyL6XnTRyMLN4wCsxvmJhd3ftOd8yAXrz8VqFgtlvnKMefvXRO4zaElaSrpOMszh8KAW9Dsx69eFsAosPK4nvwsvfiyP6ZyhdxPLGuhjTi9yUrWzzkcXpKUD5oZ63WixlXmHZg-DGy34XBTBEDLpaBfa5nJjJuMdHFzFB3XZ4lKatFdK8sSGfXMAsUy10RQd9wnzBzarw_8QPnkBlqzJ4ZJmbO7eJ3Jx6rUKm0EsteVSMi1W_3UgNTuDSFntFLT7ivnApWTXp1kSxFIe5bwCn-1tnm7qDWHa8Q6WW3qloT-zXcLq1G6N4vNlnIldiS3oejrM7UI5IuMAFwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIAHXNhdC5wYXQtaXNzdWVyLmNsb3VkZmxhcmUuY29tIPven5vXIDFynaTNahM-7HxLErQtrYVgKXtZ66FrIwY4ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsM0Q9MnygIFl0gZx3w9LhhcDl_7YDbmNzAMUL7Xnp9GXdfWl2k5SxpfB-K_QfmiV_H7Cj8P94IMqoWL8MDExqPL01M2yoCDweJGMNAm8hGbJvLjBAr9mXOZEx9Xd_a1oM6VTL7hmfywqDKr7NjnZtoftBNM7aAcQ3oFunMqwu32HSeDNBFCR6cLq3N_eldve-E2AWzdWXrQfBQ-vNheECU-_SCUvXG_5xxdQ2AO6mpnRaaSuo-pxQhD2t-T8yKziV-ecPidkSrDvocgKAILEibz6aNYuH7U8kF5zXOjI4xRH1FqVs43TY5dwNvmfYjI-w8NNqKpoa4azpJqv3m2DVwIDAQAB\", max-age=20, PrivateToken challenge=\"AAIALHBwLWlzc3Vlci1wcm9kdWN0aW9uLnJlc2VhcmNoLmNsb3VkZmxhcmUuY29tIPven5vXIDFynaTNahM-7HxLErQtrYVgKXtZ66FrIwY4ABljaGFsbGVuZ2VzLmNsb3VkZmxhcmUuY29t\", token-key=\"MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAgKiAwIBMAOCAQ8AMIIBCgKCAQEAsxviSI6sjMo3EYekYTf-dIPsJKZ5cD3xsEmHYx664Sbocwxx4OVFCyBfqccoQRmEX0XWSEj0hYyxpSGEz2i9yhmVRSjkqknoFfuOjUc0KcblcHhVGtTIWERy01RB1YmfcngH9Znt-Z--XyaRArOXumCFBV41ZLC7--LANYHBuhSz34fCGCIFKJsbk8ggBIemExpY3f1t2OZNs4mYLHE-7DhMSYP3Yd171ZcDGvSvtW59KNqQwgCwNcjSY6crHCr8mc-vyzSJFS62lUdla7lPGnm51ne0hJTiFcfY2rDXKUBERMhEYaNuHy1itCEsHOinnQKV89W6SPZmavtQU2h-QwIDAQAB\", max-age=20\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a12ce3a0b98b0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":2171,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"ff44570aca8241914870afbc310cdb85","sha1":"58668e7669fd564d99db5d581fcdb6a5618440b5","sha256":"6da43b944e494e885e69af021f93c6d9331c78aa228084711429160a5bbd15b5","sha512":"3c266c0035de59eab2a0dd31b3dcb4a9dd157b310289e5db9ab4f8c2fddb7433466d48f25da7ad735a1cb8f2935aa612ad1f62f0efcece3933ba9979082e2304","ssdeep":"","tlshash":"c700000000000003c00000300000003000000000000000000003000000000000000000","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T02:32:22.257064Z","times_seen":471200,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://register-heisted.xyz/","date":"2026-06-28T13:03:07.110Z","timestamp":1782651787110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 05:11:37 GMT","end":"Sun, 13 Sep 2026 06:11:34 GMT"},"fingerprint":{"sha1":"CE:63:0D:F2:C0:D2:04:93:CA:AE:0D:AA:ED:9F:31:01:7A:BC:69:40","sha256":"0D:2E:E4:8D:BD:B6:76:95:B5:BD:B8:C5:CE:61:98:B9:6E:81:B5:4B:16:5C:C0:0C:C9:FB:54:0B:B4:A6:7C:65"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://register-heisted.xyz/\r\nOrigin: https://register-heisted.