{"report_id":"e831562e-cfe7-4f24-9de8-488223a0c64a","version":0,"status":"done","tags":[],"date":"2026-10-17T11:36:58Z","url":{"schema":"http","addr":"hrcke.com/","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hrcke.com/main.html?#/otherLogins","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"title":"HRT SAE","dom":{"size":1122413,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57981)","md5":"b9db44a24973a54a10fcb3889f90517f","sha1":"048f85975425386327a665439cacef978a047cb4","sha256":"30fe2f041325ededc11e2766eff9d44be02fcb45b7c9e5d9f46babf0aab07f73","sha512":"1116ecef568c0bd92636bee5d7c299357cfeae40ac9f37837099c38778fb5081793ee240c66a4fdbbcf0c210f4adcc664b161f69a088994fdc7433671e42c98c","ssdeep":"6144:2jzz7uQLH+5WOC5hyDys0FRPBY0rIOyqbIxg:yzGQHhyDyseRnbIxg","tlshash":"f5353da093185f7c080fe7f5c4392db9361e10ef7d92eebc83b8cee85166a56c844959","dom_hash":"domhashdac45ebe229fe0bfaf22c741c7b5e37a","first_seen":"2026-10-17T11:37:15.219266Z","last_seen":"2026-10-17T11:37:15.219266Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hrcke.com/","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-21T11:36:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hrcke.com","ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-10-07","domain_rank":0,"first_seen":"2026-10-17T11:32:47.898653Z","last_seen":"2026-10-17T11:32:47.898653Z","alert_count":160,"request_count":162,"received_data":29348217,"sent_data":121269,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-11T22:47:21.405407Z","alert_count":0,"request_count":4,"received_data":49880,"sent_data":2316,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.youtube.com","ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2026-10-12T09:22:46.230026Z","alert_count":0,"request_count":2,"received_data":32032,"sent_data":2095,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"mainnet.infura.io","ip":{"addr":"18.185.30.144","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2016-04-15","domain_rank":359501,"first_seen":"2016-08-23T15:27:48Z","last_seen":"2026-10-14T11:28:56.211377Z","alert_count":0,"request_count":1,"received_data":166,"sent_data":614,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"s3-symbol-logo.tradingview.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2010-03-20","domain_rank":110931,"first_seen":"2020-11-23T08:22:37Z","last_seen":"2026-10-17T07:54:28.207743Z","alert_count":0,"request_count":6,"received_data":8974,"sent_data":3337,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"www.walletlink.org","ip":{"addr":"104.18.37.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-05-14","domain_rank":712796,"first_seen":"2019-07-09T20:34:05Z","last_seen":"2026-10-14T19:47:52.075512Z","alert_count":0,"request_count":1,"received_data":574,"sent_data":797,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hrcke.com/main.html?#/","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"df7b72b7c274413ec8482267b703cf7d","sha1":"ec5937d7ae554ccf3de657be76e732134e7cafa1","sha256":"51ae88f79dc5a7a238953a4484d6b0712dd897f5947ea2442698e330d9b42822","sha512":"d5e042f4850f8f7a7f828c7623b6ea59134af2734b3dfa3b04a6a63b7cb4e2cb5ce9463b012cfe904e5265dfb9161295a3db7a1576017600e9e28ace23f9a079","ssdeep":"","tlshash":"4d11252a01b2847141bfb27eab9f5380353200cb7905ea487d0c5f806f68a3c57a1bed","size":1058,"data":"","first_seen":"2025-04-05T11:30:41.082246Z","last_seen":"2026-10-17T11:37:15.387321Z","times_seen":302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/main.html?#/","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e185144885f9b146f10cd4cd82e6c9b7","sha1":"cc93e1a30ee57fe372d3462929c65594827edf41","sha256":"e6637c82257cd00f5c34ca003ca7dbf2ca98860ebe4e1976baedc829a6f8d673","sha512":"e8af159eab30adf38d09cb6858f752241a3275368365aa88c624b0778638876c853c6b3e653b2ce66dc9bdf59e5d25353c0c791b9739d6aa57e0fecdb81b35a7","ssdeep":"","tlshash":"4da0220c08e03803c80b30e3c33f308a20a080220e8082833e0e23a00f2008c2200fcf","size":74,"data":"","first_seen":"2025-08-20T01:01:27.872573Z","last_seen":"2026-10-17T11:37:15.388243Z","times_seen":296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/78153.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b12e1780d3fb1562708c35b593572c47","sha1":"e19a0c065f85b1073f73b01a204a67016fd71318","sha256":"a09861c4e84d0289ed2b79f0166b1156fef9f8c6a940ad8ebd78eb8c0afc0af1","sha512":"18348dca00dca194e13abec145650f6127c2c60c8db49e2158e803c6e5e3183cd19cc09efa910ff69f742f384649d01cd080ae149cafb65ddb06323ed28bef21","ssdeep":"192:mV+i6beUz+nzPvnoH1x+kBHkxvkKYKbS8d30qxPE68y//mnkUn8B/RmwRCX6L4tL:mV+bP+nToH1x+kBHkxvkKqjbXyCadOUU","tlshash":"0542441d4485a97edd1ba581206a4630902a0fa490725ccbe77cecb0e3e6d797f1e77c","size":12091,"data":"","first_seen":"2026-10-17T11:33:03.434752Z","last_seen":"2026-10-17T11:37:15.255813Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"06459e5b425bf4b41c7a92cfc76ef9b9","sha1":"ce99de5f9cefee6784d61a0bf4062b399fb4eaf8","sha256":"434c106efb9056b5868cc8889ba5e6f64f6378763419dcc4d3437f85ac8b34ac","sha512":"74c771a68a5263c7ca74ae9f12ea44d0d0501657e87c5f7b9baee7e280b1984c724925eec54084cd67375d4ae7ad6ecf64b47fd55a87d049c8c2a2edd124c457","ssdeep":"","tlshash":"f7d0800511f2680d000f2550d7c177837d534ccf09e476143a8c53401f35902d0d9fdc","size":196,"data":"","first_seen":"2026-06-27T09:50:17.748339Z","last_seen":"2026-10-17T11:37:15.389044Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c68c965f9cdf3ed9730e196cde4b60e","sha1":"ff7dee346a9bdae56ed029aa13fd29c26a1ecd72","sha256":"ee7ef394f5bb965f5a64a9bc17218ce56ea4d9d733677d15b9caa319de25d708","sha512":"da2634a9455c217a6e4715e89e56bbe45926d75c8654f7a84573f4deb5423ea78ef45c963ec557c967bda365f6340129b06f299d556745ff1fb353f30039e4ef","ssdeep":"48:6DTnzQ92E4V+83KW0qw/W0ohFEFf35vIdn9cEIJc66MbKWJLqI/DC6fPFrZFR42G:6HnzRtYqkeStaqEgc668VqIe6ftnRHG","tlshash":"f7b1eb6915b30020497b30bb8b8f3155b633a6037855e888bf5e47845faa51de772bfc","size":5368,"data":"","first_seen":"2026-10-10T14:05:22.232497Z","last_seen":"2026-10-17T11:37:15.389818Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/assets/chunk-vendors-si9w04v7.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"668fe9c34f4ee792f06aacef6e4b6613","sha1":"f3114aa5645403353609838fbdfb018dd67b8af9","sha256":"b2515357ecc929b93d2b26be625edf4bdae111bcce178736798544fb348bf33b","sha512":"c69d02f6c33e2b797925957330ce0ed55a4b913777987e4c4160118c3a30861d291e6c9a8419c2736d5839d477c66154081fbb289242b19ec10ad5eb0403a709","ssdeep":"768:E2PuMXL/MQFUUxvqSjSFsLqLt0TqdnlfzA5vfjunSQQ3J8MRIXEX+67Y:ksTMAU0rLqBlf2fjAkyGGgJ7Y","tlshash":"ee23d09a887ed5168e1132869b5b51032a61e607709cc630fe4e1765df0dd0aefb6fc8","size":48522,"data":"","first_seen":"2026-03-20T15:34:08.487202Z","last_seen":"2026-10-17T11:37:15.223275Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/1271.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"53f4d60179680bc59b2c1362dd4d9797","sha1":"4d1fd74afed39f098d07a12593a238293f4f8bbb","sha256":"a1de1ff82f75d8ee5bd9ad31911f02355aaec85d6e50b74e8d08e0a7aa5e1863","sha512":"70aade7e74c6e0baf556e2a2de803af3712adab283c467a42b61b47533b7651c0eb4c0cd3608a13c8b91b6560d03e399e8b79a2249e7bcf1595b8d360f094a00","ssdeep":"384:Ph+dS+Qinm2JaMxjHpZdIStq/5F2yCF2Rf:P7N20QlZhm","tlshash":"2672ea0ff4c2743ac8be6155a42f451291761fa9a042d05af7bcc9ec46b4c987a2ef7c","size":16874,"data":"","first_seen":"2026-10-10T14:05:22.109674Z","last_seen":"2026-10-17T11:37:15.267484Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/77358.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efb22829decb6e2ceaa52c6dd3ed9d60","sha1":"749b35907f3961710d250680c1823cbf5cd9a7e9","sha256":"bb893fdde1024008bf7cb1928e32bdff50601f72f69c75d0ea2d4dd7e1661e4e","sha512":"07150750c61070e8020657c024c55e72421ced67cf79ccd4641259a2ce37fda58dc879b2f2c8dcd0b54bcc50ad8e41f1ba23c68cf1689abf33878d9044c399c6","ssdeep":"192:PP4/sLITXKeDxFZhhZ+AJWkhPvAUyR7ioYtKYSmT90SUSRnRQ5oRG7x/j0nAKAHy:Y/sMTpvhx8UxDKkXnRQ577xIAbHpSt","tlshash":"eb72b88bb0d2b5329e9ab1d6611f0210a4330e68b41da07e7efcdcd65aa494d136df7c","size":16225,"data":"","first_seen":"2026-10-17T11:33:03.325568Z","last_seen":"2026-10-17T11:37:15.316985Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/assets/captcha-mini.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89ef751b31087e2f7b9b908097499b1d","sha1":"ce21323dc3a6653b3e6e35f9c23e4a64ab680863","sha256":"c7f3811ce644c6029ab05ee97583c3277a0ea16ff153fbe2a288ac52da4e0ac9","sha512":"ae11bc13ac34ca7288c8e2f2841c64cf8b78976f074889e2abb2dc16e7892674cfc58f7a3f9f1bd828ca2328b2cbf6dd70d53f33d7a1fef46246d1c4d7f92756","ssdeep":"96:HeewKHcVHbblkutbbZTeRDou8plO5a1xG4Btx8x5zWRAZf2xGD:HeeH8VnlkUREDou8prjhJIFf+GD","tlshash":"dfc1022a2e7b0575d8a7006e5b5b314ab470810b6a05dc2c78fec3d84fd4ef85627aed","size":5719,"data":"","first_seen":"2026-01-10T02:47:31.863543Z","last_seen":"2026-10-17T11:37:15.331682Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/16131.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"705af189132c0ebc8e91efcf78fdf815","sha1":"f0d9c92c8d99db374a69b2139b894dc4ed5798a5","sha256":"6cd94ac48239a4bfbfd67c9318b9655ba4e4587b1a84083829cf3828d285186a","sha512":"0dcd7992fe1a8c2a6cd7bc1910a74e4d72b1af7ca942f6c15bf1db25f3e48422859430c056ec8d7a829db51ffa881e1f6289837efb595b7873fa576bcd426042","ssdeep":"1536:dI7f7lNf8H6jnq8/KHESS8fQdvlF81SuzOtGNufL:dI7fTf8HSnq8/KHZSpdvlu1SuzOt1","tlshash":"ac736ce8a9dfbeac2883934dab4b110930e91e45c8bbd9d45ddd0a1202ece5fd786315","size":76790,"data":"","first_seen":"2026-09-17T08:23:53.105965Z","last_seen":"2026-10-17T11:37:15.266809Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/app.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cad8e753e4dfc9cef01fc3423c4f354","sha1":"a131c50c29430b623059564aba5ad92aeec84330","sha256":"15c94984e6357c8d96586d267546fcc230ea823450a98853254ad2feb3a48788","sha512":"dd433ee715a82940a6b1a36a71e200c43982468fd80edd0ee5d09c0682b85dd2fdb0dd0929ce539706eabc5ce60289a1aff43a416937f850e7980f67069c4421","ssdeep":"24576:9tGHMvukBuATvo+WSB5gsqaEt13A0Gm6AAOIK4L2q8yYPKJRsFwPshh1g/3ul:0CBrTg+9qaEjA0pBGKfycgRsq0Xl","tlshash":"c5d5d0b1a324a2fc0f8e43e8f51f58597d2f24ff74599864827ccec0a6d169c891ac9d","size":2784926,"data":"","first_seen":"2026-10-17T11:33:03.469638Z","last_seen":"2026-10-17T11:37:15.391876Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/main.html?","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"df7b72b7c274413ec8482267b703cf7d","sha1":"ec5937d7ae554ccf3de657be76e732134e7cafa1","sha256":"51ae88f79dc5a7a238953a4484d6b0712dd897f5947ea2442698e330d9b42822","sha512":"d5e042f4850f8f7a7f828c7623b6ea59134af2734b3dfa3b04a6a63b7cb4e2cb5ce9463b012cfe904e5265dfb9161295a3db7a1576017600e9e28ace23f9a079","ssdeep":"","tlshash":"4d11252a01b2847141bfb27eab9f5380353200cb7905ea487d0c5f806f68a3c57a1bed","size":1058,"data":"","first_seen":"2025-04-05T11:30:41.082246Z","last_seen":"2026-10-17T11:37:15.387321Z","times_seen":302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/main.html?","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e185144885f9b146f10cd4cd82e6c9b7","sha1":"cc93e1a30ee57fe372d3462929c65594827edf41","sha256":"e6637c82257cd00f5c34ca003ca7dbf2ca98860ebe4e1976baedc829a6f8d673","sha512":"e8af159eab30adf38d09cb6858f752241a3275368365aa88c624b0778638876c853c6b3e653b2ce66dc9bdf59e5d25353c0c791b9739d6aa57e0fecdb81b35a7","ssdeep":"","tlshash":"4da0220c08e03803c80b30e3c33f308a20a080220e8082833e0e23a00f2008c2200fcf","size":74,"data":"","first_seen":"2025-08-20T01:01:27.872573Z","last_seen":"2026-10-17T11:37:15.388243Z","times_seen":296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/chunk-vendors.