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 28 Jun 2026 13:03:07 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: GET, OPTIONS, POST, HEAD, OPTIONS\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://register-heisted.xyz\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p3TdLxgDr3zNLgtL98yuHi%2BMSTdJdneoqViSz0Grtdwm5V%2FUojIyL7dOHWwo8jGR8xW8Trcq0SVLyDnO5idyfoSFozNxMPUa7bb9R6AAeXxVl3KGXz2%2Fg%2Bhk\"}]}\r\ncontent-encoding: br\r\ncf-ray: a12ce3c58fcc5685-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":740,"size_decoded":2110,"mime_type":"application/json","magic":"JSON text data","md5":"fee884643757958e5be493db8cd2095c","sha1":"ddc4ad9e3d30b91adf07eb888c6f47114f01868b","sha256":"37aed3f4f87769751f888cee6b1df3a0f6ad6490b5d3d4147f3d54716b3669dc","sha512":"702bc6bb94c3a243ed86c5593838ed331942c301cb532276b653f48036bdc5f6c5e56bee1f4fc6afcef6a6b21413171afa4c2821e170649fefe71036f3e9085f","ssdeep":"","tlshash":"6001df68e8780f7b9cb8135870786817113422175e563a8e7bd4a74d0f8d8bf30b135e","first_seen":"2026-06-28T12:23:32.636045Z","last_seen":"2026-06-29T02:25:45.073478Z","times_seen":38,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":0,"dns":3,"connect":2,"send":0,"wait":221,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/favicon.ico","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-heisted.xyz/","date":"2026-06-28T13:02:59.947Z","timestamp":1782651779947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-heisted.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 17:12:02 GMT","end":"Wed, 23 Sep 2026 18:08:32 GMT"},"fingerprint":{"sha1":"7C:A4:F1:4E:B9:CE:9C:50:06:58:B8:71:29:E1:2E:29:D3:E7:2C:39","sha256":"82:52:F8:5D:90:21:E8:FC:86:77:FC:74:5D:08:0A:61:9D:9F:3A:3B:35:75:DB:EC:5F:EA:3F:DB:0C:E0:D4:A8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: register-heisted.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://register-heisted.xyz/?__cf_chl_rt_tk=GRfv90XYREVX8R7S2KRbrHzjcrrn6ZN0yz.6CVHFy8w-1782651779-1.0.1.1-DVAnfd0PfciqyVa_GkdaAN1RyLKIejQoLk4jA02DdoQ\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:03:00 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=In3ZtZcRJYsC%2Bm0PqCLwu%2FyeaYw8YK3nlblmmdB5nFnDNNmNbwB%2BjRL7FT%2FaxfRQy04fZukCpxsxrrOdrJgyP3aUKDciCtd9pI55c8R8MnncgfblYS136CX6dKG24RuUy9wdei0aNw%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a12ce398aa9cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":864,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"040ce45d9b35525f3d0c5f9db67ed56b","sha1":"fd37fad716c128b43ea7ca2f62b1869358fc6278","sha256":"12dd69708edc1721f608e6a1a2aa7f4c2c7e8b3341a1e62cac8760ce02df87c4","sha512":"0bdbb29b53a5d7ed06d017b67e08553a4fead691bfe5771b3484ad5f0f5f3b2c3e521a4b2b5af4bf6505ed90f4ee2fe2686d419632aa51e7e8371faece20845e","ssdeep":"","tlshash":"cad0ebeea043a3870d9210b038c211c2264c12f6b03a41a87d83e887429883fce8b9c8","first_seen":"2026-06-28T12:04:10.206825Z","last_seen":"2026-06-28T13:03:44.23713Z","times_seen":3,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"register-heisted.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T13:03:06.725Z","timestamp":1782651786725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-heisted.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 17:12:02 GMT","end":"Wed, 23 Sep 2026 18:08:32 GMT"},"fingerprint":{"sha1":"7C:A4:F1:4E:B9:CE:9C:50:06:58:B8:71:29:E1:2E:29:D3:E7:2C:39","sha256":"82:52:F8:5D:90:21:E8:FC:86:77:FC:74:5D:08:0A:61:9D:9F:3A:3B:35:75:DB:EC:5F:EA:3F:DB:0C:E0:D4:A8"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: register-heisted.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://register-heisted.xyz/?__cf_chl_tk=GRfv90XYREVX8R7S2KRbrHzjcrrn6ZN0yz.6CVHFy8w-1782651779-1.0.1.1-DVAnfd0PfciqyVa_GkdaAN1RyLKIejQoLk4jA02DdoQ\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2093\r\nOrigin: https://register-heisted.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=UV0S8wri857fbGfPpRZuWhkvahJdNg7da3SKzYWNwXg-1782651786-1.2.1.1-xQYKdbXpayaMhO3MsDQRBZT2ds3VPxfPxmHrQyrIX5iyw.G5upVv6G_NIUJ1ArxAP_a_rhLraj3SrxNsy2R9UtyaOKj6iS7Iz7EjF2aASl.ZtrWSSBzLtf90Te3kbvfq7XlbkQ3.Qyo.0xIRXBpV68pVEdq_TbzOSQA2zWQBIGt43p7nPOfp0i3o4bX9uuZUzvKOZ54R3iLpwk9rEj1v7kvzPb5y0eWfN1WhbjnmRvXbqAHh5MeGhhbDTWiB1Ig0ZKV2Qw8s.N7Q.z1iwQB85egVm9mdlgcX1l4eTSiBRBnRgnVNgKXO2YwA5Zc0Kpkpsl4aCJvdDskZSwEKNynbAYykV3u1RTAtGZ9CwxY3MNMDz7H13KcGBwjqpoBV3HtUUV16VzMp1WZ0S2kZRiOJC5RhLMKhD5CCWTEDGR0foepvVqlgr7WPKgPYi76Q2zk9DTdOOYu0u16DonoCCBoazHMvngl29Tmf_G5UX0V3ay8yLnfq0Bes2FoR73VOUDGC\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:03:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nlast-modified: Thu, 25 Jun 2026 09:48:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RrPnCIISvybNqDIbCUI%2F%2BLvXksed0KjjXDngwjdVrY%2BPSp24bvmAXb8Rh4OdWc6oyiBFBRi3iUNSMSn3%2Fz6Sqbg3%2FzgZk4gW6Iv8CNVO0rohrY24jj1DLaiEKg2L%2FRy%2FSy5oHeeCCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: zstd\r\ncf-ray: a12ce3c30893dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4248,"size_decoded":2152,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"9d3fb778b0a9f7b270dc360dc886e6d4","sha1":"6c488187351613c5b125062b2923a48fea895b11","sha256":"75ffb659bf79ac75ca61dbd69b705cb35118d06bfc005eb21a9af699db0f97a2","sha512":"a34a924edabd9184161646282767cd6630c61618357da539dd7230ae1bc07839bcf460b9a8266061ed0f58a8037ca773bfbcdc362077cd2007d7c8d0dba22a8c","ssdeep":"48:vrL6NQGHtsXN7PR+353msOjKDDexhMKntRewzWTOlQHNS/K/x+BUa1dIUoJL665:vr2GBPAZOWy69ilItyUWdIhJ2U","tlshash":"ba9110ba9ad301167013d1595b678b1f2392d107da46ce1e36ee1284efca4e9dce7390","first_seen":"2026-06-27T00:34:37.169733Z","last_seen":"2026-06-28T13:03:44.248198Z","times_seen":5,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"register-heisted.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Share+Tech+Mono\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://register-heisted.xyz/","date":"2026-06-28T13:03:06.967Z","timestamp":1782651786967,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Share+Tech+Mono\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://register-heisted.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 28 Jun 2026 13:03:07 GMT\r\ndate: Sun, 28 Jun 2026 13:03:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":428,"size_decoded":987,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b74e2e7189aef26df063b69191aa905c","sha1":"ea85e5e71f6d7e3e446b2193835efb0432339eea","sha256":"e3aea8af30142b3a0ba98668f11b5a671cba81789acd2efa04dec177bd2b05e7","sha512":"20ed7b5d2b75aa281583cf88f0b05b03e00b4a073725f814112939ac1a30b96e6ba0e02b47dadeedfe47afbb5adf131ddde1bd486048eb75be16b8e84e6ebac1","ssdeep":"","tlshash":"51e0ab41482aa600ea430dc212cf7e32af4ee054a444ad24bbfa14d4bc96c579386b1e","first_seen":"2025-09-17T20:16:51.287198Z","last_seen":"2026-06-28T13:03:44.248775Z","times_seen":194,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":35,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"register-heisted.xyz/favicon.ico","fqdn":"register-heisted.xyz","domain":"register-heisted.xyz","tld":"xyz"},"ip":{"addr":"104.21.56.