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"757973e936e7d61641ff62cec6dcc9a9","sha1":"aa9973fcf0dc14803b8476de569633a333624015","sha256":"79d585f19c8d99377488e77f089505c068551a9425568d1545891b61dcf043f9","sha512":"fb043552e6fc3403ea3f1c8e751c9ca640aff2904bdfaebda3165a06d55fea470a0ae6384c54d58993b0386a8a0222b4680648f7e440b0d5ed3cfc2cb2b80e16","ssdeep":"49152:iUOuErEg/yBmyD64UIU30rOjsDbhDtbN9sfhfu5Bs/zxSXNIQXz+H1x0Mx1X:pd7CxsNvXzK","tlshash":"02f51b89b291b03543a720b4007f150bf33a6959740e84a8f675e8ea7cbd94e617bf7c","size":3340687,"data":"","first_seen":"2026-09-17T08:23:53.133155Z","last_seen":"2026-10-17T11:37:15.393719Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/39229.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb800851f2d071888b8984be67bb52a8","sha1":"0586686bd7377ed2095c7e4bfa8e48951746daee","sha256":"f13eb93b6b7d4fea94d23739a0261fecb346ff2023506cc9c9c7ceea7a63be8b","sha512":"69d518c560ada2594cf2d8be3b46969a44a77f125f68acb543f7fcfca2b1feff2f998a0f28dae2cc2f4690e3aa0cae01839d32a4a6c234809eac1f2e2bd799d6","ssdeep":"6144:p7jnaiHBkTszUnw0ElkPD5srvCn+iNuCb5JrRhg:SssTFyoHq","tlshash":"5b644ad57390f061539740e6a07b1007f3352929781c80a8f3acdce7b96aa8e6677f79","size":318894,"data":"","first_seen":"2026-09-17T08:23:53.129728Z","last_seen":"2026-10-17T11:37:15.381213Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/32729.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f381f7e7ca3c18703f6f8213740ee208","sha1":"c3339ec40cfbb1cfb9e3e56da2a805c608c9e094","sha256":"8b2a561b03ac3321b42fd0e71753e776cd7238efe1e44914112f8147da078f68","sha512":"074cac56f4ab49105c4b6573712d3c8e60a46ce37204ea66675ffb09e79a3bf7310cdd19c892d017afddf21196d690cec28ae47638c564ce14e987b48b52186e","ssdeep":"","tlshash":"09713192828b0afb05051ed8b70a7fc3cdc916b4e06e7a2524b4dcf16973eb8634593c","size":3616,"data":"","first_seen":"2026-10-10T14:05:22.132818Z","last_seen":"2026-10-17T11:37:15.305574Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/assets/crypto-min.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00c83b9fb420a2a51fa8bdfc393a36e6","sha1":"02c964bb77b38e2d4a797f879c62f1d7e8e7e298","sha256":"fdc42e452909c91865a51767cf0c64eabc7e79263bb2f74c8e7ba6efa96d7126","sha512":"c7a30cf888f1672aa4e71e9a13538d8736b96757eafb25a25df0cbc76b70ea68ad0b98c691a153841987f3bc59f0c9a4b5e4a9920bde4aa4ab91eff5e9e72406","ssdeep":"1536:3+boZMm1xIos+VaLOaDMYZE8Rd/s0D8pouR/Q1TwWeGVHxru31kJtEHqcduqBHof:uSYGVaaaYYUpouR/Q1QHtuOHooS9X","tlshash":"de93fb8a5ae214b4a12bf43e1f6f98026e45645f1f29fe0e7d4c82a44f4d42d13b5fac","size":97461,"data":"","first_seen":"2026-03-20T15:34:08.60414Z","last_seen":"2026-10-17T11:37:15.266147Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/assets/chunk-vendors-siqc5on6.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"668fe9c34f4ee792f06aacef6e4b6613","sha1":"f3114aa5645403353609838fbdfb018dd67b8af9","sha256":"b2515357ecc929b93d2b26be625edf4bdae111bcce178736798544fb348bf33b","sha512":"c69d02f6c33e2b797925957330ce0ed55a4b913777987e4c4160118c3a30861d291e6c9a8419c2736d5839d477c66154081fbb289242b19ec10ad5eb0403a709","ssdeep":"768:E2PuMXL/MQFUUxvqSjSFsLqLt0TqdnlfzA5vfjunSQQ3J8MRIXEX+67Y:ksTMAU0rLqBlf2fjAkyGGgJ7Y","tlshash":"ee23d09a887ed5168e1132869b5b51032a61e607709cc630fe4e1765df0dd0aefb6fc8","size":48522,"data":"","first_seen":"2026-03-20T15:34:08.487202Z","last_seen":"2026-10-17T11:37:15.223275Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/main.html?#/","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"75ca195b0ae79d7980caada1dc3fa59f","sha1":"bc89c6a6e51e0f6b5d2aca9dba07bc13e185056c","sha256":"850c2f8ce6814d5d3dddcad177672bd7561049a1eee007a532700dd8ada88fee","sha512":"78d06b0a2d7610905ab233a6af4d9e870309765ac85a37980e7927d21b97c7cc1946f65e761ffd3c2233fd9a0a328a2572107a4571510fea5062a488cec57cf4","ssdeep":"384:uW94xN/Cm/Kk0FLb37t8h8DH09Ujt+KcUwJsSjJtTGfX6/DH5C71iTM:uhxkOKDHyh96pdSjrGfX6/g1ig","tlshash":"a6b25c7657a32d73c7f379b5e10f2712ade8e873424cc254e58cc0b2a0659ae906a9d8","size":25606,"data":"","first_seen":"2026-03-20T15:34:08.665296Z","last_seen":"2026-10-17T11:37:15.394571Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/player_api","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"22a40d8e1f7bef5ff57cc360db505def","sha1":"cbbc05b3e4131fe969167af41e5cdaa50c3b988a","sha256":"347209005ff9f824a544d4523395915b2f63363e4cbfc619ccdd27b27ed51710","sha512":"2f54a5d9dce4bc325a6d014f84d87176be6d407b88f49499abb6d770304786e5521fc5e44f5984990f19c6a9f1a0ae63041d95b1d0adf10f9e82b9ed3f1fa401","ssdeep":"","tlshash":"cf11cb7b3d80e639865894e4a03fc31cb1a224997850cd9110cde889e65cacaad2d5bc","size":993,"data":"","first_seen":"2026-10-14T16:22:37.80146Z","last_seen":"2026-10-17T18:46:09.398907Z","times_seen":493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/16168.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28d80f7727fc245f748644d28f79187d","sha1":"824c8c1de8b48e9564da1bafb5274292658e36f5","sha256":"13e1aac23582321a20719d129d771416a856f627de43cb811df1397f834c3707","sha512":"b8a2e8e3525b32a4c8a5c6109561bae69bca241a9ac43b03ae6675c3dbe1fc267ac889cd18fdd31adc49c7dec1919fa878650a883382a4c52002890fddb9f034","ssdeep":"192:k84GCU2IHL8kuj9APSNqtctTzllPlK5AgJ8Ir0SmeQrZKRYdb2UokyFGLUwYrq:V4GcIwl/eOTJCtQrZEMaUokywYrq","tlshash":"1a929505b4e7f077cd9a6016902e5210b1bb3f8ea804d849377cd9e0e5a9d28752affd","size":19771,"data":"","first_seen":"2026-10-10T14:05:21.84744Z","last_seen":"2026-10-17T11:37:15.34416Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/49559.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d6429f252c88aedadbb39bb56ab5652","sha1":"396bb922a9e6873aa1bb103d5578b651475b9c44","sha256":"b48b3edd04c61a8fbb67045957f34340ae02026de356035d04e667f12dc83866","sha512":"fe59ad8ff189aa24df20ffdd66d3676d0c0c52b9abf11142fb7d7166881fa8a18b99a372ae0baf90055e68143d858ca0afb4aa1e6062db3053ab324aa6b9fe5a","ssdeep":"192:pVZXFVU5YSt9XEk/K5ZKHVY2S9XONs8uvzBWt26Xza/NgBevqXlctp9Xx7:t2f9/QwZqeNs8kove/GkvylOpn","tlshash":"1b420819f2d6681f8d8f4439201f470152662e89b886841db3bcdef489b9c18b27df79","size":12596,"data":"","first_seen":"2026-10-10T14:05:21.904285Z","last_seen":"2026-10-17T11:37:15.382096Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/0229cd64/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8aebcfe5019ef6b04a5eaed58d5e5038","sha1":"0d76479b931295672b6a0c9a07311ff12a123331","sha256":"316a92f17a6607590c3675c075dbea110f7ab5bf8dd3e24a6eaf3bd767122038","sha512":"86446faed5f320ab060b643f32d82d4826a29a06bcecd3e62f48a16618bd77c9a62ab8b40003a369a73d82b56cff9c342e80c93f9bbc563668822358751b0ecf","ssdeep":"384:laUnC1G15COneIQR6jtEmbwoPtjU0BrIKoU4mSov4NxBfKBtYy8kF0NZBFRkChnw:lPCK5x80Io1jJB5vQfoB0rBFCK8D","tlshash":"9cc2f9cd7bb1b0714373a5b5802f100fb23e59aeb408ca98b288d8e16df55594627f7e","size":27038,"data":"","first_seen":"2026-10-08T06:29:11.170009Z","last_seen":"2026-10-17T18:40:37.352671Z","times_seen":1545,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/main.html?","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"75ca195b0ae79d7980caada1dc3fa59f","sha1":"bc89c6a6e51e0f6b5d2aca9dba07bc13e185056c","sha256":"850c2f8ce6814d5d3dddcad177672bd7561049a1eee007a532700dd8ada88fee","sha512":"78d06b0a2d7610905ab233a6af4d9e870309765ac85a37980e7927d21b97c7cc1946f65e761ffd3c2233fd9a0a328a2572107a4571510fea5062a488cec57cf4","ssdeep":"384:uW94xN/Cm/Kk0FLb37t8h8DH09Ujt+KcUwJsSjJtTGfX6/DH5C71iTM:uhxkOKDHyh96pdSjrGfX6/g1ig","tlshash":"a6b25c7657a32d73c7f379b5e10f2712ade8e873424cc254e58cc0b2a0659ae906a9d8","size":25606,"data":"","first_seen":"2026-03-20T15:34:08.665296Z","last_seen":"2026-10-17T11:37:15.394571Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"map[type:null] map[type:null]-------theme, homeTheme------","filename":"https://hrcke.com/","line_number":253,"column_number":23},{"level":"log","text":"en------defaultLang------","filename":"https://hrcke.com/static/js/app.1790755125431.js","line_number":1,"column_number":2641583},{"level":"log","text":"true---------getStore-------","filename":"https://hrcke.com/static/js/app.1790755125431.js","line_number":1,"column_number":908226},{"level":"log","text":"当前语言包:en","filename":"https://hrcke.com/static/js/app.1790755125431.js","line_number":1,"column_number":2470329},{"level":"log","text":"en------currentLang------enmap[actor:server1.conn0.watcher14.process7//obj88 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[items:[en] kind:ArrayLike length:1] sealed:false type:object]","filename":"https://hrcke.com/static/js/app.1790755125431.js","line_number":1,"column_number":2642613},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj99 class:Object extensible:true frozen:false isError:false ownPropertyLength:18 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:HRT SAE Capital Ltd writable:true] advertising:map[configurable:true enumerable:true value:9007944 writable:true] code:map[configurable:true enumerable:true value:SUCCESS writable:true] data:map[configurable:true enumerable:true value:map[type:null] writable:true] email:map[configurable:true enumerable:true value:hrtseaservice@gmail.com writable:true] message:map[configurable:true enumerable:true value:处理成功 writable:true] name:map[configurable:true enumerable:true value:HRT SAE writable:true] parameter:map[configurable:true enumerable:true value:9007945 writable:true] parameter1:map[configurable:true enumerable:true value:9007947 writable:true] phone:map[configurable:true enumerable:true value: writable:true]] ownPropertiesLength:18] sealed:false type:object]websiteInfor","filename":"https://hrcke.com/static/js/app.1790755125431.js","line_number":1,"column_number":1640629},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj100 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[getApp:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj104 class:Array extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:ArrayLike length:2] sealed:false type:object] writable:true] getDict:languages:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj103 class:Array extensible:true frozen:false isError:false ownPropertyLength:20 preview:map[kind:ArrayLike length:19] sealed:false type:object] writable:true] getIsDisplay:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj101 class:Object extensible:true frozen:false isError:false ownPropertyLength:173 sealed:false type:object] writable:true] getPlayIcon:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj105 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:ArrayLike length:3] sealed:false type:object] writable:true] getServe:map[configurable:true enumerable:true value: writable:true] getServeMy:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj106 class:Array extensible:true frozen:false isError:false ownPropertyLength:22 preview:map[kind:ArrayLike length:21] sealed:false type:object] writable:true] getValue:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj102 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 sealed:false type:object] writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://hrcke.com/static/js/app.1790755125431.js","line_number":1,"column_number":1641227},{"level":"log","text":"[theme] current theme:light| homeTheme:HRTSAE| isDark:false","filename":"https://hrcke.com/static/js/app.1790755125431.js","line_number":1,"column_number":1642316},{"level":"log","text":"黑名单状态无效，默认不允许显示","filename":"https://hrcke.com/static/js/app.1790755125431.js","line_number":1,"column_number":1295178},{"level":"log","text":"zh------currentLang------enmap[actor:server1.conn0.watcher14.process7//obj107 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[items:[en] kind:ArrayLike length:1] sealed:false type:object]","filename":"https://hrcke.com/static/js/app.1790755125431.js","line_number":1,"column_number":2642613},{"level":"error","text":"can't access property \"appendChild\", t is null","filename":"https://hrcke.com/static/js/chunk-vendors.1790755125431.js","line_number":160,"column_number":25265},{"level":"warn","text":"语言包 zh 加载失败:Loading chunk 18075 failed.\n(error: https://hrcke.com/static/js/18075.1790755125431.js)","filename":"https://hrcke.com/static/js/app.1790755125431.js","line_number":1,"column_number":2642975},{"level":"error","text":"Loading chunk 32729 failed.\n(error: https://hrcke.com/static/js/32729.1790755125431.js)","filename":"https://hrcke.com/static/js/chunk-vendors.1790755125431.js","line_number":98,"column_number":21357},{"level":"log","text":"zh------defaultLang------","filename":"https://hrcke.com/static/js/app.1790755125431.js","line_number":1,"column_number":2641583},{"level":"log","text":"false---------getStore-------","filename":"https://hrcke.com/static/js/app.1790755125431.js","line_number":1,"column_number":908226},{"level":"log","text":"当前语言包:zh","filename":"https://hrcke.com/static/js/app.1790755125431.js","line_number":1,"column_number":2470329},{"level":"log","text":"zh------currentLang------zhmap[actor:server1.conn0.watcher14.process7//obj155 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[items:[zh] kind:ArrayLike length:1] sealed:false type:object]","filename":"https://hrcke.com/static/js/app.1790755125431.js","line_number":1,"column_number":2642613},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj164 class:Object extensible:true frozen:false isError:false ownPropertyLength:18 preview:map[kind:Object ownProperties:map[address:map[configurable:true enumerable:true value:HRT SAE Capital Ltd writable:true] advertising:map[configurable:true enumerable:true value:9007944 writable:true] code:map[configurable:true enumerable:true value:SUCCESS writable:true] data:map[configurable:true enumerable:true value:map[type:null] writable:true] email:map[configurable:true enumerable:true value:hrtseaservice@gmail.com writable:true] message:map[configurable:true enumerable:true value:处理成功 writable:true] name:map[configurable:true enumerable:true value:HRT SAE writable:true] parameter:map[configurable:true enumerable:true value:9007945 writable:true] parameter1:map[configurable:true enumerable:true value:9007947 writable:true] phone:map[configurable:true enumerable:true value: writable:true]] ownPropertiesLength:18] sealed:false type:object]websiteInfor","filename":"https://hrcke.com/static/js/app.1790755125431.js","line_number":1,"column_number":1640629},{"level":"log","text":"map[actor:server1.conn0.watcher14.process7//obj165 class:Object extensible:true frozen:false isError:false ownPropertyLength:7 preview:map[kind:Object ownProperties:map[getApp:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj169 class:Array extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:ArrayLike length:2] sealed:false type:object] writable:true] getDict:languages:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj168 class:Array extensible:true frozen:false isError:false ownPropertyLength:20 preview:map[kind:ArrayLike length:19] sealed:false type:object] writable:true] getIsDisplay:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj166 class:Object extensible:true frozen:false isError:false ownPropertyLength:173 sealed:false type:object] writable:true] getPlayIcon:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj170 class:Array extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:ArrayLike length:3] sealed:false type:object] writable:true] getServe:map[configurable:true enumerable:true value: writable:true] getServeMy:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj171 class:Array extensible:true frozen:false isError:false ownPropertyLength:22 preview:map[kind:ArrayLike length:21] sealed:false type:object] writable:true] getValue:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher14.process7//obj167 class:Object extensible:true frozen:false isError:false ownPropertyLength:19 sealed:false type:object] writable:true]] ownPropertiesLength:7] sealed:false type:object]","filename":"https://hrcke.com/static/js/app.1790755125431.js","line_number":1,"column_number":1641227},{"level":"log","text":"[theme] current theme:light| homeTheme:HRTSAE| isDark:false","filename":"https://hrcke.com/static/js/app.1790755125431.js","line_number":1,"column_number":1642316},{"level":"log","text":"黑名单状态无效，默认不允许显示","filename":"https://hrcke.com/static/js/app.1790755125431.js","line_number":1,"column_number":1295178},{"level":"error","text":"can't access property \"appendChild\", t is null","filename":"https://hrcke.com/static/js/chunk-vendors.1790755125431.js","line_number":160,"column_number":25265}]},"http":[{"url":{"schema":"https","addr":"hrcke.com/assets/chunk-vendors-si9w04v7.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?","date":"2026-10-17T11:36:18.622Z","timestamp":1792236978622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /assets/chunk-vendors-si9w04v7.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:18 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:01:40 GMT\r\ncf-ray: a4bf013c6c240b41-OSL\r\ncf-cache-status: HIT\r\nage: 274\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"668fe9c34f4ee792f06aacef6e4b6613\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48522,"size_decoded":33048,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (45572)","md5":"668fe9c34f4ee792f06aacef6e4b6613","sha1":"f3114aa5645403353609838fbdfb018dd67b8af9","sha256":"b2515357ecc929b93d2b26be625edf4bdae111bcce178736798544fb348bf33b","sha512":"c69d02f6c33e2b797925957330ce0ed55a4b913777987e4c4160118c3a30861d291e6c9a8419c2736d5839d477c66154081fbb289242b19ec10ad5eb0403a709","ssdeep":"768:E2PuMXL/MQFUUxvqSjSFsLqLt0TqdnlfzA5vfjunSQQ3J8MRIXEX+67Y:ksTMAU0rLqBlf2fjAkyGGgJ7Y","tlshash":"ee23d09a887ed5168e1132869b5b51032a61e607709cc630fe4e1765df0dd0aefb6fc8","first_seen":"2026-03-20T15:34:08.487202Z","last_seen":"2026-10-17T11:37:15.223275Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:21.981Z","timestamp":1792236981981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:12 GMT","end":"Mon, 21 Dec 2026 18:40:11 GMT"},"fingerprint":{"sha1":"AE:BD:84:85:8E:C5:11:85:74:3D:03:31:4C:F1:48:FC:FD:34:A4:40","sha256":"52:31:09:0A:7D:15:EA:28:1B:57:B2:D1:58:31:0C:CE:F0:5C:97:E1:7C:EB:CA:D4:75:1E:24:D4:DB:76:14:32"}}},"request":{"raw":"GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 17 Oct 2026 11:36:22 GMT\r\ndate: Sat, 17 Oct 2026 11:36:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18235,"size_decoded":1522,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c58605e541d081ebcd45c40fad622d9e","sha1":"9de7f6680dcd5e9ceb316ea2b4cb9f9a2a34828f","sha256":"879f45afe333c4a1b946dac0b2effcfd9b769707dce4d7053506e88fa0682ed3","sha512":"74364d5d9e4aa7ae768d8da369edf41ccd1ffd6a90f76359a726c20b4a0964db5c96d288bd186299e2b9064fde13d3408c3eed0801b3601a8b317196129f8e99","ssdeep":"192:H3pa3pNc3prA6JA6+cA6jn6hn6mcn6bObOmcOnN6AN6rcN64E6gE6LcE6Yr6/r6b:H3Q343VbBxeiSE++RDLuyik0RQw1","tlshash":"fa827991087ba114ab871dc123df6d37ee0ea254b850e5786bfd0cd8ad9bc660371b2d","first_seen":"2026-10-10T14:05:21.794307Z","last_seen":"2026-10-17T11:37:15.224962Z","times_seen":6,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/player_api","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:23.553Z","timestamp":1792236983553,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:19 GMT","end":"Fri, 11 Dec 2026 20:00:18 GMT"},"fingerprint":{"sha1":"76:8A:85:00:14:DF:5E:B0:05:02:DB:C3:01:B8:E4:04:DE:80:29:4F","sha256":"C0:C4:49:95:A7:12:E9:78:CF:5D:DE:65:3D:C0:D4:81:64:D4:96:1C:EA:25:ED:73:45:40:06:1A:C5:E8:0F:48"}}},"request":{"raw":"GET /player_api HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/\r\nCookie: __Secure-YNID=CoICCAUStAEB8QZuZrDF1fDTndFqiURNPFYEsZwUkIJEFqLhIekgF3hTO86q-V5r_V42HAltF_SED78cDUlnkSouBqBuMsodbdhGDqAj2LZBrDTOiTrF7X8yAaRYCnp9u8iNWvJZRuTu7LmkUuL7BOsbICWjZVZLDEQQ9ZdSyHqTqwTrze6MDXRlcqIGwNl_3F9kI4LQTcreIVJuhlmaWjqLVNJZwx2v9X63xpXCz3QiMf9YyUY8Vl7_lNcoBTJFAd6pnU95oQJcl4p6djBMg-3M-D3oBl8ViF59ONtVQvyNxIV0lrNZn8rRxhpHRvNvjnYAtflXwVGCv3V4ruFJJtnHct8E; YSC=KTMi_md1kpU; __Secure-ROLLOUT_TOKEN=CN7ngYaWxLSJ8gEQrrq-hPvAlwMYrrq-hPvAlwM%3D; VISITOR_INFO1_LIVE=xOBBuGArLHw; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgMA%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-YNID","value":"CoICCAUStAEB8QZuZrDF1fDTndFqiURNPFYEsZwUkIJEFqLhIekgF3hTO86q-V5r_V42HAltF_SED78cDUlnkSouBqBuMsodbdhGDqAj2LZBrDTOiTrF7X8yAaRYCnp9u8iNWvJZRuTu7LmkUuL7BOsbICWjZVZLDEQQ9ZdSyHqTqwTrze6MDXRlcqIGwNl_3F9kI4LQTcreIVJuhlmaWjqLVNJZwx2v9X63xpXCz3QiMf9YyUY8Vl7_lNcoBTJFAd6pnU95oQJcl4p6djBMg-3M-D3oBl8ViF59ONtVQvyNxIV0lrNZn8rRxhpHRvNvjnYAtflXwVGCv3V4ruFJJtnHct8E"},{"name":"YSC","value":"KTMi_md1kpU"},{"name":"__Secure-ROLLOUT_TOKEN","value":"CN7ngYaWxLSJ8gEQrrq-hPvAlwMYrrq-hPvAlwM%3D"},{"name":"VISITOR_INFO1_LIVE","value":"xOBBuGArLHw"},{"name":"VISITOR_PRIVACY_METADATA","value":"CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgMA%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, require-trusted-types-for 'script', base-uri 'self';object-src 'none';script-src 'nonce-duaTECjTg5KQ_3E-nFW7zg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';report-uri https://csp.withgoogle.com/csp/youtube_main/strict\r\nexpires: Sat, 17 Oct 2026 11:36:23 GMT\r\ndate: Sat, 17 Oct 2026 11:36:23 GMT\r\ncache-control: private, max-age=0\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-BUCKET=COUH; Domain=.youtube.com; Expires=Thu, 15-Apr-2027 11:36:23 GMT; Path=/; Secure; HttpOnly; SameSite=lax\n__Secure-YNID=CoICCAUStAEB8QZuZpQmKXYlLR0Hyb1b-1t5x9Ghnu7ecPBMl1u-H1_5RHKIYq9EfeyMXuur7RR1OvITLu4Zz2OlCU3KnK7Ky5pTpK3td_8d1oDpcH8HFXeXvX3YoMwv503p6XkSVJMRINxJhKmCiGnLDGnXU6J7JVKKxpA-qgcHK0qQLnhNGhthPYDTe3qUw_cPvWq1yh45dIrDS8Sjt6SI8xNF0NsCqnzifj08x5x-PYpuoNVre3NeRTgoBTJFAd6pnU-YBcpPEyOd9wQH93siTkQnk441JWMSkh4_urAwaGClLXZUBHahLiKeTXtrCver2IZT28z7w7Mq44NcyiygMaAE; expires=Thu, 15-Apr-2027 11:36:20 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CN7ngYaWxLSJ8gEQrrq-hPvAlwMY2O6NhvvAlwM%3D; Domain=youtube.com; Expires=Thu, 15-Apr-2027 11:36:23 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\n__Secure-YEC=; Domain=.youtube.com; Expires=Sun, 21-Jan-2024 11:36:23 GMT; Path=/; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-BUCKET","value":"COUH","quoted":false,"path":"/","domain":".youtube.com","expires":"2027-04-15T11:36:23Z","raw_expires":"Thu, 15-Apr-2027 11:36:23 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-BUCKET=COUH; Domain=.youtube.com; Expires=Thu, 15-Apr-2027 11:36:23 GMT; Path=/; Secure; HttpOnly; SameSite=lax"},{"name":"__Secure-YNID","value":"CoICCAUStAEB8QZuZpQmKXYlLR0Hyb1b-1t5x9Ghnu7ecPBMl1u-H1_5RHKIYq9EfeyMXuur7RR1OvITLu4Zz2OlCU3KnK7Ky5pTpK3td_8d1oDpcH8HFXeXvX3YoMwv503p6XkSVJMRINxJhKmCiGnLDGnXU6J7JVKKxpA-qgcHK0qQLnhNGhthPYDTe3qUw_cPvWq1yh45dIrDS8Sjt6SI8xNF0NsCqnzifj08x5x-PYpuoNVre3NeRTgoBTJFAd6pnU-YBcpPEyOd9wQH93siTkQnk441JWMSkh4_urAwaGClLXZUBHahLiKeTXtrCver2IZT28z7w7Mq44NcyiygMaAE","quoted":false,"path":"/","domain":".youtube.com","expires":"2027-04-15T11:36:20Z","raw_expires":"Thu, 15-Apr-2027 11:36:20 