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://register-heisted.xyz/","date":"2026-06-28T13:03:07.295Z","timestamp":1782651787295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"register-heisted.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 17:12:02 GMT","end":"Wed, 23 Sep 2026 18:08:32 GMT"},"fingerprint":{"sha1":"7C:A4:F1:4E:B9:CE:9C:50:06:58:B8:71:29:E1:2E:29:D3:E7:2C:39","sha256":"82:52:F8:5D:90:21:E8:FC:86:77:FC:74:5D:08:0A:61:9D:9F:3A:3B:35:75:DB:EC:5F:EA:3F:DB:0C:E0:D4:A8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: register-heisted.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://register-heisted.xyz/\r\nCookie: cf_clearance=UV0S8wri857fbGfPpRZuWhkvahJdNg7da3SKzYWNwXg-1782651786-1.2.1.1-xQYKdbXpayaMhO3MsDQRBZT2ds3VPxfPxmHrQyrIX5iyw.G5upVv6G_NIUJ1ArxAP_a_rhLraj3SrxNsy2R9UtyaOKj6iS7Iz7EjF2aASl.ZtrWSSBzLtf90Te3kbvfq7XlbkQ3.Qyo.0xIRXBpV68pVEdq_TbzOSQA2zWQBIGt43p7nPOfp0i3o4bX9uuZUzvKOZ54R3iLpwk9rEj1v7kvzPb5y0eWfN1WhbjnmRvXbqAHh5MeGhhbDTWiB1Ig0ZKV2Qw8s.N7Q.z1iwQB85egVm9mdlgcX1l4eTSiBRBnRgnVNgKXO2YwA5Zc0Kpkpsl4aCJvdDskZSwEKNynbAYykV3u1RTAtGZ9CwxY3MNMDz7H13KcGBwjqpoBV3HtUUV16VzMp1WZ0S2kZRiOJC5RhLMKhD5CCWTEDGR0foepvVqlgr7WPKgPYi76Q2zk9DTdOOYu0u16DonoCCBoazHMvngl29Tmf_G5UX0V3ay8yLnfq0Bes2FoR73VOUDGC\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:03:07 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0KbKONeLhYHxLoFz6AfrkPb717Hb0vGgvVxDOb1dTtCZF0dEWo7gtNuGD2v34rReAuSunXL6EWulOL6jrV5YVql6h%2BHpL%2Bdpsk%2F7D9u24Ijx6i3350uXSQP%2Bodx%2F61RfVKoXDoTfKw%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nage: 7\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a12ce3c6993fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":870,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"040ce45d9b35525f3d0c5f9db67ed56b","sha1":"fd37fad716c128b43ea7ca2f62b1869358fc6278","sha256":"12dd69708edc1721f608e6a1a2aa7f4c2c7e8b3341a1e62cac8760ce02df87c4","sha512":"0bdbb29b53a5d7ed06d017b67e08553a4fead691bfe5771b3484ad5f0f5f3b2c3e521a4b2b5af4bf6505ed90f4ee2fe2686d419632aa51e7e8371faece20845e","ssdeep":"","tlshash":"cad0ebeea043a3870d9210b038c211c2264c12f6b03a41a87d83e887429883fce8b9c8","first_seen":"2026-06-28T12:04:10.206825Z","last_seen":"2026-06-28T13:03:44.23713Z","times_seen":3,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"register-heisted.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hbeugaufg1-8-26hbaaaaddoter.fly.dev/notify-visit","fqdn":"hbeugaufg1-8-26hbaaaaddoter.fly.dev","domain":"hbeugaufg1-8-26hbaaaaddoter.fly.dev","tld":"fly.dev"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://register-heisted.xyz/","date":"2026-06-28T13:03:07.372Z","timestamp":1782651787372,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /notify-visit HTTP/1.1\r\nHost: hbeugaufg1-8-26hbaaaaddoter.fly.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://register-heisted.xyz/\r\nOrigin: https://register-heisted.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T02:32:21.037303Z","times_seen":16811713,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