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__Secure-YNID=CoICCAUStAEB8QZuZpQmKXYlLR0Hyb1b-1t5x9Ghnu7ecPBMl1u-H1_5RHKIYq9EfeyMXuur7RR1OvITLu4Zz2OlCU3KnK7Ky5pTpK3td_8d1oDpcH8HFXeXvX3YoMwv503p6XkSVJMRINxJhKmCiGnLDGnXU6J7JVKKxpA-qgcHK0qQLnhNGhthPYDTe3qUw_cPvWq1yh45dIrDS8Sjt6SI8xNF0NsCqnzifj08x5x-PYpuoNVre3NeRTgoBTJFAd6pnU-YBcpPEyOd9wQH93siTkQnk441JWMSkh4_urAwaGClLXZUBHahLiKeTXtrCver2IZT28z7w7Mq44NcyiygMaAE; expires=Thu, 15-Apr-2027 11:36:20 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none"},{"name":"__Secure-ROLLOUT_TOKEN","value":"CN7ngYaWxLSJ8gEQrrq-hPvAlwMY2O6NhvvAlwM%3D","quoted":false,"path":"/","domain":"youtube.com","expires":"2027-04-15T11:36:23Z","raw_expires":"Thu, 15-Apr-2027 11:36:23 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":true,"raw":"__Secure-ROLLOUT_TOKEN=CN7ngYaWxLSJ8gEQrrq-hPvAlwMY2O6NhvvAlwM%3D; Domain=youtube.com; Expires=Thu, 15-Apr-2027 11:36:23 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned"},{"name":"__Secure-YEC","value":"","quoted":false,"path":"/","domain":".youtube.com","expires":"2024-01-21T11:36:23Z","raw_expires":"Sun, 21-Jan-2024 11:36:23 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-YEC=; Domain=.youtube.com; Expires=Sun, 21-Jan-2024 11:36:23 GMT; Path=/; Secure; HttpOnly; SameSite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":993,"size_decoded":3804,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (501)","md5":"22a40d8e1f7bef5ff57cc360db505def","sha1":"cbbc05b3e4131fe969167af41e5cdaa50c3b988a","sha256":"347209005ff9f824a544d4523395915b2f63363e4cbfc619ccdd27b27ed51710","sha512":"2f54a5d9dce4bc325a6d014f84d87176be6d407b88f49499abb6d770304786e5521fc5e44f5984990f19c6a9f1a0ae63041d95b1d0adf10f9e82b9ed3f1fa401","ssdeep":"","tlshash":"cf11cb7b3d80e639865894e4a03fc31cb1a224997850cd9110cde889e65cacaad2d5bc","first_seen":"2026-10-14T16:22:37.80146Z","last_seen":"2026-10-17T18:46:09.398907Z","times_seen":493,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":55,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getStockList?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.600Z","timestamp":1792236984600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"POST /exchange/RockieNews/getStockList?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nport: 2\r\nlanguage: zh\r\nTimeZone: UTC\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236984469\r\nx-signature: d2aa0489d24a5cc9675af49f7c998c0ed1fdae4d3cb317e5567cdf2f0d4bcd59\r\nx-nonce: 7664d82ff2544998912de502696b0b3f\r\nContent-Length: 63\r\nOrigin: https://hrcke.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":63,"data":"{\"page\":2,\"size\":10,\"keyWord\":\"CNH\",\"countryId\":\"5\",\"isCoin\":0}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf0161b9c849c5-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://hrcke.com\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50018,"size_decoded":10854,"mime_type":"application/json","magic":"JSON text data","md5":"f896aea7bd6e0bd7d31d8f93db604f8b","sha1":"38c6a8cc90dce6fc2d601a0c7c07ce5273a14e5a","sha256":"0cc028e8f90296984c6bf7ab349da99ac3a2bcfc4adfdbf84e6c361a0d36a317","sha512":"384c0a9c2d35656d8988d2f6d0f7cc989d4ecd3cf82ed04b7c720ce697996e8ec053703e4d95def4ceaa6b5603909f91dec8198a66ca271b28c30d5e01504ff0","ssdeep":"384:4Dt5MApD2fkm2swzyQhHm7GqgL5CobnnOCVMW6FAFR3cKaH1MNrpPeXyN0wY48:4D2fc/vhKINOiKGDMKaHCeXyI48","tlshash":"5e23932d8ae70d7d1be81181709efe0da79d1ae7c601eda2d3e4cf1442e92bb4137099","first_seen":"2026-10-17T11:33:03.383167Z","last_seen":"2026-10-17T11:37:15.22869Z","times_seen":2,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieMessage/getPlayIcon?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.624Z","timestamp":1792236984624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"POST /exchange/RockieMessage/getPlayIcon?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nport: 2\r\nlanguage: zh\r\nTimeZone: UTC\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236984492\r\nx-signature: 7ac7dfbfad2c4da91d974baf1aaac3b52e81db4a65c585885bdb5f774167f3ea\r\nx-nonce: 7028aeeef3dc4aa69938468ee4fe871a\r\nContent-Length: 28\r\nOrigin: https://hrcke.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":28,"data":"{\"iconType\":12,\"portType\":0}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf0161d9d649c5-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://hrcke.com\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201,"size_decoded":570,"mime_type":"application/json","magic":"JSON text data","md5":"9f940ebe0c11168a0db2ca9eaad4eb0e","sha1":"a469bcd4d466c101c0e92e809ff3b699aae351ee","sha256":"938ee5ef9015565f2dc13490bd6aeea4c26d6399a20f8394229fde8c9e0643ea","sha512":"806805b9c0c985b05674f04cf1f8dd37fd4da82816cb81eba3734faa1f82b7ecffd442f2c10a23df35c37eb84e88f540282154c3a24896e0766a72ede4f95ff9","ssdeep":"","tlshash":"61d04c6303cc0b7c19e081034a948c2407d6643910419efb3867d45f4120fc97925a0e","first_seen":"2026-10-10T14:05:21.94187Z","last_seen":"2026-10-17T11:37:15.231031Z","times_seen":4,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994645\u0026x-nonce=e650823be4e24e61b73e9b70064d1d44\u0026x-signature=83c7182f69f348e70fde2fb4b8287522797bce9fd8040cef4f52d57b7e00cfa9\u0026fileId=9005105","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.833Z","timestamp":1792236994833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994645\u0026x-nonce=e650823be4e24e61b73e9b70064d1d44\u0026x-signature=83c7182f69f348e70fde2fb4b8287522797bce9fd8040cef4f52d57b7e00cfa9\u0026fileId=9005105 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 2587\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1bf3e8be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/dd32f279732a43659f3758a51771634e.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2587,"size_decoded":3012,"mime_type":"image/png","magic":"PNG image data, 120 x 29, 8-bit/color RGBA, non-interlaced","md5":"80a1485e629cf089e77194c601b21e2e","sha1":"e42e153f15ddfc7abce424aa2f4ea5b7be07bf71","sha256":"f5d604ea92dab6032a94d1498d4ee29b6da2f0cf4e092f13c3bcfb1f4968d79c","sha512":"e970b571c6eba6345b808f281e67c6099ce3512602ad4151703fe3871855cff20a2689c773f33e1e693ab02b234f966180ca4ebd93e5f66745b077c9084501f6","ssdeep":"","tlshash":"81513aebb5f4a0c5a001070681ed9a9364bf44b40511752b2935dde06c4ef193f3edb4","first_seen":"2026-10-10T14:05:21.944168Z","last_seen":"2026-10-17T11:37:15.232597Z","times_seen":4,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":724,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994647\u0026x-nonce=113ecb3344ed43128a86629458494913\u0026x-signature=616486d66f1fc91adba2cda1e2b9f785374786253998af5750997e81e1e71b2f\u0026fileId=9005164","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.845Z","timestamp":1792236994845,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994647\u0026x-nonce=113ecb3344ed43128a86629458494913\u0026x-signature=616486d66f1fc91adba2cda1e2b9f785374786253998af5750997e81e1e71b2f\u0026fileId=9005164 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 3981\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1cf628be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/1b1b374757fa459b818b3b9276b7a41e.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3981,"size_decoded":4406,"mime_type":"image/png","magic":"PNG image data, 101 x 31, 8-bit/color RGBA, non-interlaced","md5":"b3d0abf9d8e692a588b64475d1ee44ac","sha1":"47d028d583c56fc5586758ea264cdf140ab839d0","sha256":"bfc636cbe2a9822c67b87156b3f24157f2026033965787bbd836d1f15a233d71","sha512":"3cf0a3aca0dd2b749add21a325ce3e2585710a13dd087f5e3ae5fe42cef6076d2abc66cfd6e52459143f6c26b5d69b988f85ba7b1cfc67ec35828ecc70b8a2ff","ssdeep":"","tlshash":"97818dfe215de865537d30b1b251b60b3edafd0603fe341560cedec8b410d98a31a988","first_seen":"2026-10-10T14:05:22.154702Z","last_seen":"2026-10-17T11:37:15.233873Z","times_seen":4,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/chunk-vendors.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:21.805Z","timestamp":1792236981805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/js/chunk-vendors.1790755125431.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:21 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:02:03 GMT\r\ncf-ray: a4bf0150485a49c5-OSL\r\ncf-cache-status: HIT\r\nage: 277\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"757973e936e7d61641ff62cec6dcc9a9\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3340687,"size_decoded":1123823,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52465)","md5":"69b10db8a4d695c23712315f17830ca5","sha1":"b747fce6645cc25f1174238ae61724186b99467b","sha256":"c028a83aeb82c58f2ca08258d7fa3126df7ac8d300502b6ca7d4e1a92bf60567","sha512":"9dc53d87198066595c915859855cb5885871e40507b66de100e4bd4379464ccf7e0da5c55d761734661006c8f8c257bd40d00b7057c18138ce45c919cf14cfc8","ssdeep":"12288:HCRpXFBUjAIkuED5IGJk8EgKUg1Nl/nNmE:iUdkuENk8Eg/yBmE","tlshash":"7e2508c9b2d2b06543e720a5007f110bf23a6958740e8598f275e8ea7cbd94d927bf7c","first_seen":"2026-09-17T08:23:53.125101Z","last_seen":"2026-10-17T11:37:15.234907Z","times_seen":7,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://mainnet.infura.io/ws/v3/7d4d168ec7cb46208358e168a163406f","fqdn":"mainnet.infura.io","domain":"infura.io","tld":"io"},"ip":{"addr":"18.185.30.144","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:23.573Z","timestamp":1792236983573,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"infura.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 02 Sep 2026 00:00:00 GMT","end":"Thu, 18 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"1B:7A:3F:5C:DF:7E:6E:36:24:B3:91:56:A4:FB:43:1B:1D:01:9F:F5","sha256":"5C:48:0B:8E:1D:30:D5:47:B5:59:6C:0F:CB:70:E4:7B:60:49:70:01:7A:63:60:68:AE:BA:02:7B:66:A9:DF:F4"}}},"request":{"raw":"GET /ws/v3/7d4d168ec7cb46208358e168a163406f HTTP/1.1\r\nHost: mainnet.infura.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://hrcke.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: tKcFvDp8jX93fApPWqt6Og==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 17 Oct 2026 11:36:23 GMT\r\nConnection: upgrade\r\nSec-Websocket-Accept: GI20OCwKf1WM4NcIefbsAv2AfAw=\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":166,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-17T17:55:32.063546Z","times_seen":19168837,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":73,"connect":96,"send":0,"wait":219,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/css/78153.1790755125431.css","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.139Z","timestamp":1792236984139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/css/78153.1790755125431.css HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Sep 2026 08:01:44 GMT\r\ncf-ray: a4bf015ed82349c5-OSL\r\ncf-cache-status: HIT\r\nage: 276\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"c8a53145e2dcdf0e5bf97db803b07199\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29272,"size_decoded":4514,"mime_type":"text/css","magic":"ASCII text, with very long lines (29272), with no line terminators","md5":"c8a53145e2dcdf0e5bf97db803b07199","sha1":"5f9cf3d778b58050a00a084bbe0b05fdff4dfb07","sha256":"f2858d3b938d140021a26036c5385d87cfc823a4883cf919f2e53a7dcefd6ce8","sha512":"4451322fb6145197e99009e7ce33e6cb57edbe4c9355cfbea78a942895a3054563079823dc53d01935690d6c4e9410d08009adb6958b3992b182c99b65970b55","ssdeep":"384:XRKMvMvkj4T3hKQSgei76ROycYxewsSv6jex9:zr8rhKQSs76oDYx/sSv6jex9","tlshash":"b3d2c8277a5b2254853fca052b946b871259b233d20362ffde8b5418cfe72d7366630e","first_seen":"2026-10-17T11:33:03.32682Z","last_seen":"2026-10-17T11:37:15.237797Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fciti-sees-resilient-demand-for-chinese-ai-ipos-despite-valuation-concerns-4955340","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.807Z","timestamp":1792236995807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fciti-sees-resilient-demand-for-chinese-ai-ipos-despite-valuation-concerns-4955340 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995196\r\nx-signature: 4397690a2785a0b1e11e9ec9428a403126f3c19aa0fd21b4c5b67df376f39953\r\nx-nonce: a86d79425a49490c9069c8b7b943c0ec\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a7ce3149c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60,"size_decoded":456,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"d16f252c361c5ea2aecb588bfc24e038","sha1":"8c99d7d9159fb23113ab786c0a929a854cc75ac0","sha256":"9abc6876173c9560d45de979f53ee492360544f1f56a92d82ee6e65940046b71","sha512":"fa2c851e4473ccb9af20077a18220bc56441606f5331b00f21f12a654a0765b9c501fa166466f51a574058f8b3db20081b2ea50de2b484c80d98b580bbefc845","ssdeep":"","tlshash":"7aa022230f8303880b088080300020080208a808ee80e080c8008a0cc0cc22300082c0","first_seen":"2026-10-17T11:33:03.448067Z","last_seen":"2026-10-17T11:37:15.239181Z","times_seen":2,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fnearly-12000-california-residents-bought-evs-using-state-rebate-program-4954764","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.818Z","timestamp":1792236995818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fnearly-12000-california-residents-bought-evs-using-state-rebate-program-4954764 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995196\r\nx-signature: a3233c998cc4593cd3616083128c771fb4bfb2e1b9fec72e96047823cfb311b7\r\nx-nonce: 62923b8f364d4276bdd2a45c5bdeebee\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a7de3849c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":463,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"0333455d7f7015aab1e30168e3c10c66","sha1":"c5a850e44034d358f81674d10ee8c778411248a9","sha256":"d122847fd64124516233c2807bbdc3be91c96dfcbb45c2fdbd04cbd74c77059a","sha512":"34ba933fe10f6d9a586683c63f2cb8e4c3620d0e8dc7d6f5b579cfeffddba568575c9cb663abac54caed34032d0dee7e14ea29c450ff0dc4ce0f6dc14a872d46","ssdeep":"","tlshash":"a8a022230e03c30b2f0a02c0300a32083200880cc800ea00c8080200c0c023380002e0","first_seen":"2026-10-17T11:33:03.35374Z","last_seen":"2026-10-17T11:37:15.240586Z","times_seen":2,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fcan-ai-avoid-the-boomandbust-fate-of-past-capital-cycles-bofa-weighs-in-4953613","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.919Z","timestamp":1792236995919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fcan-ai-avoid-the-boomandbust-fate-of-past-capital-cycles-bofa-weighs-in-4953613 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995201\r\nx-signature: 8313cde470400536f99fa56c68db937bf0154113353be8d39ff0384434f10233\r\nx-nonce: 529795a748ae4819b7e5d9fc0b4e384f\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a87ea449c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":467,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"bb72e40f7623ede6f1f10508c88ab3ad","sha1":"5bb68faf600fe147a3a58e89d10cc59f0c245ed7","sha256":"6c5b7a54f0ede0ac72de98755ede957907f77bc953860f22ab40052ee3e26aad","sha512":"df4742025605d349d97520eca8a00d00621d14e2ef437e7a080d5073fe5b021ecd5f3dd7a6ff088c381502db4f18a90f376721f1393087fa81db3ce00aadaa90","ssdeep":"","tlshash":"39a022b3cf830b8c0f0e08c030302008220a88c8e220e2a0ca80a30882c03b3802038c","first_seen":"2026-10-10T14:05:21.86098Z","last_seen":"2026-10-17T11:37:15.241866Z","times_seen":4,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Feconomy-news%2Fgerman-minister-seeks-debt-brake-exemption-to-maintain-ukraine-aid-4955372","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.936Z","timestamp":1792236995936,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Feconomy-news%2Fgerman-minister-seeks-debt-brake-exemption-to-maintain-ukraine-aid-4955372 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995201\r\nx-signature: 31de5d571931af8cb012609dc2bc9bbbfa70cf9a55ad48c97657dad5dc204ebd\r\nx-nonce: f251b0ab7fae4b8d920eaa7b58f86a45\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a89ec049c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79,"size_decoded":475,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"b011c04fe7f89a360fcd80d8b41d5a0a","sha1":"ae9f3e91ea0fda6158ba71920c49579bbc894290","sha256":"ce06c7e60b2241bd4468e4a3adb10cce6d883faacfba45fddf2575ca2fef0ad6","sha512":"2bc8cfe990bbb0702b2a246a0ccbb64cca4e817f83296c8bc1dda955ea076156597b32428cd3cd66a00aa0666b71c385b4ef4a6a7161aa8b7e017c336cb7bd63","ssdeep":"","tlshash":"12a0223b8ba3838c0f0200c23c0ce33c83000008e082c8e8e3ac222c88c828bb3c0fc0","first_seen":"2026-10-17T11:33:03.288845Z","last_seen":"2026-10-17T11:37:15.242581Z","times_seen":2,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/viewLoading.gif","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?","date":"2026-10-17T11:36:18.630Z","timestamp":1792236978630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /viewLoading.gif HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:18 GMT\r\nserver-timing: cfExtPri\r\nvary: Accept-Encoding\r\ncontent-type: image/gif\r\npriority: u=5,i\r\ncf-ray: a4bf013c7c260b41-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 274\r\nserver: cloudflare\r\netag: \"703c940e874943ecd3fbcd1cada9745b\"\r\nlast-modified: Wed, 30 Sep 2026 08:02:03 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28896\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28896,"size_decoded":29283,"mime_type":"image/gif","magic":"GIF image data, version 89a, 800 x 600","md5":"703c940e874943ecd3fbcd1cada9745b","sha1":"a28e45a00ca639452c0169e7e1b72a3549000ce8","sha256":"dae437250bbf674eb06a897a9e63b0fbcbd7eba2c68c5601eb02ff7e0fb19145","sha512":"d55492795a01121785aad2ab61d06e5dd408c3904ba00ea454e2765781f2ae4faf5d3794c8c51c8146b83f577732e8d34d03e82b43204114f310bed4fe7fccac","ssdeep":"384:sbzi2gJmlCPuWhhTJb7kN20X40BTstQKhQ6kLegGsA7Umk/RoW3H2lHOmdmSWPmv:szi2gVLVbI4K4YWkQImWRGHOYZRKAN","tlshash":"a6d2e10e216d6d1aff7d89b80d72e38c4953eff05d5678076e88632e89561592c0cef2","first_seen":"2025-03-31T16:58:52.268181Z","last_seen":"2026-10-17T11:37:15.243674Z","times_seen":443,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/0229cd64/www-widgetapi.vflset/www-widgetapi.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"142.251.154.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:23.719Z","timestamp":1792236983719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:19 GMT","end":"Fri, 11 Dec 2026 20:00:18 GMT"},"fingerprint":{"sha1":"76:8A:85:00:14:DF:5E:B0:05:02:DB:C3:01:B8:E4:04:DE:80:29:4F","sha256":"C0:C4:49:95:A7:12:E9:78:CF:5D:DE:65:3D:C0:D4:81:64:D4:96:1C:EA:25:ED:73:45:40:06:1A:C5:E8:0F:48"}}},"request":{"raw":"GET /s/player/0229cd64/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/\r\nCookie: __Secure-YNID=CoICCAUStAEB8QZuZpQmKXYlLR0Hyb1b-1t5x9Ghnu7ecPBMl1u-H1_5RHKIYq9EfeyMXuur7RR1OvITLu4Zz2OlCU3KnK7Ky5pTpK3td_8d1oDpcH8HFXeXvX3YoMwv503p6XkSVJMRINxJhKmCiGnLDGnXU6J7JVKKxpA-qgcHK0qQLnhNGhthPYDTe3qUw_cPvWq1yh45dIrDS8Sjt6SI8xNF0NsCqnzifj08x5x-PYpuoNVre3NeRTgoBTJFAd6pnU-YBcpPEyOd9wQH93siTkQnk441JWMSkh4_urAwaGClLXZUBHahLiKeTXtrCver2IZT28z7w7Mq44NcyiygMaAE; YSC=KTMi_md1kpU; __Secure-ROLLOUT_TOKEN=CN7ngYaWxLSJ8gEQrrq-hPvAlwMY2O6NhvvAlwM%3D; VISITOR_INFO1_LIVE=xOBBuGArLHw; VISITOR_PRIVACY_METADATA=CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgMA%3D%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-YNID","value":"CoICCAUStAEB8QZuZpQmKXYlLR0Hyb1b-1t5x9Ghnu7ecPBMl1u-H1_5RHKIYq9EfeyMXuur7RR1OvITLu4Zz2OlCU3KnK7Ky5pTpK3td_8d1oDpcH8HFXeXvX3YoMwv503p6XkSVJMRINxJhKmCiGnLDGnXU6J7JVKKxpA-qgcHK0qQLnhNGhthPYDTe3qUw_cPvWq1yh45dIrDS8Sjt6SI8xNF0NsCqnzifj08x5x-PYpuoNVre3NeRTgoBTJFAd6pnU-YBcpPEyOd9wQH93siTkQnk441JWMSkh4_urAwaGClLXZUBHahLiKeTXtrCver2IZT28z7w7Mq44NcyiygMaAE"},{"name":"YSC","value":"KTMi_md1kpU"},{"name":"__Secure-ROLLOUT_TOKEN","value":"CN7ngYaWxLSJ8gEQrrq-hPvAlwMY2O6NhvvAlwM%3D"},{"name":"VISITOR_INFO1_LIVE","value":"xOBBuGArLHw"},{"name":"VISITOR_PRIVACY_METADATA","value":"CgJOTxIiEh4SHAsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJicgMA%3D%3D"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 8911\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Oct 2026 10:50:27 GMT\r\nexpires: Sun, 17 Oct 2027 10:50:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 14 Oct 2026 04:33:18 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 2756\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27038,"size_decoded":9595,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (570)","md5":"8aebcfe5019ef6b04a5eaed58d5e5038","sha1":"0d76479b931295672b6a0c9a07311ff12a123331","sha256":"316a92f17a6607590c3675c075dbea110f7ab5bf8dd3e24a6eaf3bd767122038","sha512":"86446faed5f320ab060b643f32d82d4826a29a06bcecd3e62f48a16618bd77c9a62ab8b40003a369a73d82b56cff9c342e80c93f9bbc563668822358751b0ecf","ssdeep":"384:laUnC1G15COneIQR6jtEmbwoPtjU0BrIKoU4mSov4NxBfKBtYy8kF0NZBFRkChnw:lPCK5x80Io1jJB5vQfoB0rBFCK8D","tlshash":"9cc2f9cd7bb1b0714373a5b5802f100fb23e59aeb408ca98b288d8e16df55594627f7e","first_seen":"2026-10-08T06:29:11.170009Z","last_seen":"2026-10-17T18:40:37.352671Z","times_seen":1545,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/fonts/element-icons.ff18efd1.woff","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.103Z","timestamp":1792236984103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/fonts/element-icons.ff18efd1.woff HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/static/css/app.1790755125431.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\nserver-timing: cfExtPri\r\nvary: Accept-Encoding\r\ncontent-type: binary/octet-stream\r\npriority: u=3,i=?0\r\ncf-ray: a4bf015e980a49c5-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 276\r\nserver: cloudflare\r\netag: \"535877f50039c0cb49a6196a5b7517cd\"\r\nlast-modified: Wed, 30 Sep 2026 08:01:45 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28200,"size_decoded":28600,"mime_type":"binary/octet-stream","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-10-17T14:21:05.793617Z","times_seen":30522,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieMessage/getPlayIcon?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.628Z","timestamp":1792236984628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"POST /exchange/RockieMessage/getPlayIcon?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nport: 2\r\nlanguage: zh\r\nTimeZone: UTC\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236984493\r\nx-signature: 6835257d9797e2e9fd05f68ebb23d0b68addbe58d16265b5ad51d7a41c9b8b25\r\nx-nonce: bc37a8e8fed142cba2fe785f0dab8ad7\r\nContent-Length: 27\r\nOrigin: https://hrcke.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":27,"data":"{\"iconType\":3,\"portType\":0}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf0161e9d949c5-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://hrcke.com\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51,"size_decoded":514,"mime_type":"application/json","magic":"JSON text data","md5":"3256940f292f123d7ad013fee0882b10","sha1":"e85e40ee498309fdb98107496080d5b6047d2bae","sha256":"dc189241b9b0f671deeeae62877091858e5b2411b37af1ea9c4d17af4cdb8608","sha512":"b9327299a5fd9c9c4abf2691256c818a440a8372e933acc9a0920a6177f20569b6826d8d3b5d9eb7c2f531beb0852a9df6f856fa66eda982160055e372f5b6c6","ssdeep":"","tlshash":"06900000cac82b8ce0c00308e2cb003883030c308808302030c3020f08300f303e3288","first_seen":"2026-10-17T11:33:03.450852Z","last_seen":"2026-10-17T11:37:15.245863Z","times_seen":2,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Frussia-stocks-higher-at-close-of-trade-moex-russia-index-up-170-4954871","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.887Z","timestamp":1792236995887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Frussia-stocks-higher-at-close-of-trade-moex-russia-index-up-170-4954871 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995198\r\nx-signature: 49fa4f4c76c20c179f5e14bd166ee2db2d6daf4b8b5c14993df73ecfd35d8fa6\r\nx-nonce: c24a8426d1b04468a6496676e35d93a9\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a84e7849c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60,"size_decoded":456,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"bde7b007c74de80556b1b6183361f5f1","sha1":"0344b1b89c580f2c4e44217e396e7153294d0b20","sha256":"0c7d92de56f2f2c597cb8a272c2c0d0cab2832297d7388b247b44848c65fea8d","sha512":"54227a2844eab7a836950a338943fdf7eceda2c4e485bab610d9fa851cef8852d9facead2693c6f14fb797c755ad22d8c51bde3f28f4b0b31a119d6927ef2d79","ssdeep":"","tlshash":"43a00277ae8343792f2b54846499a9485149e848d541d586c924565982c46378056ac4","first_seen":"2026-10-17T11:33:03.442504Z","last_seen":"2026-10-17T11:37:15.247033Z","times_seen":2,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fhere-are-the-latest-additions-to-ubs-paneuropean-small--midcap-list-4953454","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.922Z","timestamp":1792236995922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fhere-are-the-latest-additions-to-ubs-paneuropean-small--midcap-list-4953454 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995201\r\nx-signature: b54d00bf190516c56e30c6add600f792b763379f747d15dd68df15251fce3e82\r\nx-nonce: 5d03c3f80a19453f9a17e01e8296e931\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a87ea949c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":461,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"ef8c403836697fa8bcf834750514ef13","sha1":"2956b427a0741a06a941a014ea031b80e2639578","sha256":"dababa3d305db03cb8ffef99a7480a1a587ffbdc9fcc8eafdd2a407d3257270e","sha512":"a0b31ebc4eb9b273342f3fbc79c2bcb904c52b9a0b5d30e8d9ceb367fda99432e4db74c3680f68d8c2f01e7973e82bd91f9b162b9251e50039799f83b82122bd","ssdeep":"","tlshash":"bda022230e83038a0f0c00c02038220c200cb00cf000e280cc00020882c023b8000ac8","first_seen":"2026-10-17T11:33:03.388414Z","last_seen":"2026-10-17T11:37:15.248705Z","times_seen":2,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieMessage/getServe?protocolType=24\u0026eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.078Z","timestamp":1792236984078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieMessage/getServe?protocolType=24\u0026eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nport: 2\r\nlanguage: zh\r\nTimeZone: UTC\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236984062\r\nx-signature: 0d6ae43aad6cbab74da63ef02fba69e53699754e7bd586cc135a6d4f70df9291\r\nx-nonce: 6ef71397864540a582bc5addd9201252\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\nserver-timing: cfExtPri\r\npragma: no-cache\r\ncontent-type: application/json\r\npriority: u=3,i=?0\r\ncf-ray: a4bf015e8ff749c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":382,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-17T17:55:32.063546Z","times_seen":19168837,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994645\u0026x-nonce=ee554bb2868547e190f89938ec152bd5\u0026x-signature=aa808a5890e06e327b50c2523882f5faef0b662df07c56b817a7c55ade3b25ff\u0026fileId=9005097","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.836Z","timestamp":1792236994836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994645\u0026x-nonce=ee554bb2868547e190f89938ec152bd5\u0026x-signature=aa808a5890e06e327b50c2523882f5faef0b662df07c56b817a7c55ade3b25ff\u0026fileId=9005097 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 3549\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1bf418be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/11b309894a4948cea65f0a804b4426fc.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3549,"size_decoded":3974,"mime_type":"image/png","magic":"PNG image data, 240 x 29, 8-bit/color RGBA, non-interlaced","md5":"14dda19e86b255935d705c9b47868801","sha1":"0c494c51a31b6179f876abcd857c9a15572e1e83","sha256":"95dc509a5a663968b327620e92576575b0b5a1178305be019e30fa9bf0ac1879","sha512":"fb08d8001ce6cb563bd5eb4210003e4803bd3d17be865374617cde9c3b9b17a26c50715b02e241681bb7122129a06881428e00c6dc2fc6da4045e31b9ef2f065","ssdeep":"","tlshash":"a8717ed9b1a72cffad17cac4e5ea8008964cf5510548fc42604a5f387369e636ec3c53","first_seen":"2026-10-10T14:05:22.082423Z","last_seen":"2026-10-17T11:37:15.249773Z","times_seen":4,"resource_available":false,"data":null}},"time_used":723,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":723,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Finvestingcoms-stocks-of-the-week-4954697","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.946Z","timestamp":1792236995946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Finvestingcoms-stocks-of-the-week-4954697 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995202\r\nx-signature: 2ecbe0bc72a6e32505cf110961f2f601e74fa92f47e3bf6accc05c99fcc3ead8\r\nx-nonce: 017243252c864c0c87cd0e1a0022fd21\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a8aec549c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":461,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"a8ea43394bf17fc18580825488949e61","sha1":"a3f21c623afac96c9d1ce09f83e0dbc87fb9a440","sha256":"4f05ea5288eababb49e77a07a13b239976078ede2d4c88ba9b8943c98011d4bd","sha512":"f1fd2a0a9b0fce3cf01f4a7ba943c8b78a1ad0f9aae57487b1c9fc65dfe702b1b6e11e162a3356176b01da16a21a9b6c9bf64ae31493edc4033ef17472be7f21","ssdeep":"","tlshash":"73a0222b8f8b83080f0c00c030322008a00ca008e000c2e0c80003c882c02338000ac8","first_seen":"2026-10-17T11:33:03.412669Z","last_seen":"2026-10-17T11:37:15.250487Z","times_seen":2,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fpro%2Fjefferies-names-top-observability-stocks-as-ai-agents-gain-traction-432SI-4955319","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.954Z","timestamp":1792236995954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fpro%2Fjefferies-names-top-observability-stocks-as-ai-agents-gain-traction-432SI-4955319 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995202\r\nx-signature: f45531264b2cf1b31dea8387c6da9dd8fdd071a27865739f10cfe3afb8b2b9af\r\nx-nonce: 6d09c8e767c743978147c6557f2da261\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a8becd49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":461,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"d6233b2efaefa0c1aed17819189f19de","sha1":"597fef66d8e0f92733eecd4c2fc9bfcaedc9a4be","sha256":"373b1b2f25e283be747c56f30eb3083f77c089be4804b7b3091fc8b8be9684c9","sha512":"46e64e37be43637fcaaeca7852aeb97997e461b0a3a2f039b912304b88d9c0951b053c8965380fc02d4cbbadda154318ea551f6913f637a1c1d9236c8ef81b9d","ssdeep":"","tlshash":"09a022e30e8303a80f0c00c030b02e08a80ca0c8e000c280c800020882c023380202c8","first_seen":"2026-10-17T11:33:03.322918Z","last_seen":"2026-10-17T11:37:15.2515Z","times_seen":2,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieMessage/getServe?protocolType=23\u0026eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.076Z","timestamp":1792236984076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieMessage/getServe?protocolType=23\u0026eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nport: 2\r\nlanguage: zh\r\nTimeZone: UTC\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236984061\r\nx-signature: 7a436b9397aaabe39bd90d33b0e0162b29f93425af7aa9872aea62f09727cdd8\r\nx-nonce: a2def057211a4427b7e0801e8f844d39\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\nserver-timing: cfExtPri\r\npragma: no-cache\r\ncontent-type: application/json\r\npriority: u=3,i=?0\r\ncf-ray: a4bf015e7ff449c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":382,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-17T17:55:32.063546Z","times_seen":19168837,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/aia.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.539Z","timestamp":1792236994539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /aia.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:34 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: zstd\r\netag: \"6689a4b044b4638ac38e9564c1b97277\"\r\nlast-modified: Wed, 08 Sep 2021 09:01:08 GMT\r\nx-amz-id-2: ZYcEaSbhPXThBzwfYFcKvGahkM8WZ2VtS61YapG9tP9s4eEiv0AYx5pUlWTtCKGo22i5L1s8mb+3+Pc3csrhXgmkGNVcwS6o\r\nx-amz-request-id: CTF5VSCH7HRKA35M\r\nx-amz-meta-hash: 6689a4b044b4638ac38e9564c1b97277\r\nx-amz-version-id: null\r\ncdn-proxyver: 1.71\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1068, 830\r\ncdn-cachedat: 10/17/2026 00:33:39\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 54f95e2c930431820ea0f17840f78a1c\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1030,"size_decoded":1422,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (1030), with no line terminators","md5":"6689a4b044b4638ac38e9564c1b97277","sha1":"00589aefc639e50ee481d66d2283c4893e18f88e","sha256":"7ae02b94bb6103c8e1b0089e1d8448219bd2f1f71c5f0de9b5bf2e9051776dc2","sha512":"58742b23172e8cdb9297092a285210cab407e78df62d0aaab51ca4ec6b9796ee3ba1907057ed43c6fb9ef4fb344fc9e5a6116aac486411704d92e3c7dc73f9ec","ssdeep":"","tlshash":"fc11efc11110b68cac44996fff7f5e82721770f97c6ac48270adcf14b55b186e909350","first_seen":"2026-10-10T14:05:22.018868Z","last_seen":"2026-10-17T11:37:15.252599Z","times_seen":4,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":39,"connect":1,"send":0,"wait":3,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994644\u0026x-nonce=a9958b3439bc454e8d8ed43230cb180c\u0026x-signature=8a3ece338caaf3088ca38480cdc175bd82219eaea72296f68e6a5b2a7bf3e33c\u0026fileId=9005116","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.829Z","timestamp":1792236994829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994644\u0026x-nonce=a9958b3439bc454e8d8ed43230cb180c\u0026x-signature=8a3ece338caaf3088ca38480cdc175bd82219eaea72296f68e6a5b2a7bf3e33c\u0026fileId=9005116 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 6969\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1af2c8be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/83cdccb9ff6f4ff1a72c7912635d1859.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6969,"size_decoded":7394,"mime_type":"image/png","magic":"PNG image data, 106 x 32, 8-bit/color RGBA, non-interlaced","md5":"41b634c53eae933d782d9a4aa7635347","sha1":"e500b034fd5bf1748628ce0814514809ac1a7ee2","sha256":"d5986ea8c2707910fbdc5430b69b1163b26f07a99374f19a185c0c0dfb6e4a37","sha512":"1fd8ffcf56cf101f07b4a24a3ade1b6a6abbb72c43dfbfc93be0e730fbcba9d983d57be3a99e06cbda10b44c44c6955a19fa5fe8978c574bf420acf93325c6e6","ssdeep":"192:NSWu5iD8fyTP93ySMlSKMwUm1aeqY3IbaKYw:MM8fyR3yTlSKXUqaeqGKh","tlshash":"f5e1aeb741e4aae730b6ccde7e32c6bc705d19d16e092895c3d53324584a825dce1113","first_seen":"2026-10-10T14:05:22.164869Z","last_seen":"2026-10-17T11:37:15.253319Z","times_seen":4,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fchip-stocks-set-for-a-relief-rally-but-the-2000-analog-signals-more-downside-4954031","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.914Z","timestamp":1792236995914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fchip-stocks-set-for-a-relief-rally-but-the-2000-analog-signals-more-downside-4954031 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995200\r\nx-signature: 3fd0cdd62bce0097addf62204d84f52444f7a61e05f78129e5d47d499d688acc\r\nx-nonce: 37f8258733684cdba481d6a9342de61f\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a87e9d49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":462,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"ec8f808c039f3e4fec2ed0014095cebe","sha1":"2f5d70727ff871394c11ee6fc51a506d3590df26","sha256":"fb05d73c78dc4ed5da03f700f9f5ebfc0c6959dfc1922708a9bb1e0694d11059","sha512":"8388962d4418efa847b3f2d0fc039dbb3e3a2a8d85ef7c195cdc79af236d85f1a390ab1caae85cf09d5e2625d7bffa7470627c0d0f3d8c1ebfff8f81c5a14a84","ssdeep":"","tlshash":"1ba022b3cb838e0c0b8a0880300038c80008c8888a80e082ca02a30c80c023f0088280","first_seen":"2026-10-10T14:05:21.826519Z","last_seen":"2026-10-17T11:37:15.253997Z","times_seen":4,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fstay-riskoff-as-higher-real-yields-and-ai-volatility-threaten-stocks-hartnett-4953610","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.917Z","timestamp":1792236995917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fstay-riskoff-as-higher-real-yields-and-ai-volatility-threaten-stocks-hartnett-4953610 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995201\r\nx-signature: f2925260b5260473e20a0f407ff2213019f82f036958bf5182f02445b9527095\r\nx-nonce: 10f798302b424ad1877f21a5efc573cd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a87ea349c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":461,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"14a5286e8561da130356046a4f5f640f","sha1":"04c179b2de3cd1d823c61c29b2e0b1242f13deef","sha256":"6e3595904833710dfb740207786720480936e4a52a45a466cfd0eb318ee47924","sha512":"32a584ea667d5999915df0c49ce874e654054d31b7fa67ff5ac3c8519a21074770c999fea8e1d7ac37ee02d4c4c0624f14440b21b7f3070b2b78b4084ea5539e","ssdeep":"","tlshash":"2fa0222b0fc303080f0c00c02038a00ca00ca008f002c2a0c820820882c023b80082c8","first_seen":"2026-10-17T11:33:03.279361Z","last_seen":"2026-10-17T11:37:15.254695Z","times_seen":2,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/78153.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.142Z","timestamp":1792236984142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/js/78153.1790755125431.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:02:00 GMT\r\ncf-ray: a4bf015ed82449c5-OSL\r\ncf-cache-status: HIT\r\nage: 276\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"b12e1780d3fb1562708c35b593572c47\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12091,"size_decoded":3269,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12061), with no line terminators","md5":"b12e1780d3fb1562708c35b593572c47","sha1":"e19a0c065f85b1073f73b01a204a67016fd71318","sha256":"a09861c4e84d0289ed2b79f0166b1156fef9f8c6a940ad8ebd78eb8c0afc0af1","sha512":"18348dca00dca194e13abec145650f6127c2c60c8db49e2158e803c6e5e3183cd19cc09efa910ff69f742f384649d01cd080ae149cafb65ddb06323ed28bef21","ssdeep":"192:mV+i6beUz+nzPvnoH1x+kBHkxvkKYKbS8d30qxPE68y//mnkUn8B/RmwRCX6L4tL:mV+bP+nToH1x+kBHkxvkKqjbXyCadOUU","tlshash":"0542441d4485a97edd1ba581206a4630902a0fa490725ccbe77cecb0e3e6d797f1e77c","first_seen":"2026-10-17T11:33:03.434752Z","last_seen":"2026-10-17T11:37:15.255813Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/img/bank1.6d86c02d.svg","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.473Z","timestamp":1792236984473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/img/bank1.6d86c02d.svg HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncf-ray: a4bf0160ec158be6-OSL\r\ncf-cache-status: HIT\r\netag: W/\"d98d855cd04fe71370df629aca206606-2\"\r\nage: 276\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Sep 2026 08:01:47 GMT\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12284448,"size_decoded":9112344,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b110390cdeb8f0171273e6e307ca144","sha1":"bce5155bef965242368b4be77fc4185b9f4d2699","sha256":"34598dffffbfe669a7db8c2de5d613f822469e44ee939cb59c7750d29ec7922a","sha512":"50de6c1936db2cfd4de4dc4dd9214cafaabd1a39a5945ab54a8f3cda68fc4947e63b1603c2df2daf4a5b5ed9188287fea02cd56de3403accca0ea9744c457618","ssdeep":"24576:EcJV+nGY4jwIyBxrHEaJqSNgjwRuA628/hyIZANuWBf1++0nr:F1b0pfJNKL9x0f1wr","tlshash":"302512395c5c3b1f6b2d5e1cdb666d3f1e1bb9dcb248a0df92ceb0e980465114236ca4","first_seen":"2026-10-17T11:33:03.35913Z","last_seen":"2026-10-17T11:37:15.257447Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/img/image316.91b7ddfc.png","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.497Z","timestamp":1792236984497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/img/image316.91b7ddfc.png HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 10709\r\nvary: Accept-Encoding\r\ncf-ray: a4bf01611cab8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 276\r\nserver: cloudflare\r\netag: \"7627a9a3680e636df742e6b0966b712c\"\r\nlast-modified: Wed, 30 Sep 2026 08:01:50 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10709,"size_decoded":11074,"mime_type":"image/png","magic":"PNG image data, 329 x 65, 8-bit/color RGBA, non-interlaced","md5":"7627a9a3680e636df742e6b0966b712c","sha1":"53a6a49d7657f154a3cb6ecb81e32a4327d9f7b9","sha256":"ee9ef04f9747780fcecfd4b855183fa845ff83d6ab4af0addf3200a64d69070b","sha512":"5555535726ba2743da321f607ec52456c95584936bc499dbddd47f6854e6f605123c0eb094f51ad90ac38ec8141a2861c589c2e7adeefcc17eee3a56e65e2eac","ssdeep":"192:tSMDMbf6jy5Lgl2BAcnxy5EcRK/a2GOOy+NkycHix6dIi3zsXzACjceYt:sMIbfFglUAcnxy5EcRKhayKk566dIY84","tlshash":"b422b0c1ad1abd3121d92e6d4ee795557707a658fb2123fdc0700a198775ef30048ea1","first_seen":"2024-10-04T11:22:10.101342Z","last_seen":"2026-10-17T11:37:15.258571Z","times_seen":11,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieMessage/getDocumentIcon","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:22.685Z","timestamp":1792236982685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieMessage/getDocumentIcon HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:23 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-type: image/jpeg\r\npriority: u=6,i=?0\r\ncf-ray: a4bf0155cb1349c5-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/757647a95a604b8695468a54aa9cf1a5.jpg\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23489\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23489,"size_decoded":23941,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 900x900, components 3","md5":"a5987dbce66024d91986ead64d2bff06","sha1":"e6997ed44137afa6ffd1407083428d468ad93137","sha256":"867eebb2070d7067da55b630fe99c83ab784fe2b7d867de3852c084ad7261052","sha512":"00f537e3d2227e2c4c7d8e69fb0fac48c9c1f24b5a3183a324276d2f2d9aaf635940aa95bc1cfb20ebfdb2cf41daabc6f04a77356ffb889bfefc2614b9417ad2","ssdeep":"384:UNPPsO+ZfeXub44+6R+s++34ATTRQqIvRel/DQP2jKpD:CeZWupR+4xTTiDvRgceW","tlshash":"4eb29f8f6b4dff04c801b334c9d31968b31b8c3535a265a57692a4709f5237bbc9ea72","first_seen":"2026-09-17T08:23:53.114661Z","last_seen":"2026-10-17T11:37:15.259245Z","times_seen":3,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/Home/homeConfig?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:23.655Z","timestamp":1792236983655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"POST /exchange/Home/homeConfig?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nport: 2\r\nlanguage: zh\r\nTimeZone: UTC\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236983647\r\nx-signature: c1167cdce26e2e309c2b7115b52fe16cc5d93f9ccae1d571ace2e7de2842f92e\r\nx-nonce: 6c67666897c941279684336564921744\r\nContent-Length: 119\r\nOrigin: https://hrcke.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":119,"data":"{\"dicts\":[{\"name\":\"languages\",\"page\":0,\"size\":10}],\"protocolType\":null,\"serveProtocolType\":1,\"iconType\":1,\"portType\":1}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:23 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf015bde0949c5-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://hrcke.com\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28223,"size_decoded":10902,"mime_type":"application/json","magic":"JSON text data","md5":"ab7638715f4f5c0b0a4c1f9d657120d3","sha1":"a920856cd93a80c9dd4992c6fa6828a62b0851e6","sha256":"7397d9de5ecbedf73798e143a93d50b83ae8a0e44d11110b1472cb3c4b66e98b","sha512":"e34c1549a93f95b011fce562881dbc7fca6ea7b707920712431d6c9baea2a82f2d21609a949b99f89239db839d2d9a2281bc9fce4d9e978f93f5d043ac172f78","ssdeep":"768:WCkU3lAXnRY6qm8M/KgzZJTtKxewrE1t40WJ/VX/lg:TRlAXnRBk0KgzZJTtOewrE1t4NRS","tlshash":"65c2c555e82acebfd5870a9e1afe2c7314cc72aa06d94c5c7e4eee4d87d6034181a187","first_seen":"2026-10-17T11:33:03.428179Z","last_seen":"2026-10-17T11:37:15.2599Z","times_seen":2,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":173,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/fonts/iconfont.d724cb77.woff2","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.101Z","timestamp":1792236984101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/fonts/iconfont.d724cb77.woff2 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/static/css/app.1790755125431.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ncontent-type: binary/octet-stream\r\npriority: u=3,i=?0\r\ncf-ray: a4bf015e980849c5-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 276\r\nlast-modified: Wed, 30 Sep 2026 08:01:45 GMT\r\netag: \"8b076400ea0993832af2e079b651e5fe\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 59020\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59020,"size_decoded":59397,"mime_type":"binary/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 59020, version 1.0","md5":"8b076400ea0993832af2e079b651e5fe","sha1":"807432ba27a5e43d12b9839025561101a99abc93","sha256":"88a8e99314dc3ac7bf68a95821017817f5eef2913bb0c15bf9f97dbecfbea8f2","sha512":"6cefa3224cd3e766ea831fed5f8e9b52992632b70a0f5d7994b152ba7d6a524c55a5b81249b034b8f6de483cd27234899126afbd51a9e70f8f738fa529219262","ssdeep":"1536:ZgUZmUIpMDOca2Xr+G/QMXp3C1NkiR/ltA:uBiD5a2XrflwNR/ltA","tlshash":"b74302c48f833cd5e3b3216ada86b2268533587e35a0f8186493fa4d7418d96d94ee4f","first_seen":"2025-07-06T06:57:37.86535Z","last_seen":"2026-10-17T11:37:15.260896Z","times_seen":12,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/app.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?","date":"2026-10-17T11:36:18.608Z","timestamp":1792236978608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/js/app.1790755125431.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:18 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:02:03 GMT\r\ncf-ray: a4bf013c4c210b41-OSL\r\ncf-cache-status: HIT\r\nage: 274\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"9cad8e753e4dfc9cef01fc3423c4f354\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2784926,"size_decoded":1386119,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"520bf13e83d5a11cbcb648cd7c0bbd4e","sha1":"0f264a9bb860b986da433d174e4464d6ea3211a9","sha256":"87aaccccc9e0fc062f5202f2e814ccf5af1f3d4d5f4e4a1c314e83b35641ecc3","sha512":"cf96623f6704c245094784514a8b54ada7338609adbef8460a6a0d0aab54d8b6d7bc5c1a6759c915bb1397b16f3877c21e4a293c9e7905454e34d416c70d01a9","ssdeep":"6144:v9v7HFLKezzdXOApF+7OOez1yXy0UnRZNumv8MkGNTqyotUDtuU1TF6WGh9LA5x:d7luAzMAD1yXy0QRIMFNukDtuA6ba","tlshash":"bb256ef1e32852fc9d0e87e9e92a58683a2f20fb79d1ccb8426cded095425d9cd45cc9","first_seen":"2026-10-10T14:05:21.964387Z","last_seen":"2026-10-17T11:37:15.261539Z","times_seen":6,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hrcke.com/main.html?","date":"2026-10-17T11:36:19.230Z","timestamp":1792236979230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:12 GMT","end":"Mon, 21 Dec 2026 18:40:11 GMT"},"fingerprint":{"sha1":"AE:BD:84:85:8E:C5:11:85:74:3D:03:31:4C:F1:48:FC:FD:34:A4:40","sha256":"52:31:09:0A:7D:15:EA:28:1B:57:B2:D1:58:31:0C:CE:F0:5C:97:E1:7C:EB:CA:D4:75:1E:24:D4:DB:76:14:32"}}},"request":{"raw":"GET /css2?family=DM+Sans:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 17 Oct 2026 11:36:19 GMT\r\ndate: Sat, 17 Oct 2026 11:36:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5337,"size_decoded":1216,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ef964e6462148e22171f36b46324259b","sha1":"b79568ac48b8e0df1b8006322e7bc3b15e971037","sha256":"a7ad9a2234bd54d97849359b81746236d229b96ae47c988ad88615b2e1e8f4f7","sha512":"c8098faf1a66bff47e3344db6ff74b2115cd6bca6654c59fb16c91c46a7a46a05cd6a267503467f289d8499c874fe0de4898e31784d26b8111a7c193d4b97dae","ssdeep":"96:jYgEa0Jc+qfYgEacNkYgXa0Jc+qfYgXacNkYgpa0Jc+qfYgpacNkOEaXsXJc+qfh:MOQxOkNQxNkrQxr8wf+rwY+NwC+3","tlshash":"0cb1e081042ba154db972dc426de7d32ef1fa1946454a874affe1888fc9ac2e5361b4c","first_seen":"2026-10-06T11:37:37.000937Z","last_seen":"2026-10-17T16:56:06.903666Z","times_seen":55,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":5,"connect":15,"send":0,"wait":33,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/viewLoading.gif","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:21.831Z","timestamp":1792236981831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /viewLoading.gif HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:21 GMT\r\ncontent-type: image/gif\r\ncontent-length: 28896\r\nvary: Accept-Encoding\r\ncf-ray: a4bf01507bc18be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 277\r\nserver: cloudflare\r\netag: \"703c940e874943ecd3fbcd1cada9745b\"\r\nlast-modified: Wed, 30 Sep 2026 08:02:03 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28896,"size_decoded":29261,"mime_type":"image/gif","magic":"GIF image data, version 89a, 800 x 600","md5":"703c940e874943ecd3fbcd1cada9745b","sha1":"a28e45a00ca639452c0169e7e1b72a3549000ce8","sha256":"dae437250bbf674eb06a897a9e63b0fbcbd7eba2c68c5601eb02ff7e0fb19145","sha512":"d55492795a01121785aad2ab61d06e5dd408c3904ba00ea454e2765781f2ae4faf5d3794c8c51c8146b83f577732e8d34d03e82b43204114f310bed4fe7fccac","ssdeep":"384:sbzi2gJmlCPuWhhTJb7kN20X40BTstQKhQ6kLegGsA7Umk/RoW3H2lHOmdmSWPmv:szi2gVLVbI4K4YWkQImWRGHOYZRKAN","tlshash":"a6d2e10e216d6d1aff7d89b80d72e38c4953eff05d5678076e88632e89561592c0cef2","first_seen":"2025-03-31T16:58:52.268181Z","last_seen":"2026-10-17T11:37:15.243674Z","times_seen":443,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/css/16168.1790755125431.css","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.131Z","timestamp":1792236984131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/css/16168.1790755125431.css HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Sep 2026 08:01:40 GMT\r\ncf-ray: a4bf015ec81c49c5-OSL\r\ncf-cache-status: HIT\r\nage: 276\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"2be1d4a5a661dabc4787f00d94fd69a3\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21497,"size_decoded":2844,"mime_type":"text/css","magic":"ASCII text, with very long lines (21497), with no line terminators","md5":"2be1d4a5a661dabc4787f00d94fd69a3","sha1":"5134a362f3f695bacc35b0a1f114911bdaaef7a6","sha256":"47f7c90fb636055049bba76fa2c282fc5f78d9fdeaa3a2d9d57073da77bd8e9f","sha512":"aeae8625c184ab2fdc56c2f0b0596a77dd795e99ebd75bd790e1126f085667ded9d10bb0e031c7caacb719ea6aec1ad6b02a145c0043dd85d2fab0da7ce672f1","ssdeep":"384:liQXvfEXjcu59k2p8AzZCliS+66qu1lIFaVQiBg081BwTciCxuLibGOr656qB:liQXvfEXjcu59k2p8AzZCliS+66qu1l1","tlshash":"d4a24407f768275c89e3cd052f88568bc296f963a01273f6da1b9351cfc7686367124e","first_seen":"2026-09-17T08:23:53.122473Z","last_seen":"2026-10-17T11:37:15.262787Z","times_seen":7,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/75739.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.669Z","timestamp":1792236984669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/js/75739.1790755125431.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:02:00 GMT\r\ncf-ray: a4bf016229ff49c5-OSL\r\ncf-cache-status: HIT\r\nage: 276\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"278daf027c596dbc6f1b9e3a42360260\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59191,"size_decoded":15672,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55913)","md5":"f126a1c5f07047956a4942ffc32403b2","sha1":"b0e81e93388e03bae6befeab4c7c821fa61eeffd","sha256":"1cf05b677ee34d9b8987d563e0ef05f78c6428344f03f9cdeb19b4dae4e5f43f","sha512":"c5f17bbe0bb57ca9ed167454b66609e8cf5cb5bc0013a94d446c5e72e50142b0e852c51db85e690c09b03721ce3d26cb619ead971e31e82d5c2573a1f7a82b90","ssdeep":"1536:DLM09s7gU6iHmHICorISILDW16GxcsSFIKpz7C2lrKPvZ:w7UiHmomHPlVI2l+PvZ","tlshash":"6143dc0a8247299cdb3f1a617dafecda35134f82f84e4c4a6fd178e50ac34a17291776","first_seen":"2026-10-10T14:05:21.835975Z","last_seen":"2026-10-17T11:37:15.263768Z","times_seen":4,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994643\u0026x-nonce=5c562ead701e4ae0af06d6c7ca350a8e\u0026x-signature=880343d806027dc5fff28bcaa6ca49740ed15fc847a25ace479934786b984922\u0026fileId=9005123","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.828Z","timestamp":1792236994828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994643\u0026x-nonce=5c562ead701e4ae0af06d6c7ca350a8e\u0026x-signature=880343d806027dc5fff28bcaa6ca49740ed15fc847a25ace479934786b984922\u0026fileId=9005123 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 3469\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1af238be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/03042eeefb7247dcaa86047bb7f1f59e.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3469,"size_decoded":3894,"mime_type":"image/png","magic":"PNG image data, 123 x 21, 8-bit/color RGBA, non-interlaced","md5":"9afc91bf06868cbf047eabeee18b9e78","sha1":"e58b023542345ec51be0d79b1a46b22125ecd462","sha256":"ece4478abacfef6e60f8e37e297f1da7beec88c38d94cdbca38698f8ad704377","sha512":"b5161f0b02dd73150ff59e723839a5d3f6594e3caec9f2dd2d7b78581f79ad36b514e9b4d8af85be70bc13336bcf8fe43d632226284758a78c1ef361332a9311","ssdeep":"","tlshash":"5a615ceeea47b40e214e48234e1f1fa356644a9f00613266f825943d19ccdaf464fd96","first_seen":"2026-10-10T14:05:21.960716Z","last_seen":"2026-10-17T11:37:15.264338Z","times_seen":4,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994644\u0026x-nonce=5c9e7a31faaf46e4b32be90ed3b6c359\u0026x-signature=de46e413a94d608c25710e348c86c21191a93c4452bafe79c82ffa8e693aca5d\u0026fileId=9005111","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.831Z","timestamp":1792236994831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994644\u0026x-nonce=5c9e7a31faaf46e4b32be90ed3b6c359\u0026x-signature=de46e413a94d608c25710e348c86c21191a93c4452bafe79c82ffa8e693aca5d\u0026fileId=9005111 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 1823\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1af348be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/f537d26ed4db41a88d829aa795b5693c.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1823,"size_decoded":2248,"mime_type":"image/png","magic":"PNG image data, 86 x 25, 8-bit/color RGBA, non-interlaced","md5":"b3d14f73812b10a4e066223ecd05d55c","sha1":"7647b316d8ac24406e122ea9a409d0b1f47a9ab3","sha256":"906d557d56f7ac00a32a07da89d6332d0ad4eb69d446b7c9cb893fc6c5fd90ed","sha512":"462db1c1b3f57cca1f89e53585ccaf18f4f09b81976ae05f26db3b7155eae90a3cac6fa7493c8ec3cb9a6b3d632f2b726f53057852f9e1af0753dee61dd878b1","ssdeep":"","tlshash":"29312d0bf5401c2fb075535e615aa16380835e5c8b149cdf4f46e7e5291d209b73b5d1","first_seen":"2026-10-10T14:05:22.007689Z","last_seen":"2026-10-17T11:37:15.264964Z","times_seen":4,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994646\u0026x-nonce=db981006d5944acd9e49ea75b9882f72\u0026x-signature=42d7850d6a6c7f2fa1d15ea1485a27998ff00a7e1eb3810dc2e811f7d5d9564d\u0026fileId=9005144","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.840Z","timestamp":1792236994840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994646\u0026x-nonce=db981006d5944acd9e49ea75b9882f72\u0026x-signature=42d7850d6a6c7f2fa1d15ea1485a27998ff00a7e1eb3810dc2e811f7d5d9564d\u0026fileId=9005144 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 1981\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1bf528be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/7ca46fa4eeb24142a35fde2be9d46275.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1981,"size_decoded":2406,"mime_type":"image/png","magic":"PNG image data, 88 x 28, 8-bit/color RGBA, non-interlaced","md5":"53b0c161ef529d3ce49a67d45e5cbff0","sha1":"6fa8259d2c8d21fd149adf0164854f7d0ba46fb0","sha256":"e53c2a7fcf58017bc34efaf5c09306d7ab75646d16917d1d04821aa558479a72","sha512":"80058ef031205f5a1de3cdc301926be6d40e76841eda805dedb1578293c1c4fe72009207474cceff41147f1fdb71b35d28aa37cf011243cd9470ae39b1ddb9a3","ssdeep":"","tlshash":"fb412ccf4f08d472d012e8d78c7981e47e575f229f6764e2b916d3b4b1806e8a0dc546","first_seen":"2026-10-10T14:05:22.20412Z","last_seen":"2026-10-17T11:37:15.265552Z","times_seen":4,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/assets/crypto-min.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/","date":"2026-10-17T11:36:17.550Z","timestamp":1792236977550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /assets/crypto-min.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:17 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:01:40 GMT\r\ncf-ray: a4bf0135ab260b41-OSL\r\ncf-cache-status: HIT\r\nage: 274\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"00c83b9fb420a2a51fa8bdfc393a36e6\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97461,"size_decoded":20031,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"00c83b9fb420a2a51fa8bdfc393a36e6","sha1":"02c964bb77b38e2d4a797f879c62f1d7e8e7e298","sha256":"fdc42e452909c91865a51767cf0c64eabc7e79263bb2f74c8e7ba6efa96d7126","sha512":"c7a30cf888f1672aa4e71e9a13538d8736b96757eafb25a25df0cbc76b70ea68ad0b98c691a153841987f3bc59f0c9a4b5e4a9920bde4aa4ab91eff5e9e72406","ssdeep":"1536:3+boZMm1xIos+VaLOaDMYZE8Rd/s0D8pouR/Q1TwWeGVHxru31kJtEHqcduqBHof:uSYGVaaaYYUpouR/Q1QHtuOHooS9X","tlshash":"de93fb8a5ae214b4a12bf43e1f6f98026e45645f1f29fe0e7d4c82a44f4d42d13b5fac","first_seen":"2026-03-20T15:34:08.60414Z","last_seen":"2026-10-17T11:37:15.266147Z","times_seen":8,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:21.978Z","timestamp":1792236981978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:12 GMT","end":"Mon, 21 Dec 2026 18:40:11 GMT"},"fingerprint":{"sha1":"AE:BD:84:85:8E:C5:11:85:74:3D:03:31:4C:F1:48:FC:FD:34:A4:40","sha256":"52:31:09:0A:7D:15:EA:28:1B:57:B2:D1:58:31:0C:CE:F0:5C:97:E1:7C:EB:CA:D4:75:1E:24:D4:DB:76:14:32"}}},"request":{"raw":"GET /css2?family=DM+Sans:ital,wght@0,400;0,500;0,700;1,400;1,500;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 17 Oct 2026 11:36:22 GMT\r\ndate: Sat, 17 Oct 2026 11:36:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5337,"size_decoded":1216,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ef964e6462148e22171f36b46324259b","sha1":"b79568ac48b8e0df1b8006322e7bc3b15e971037","sha256":"a7ad9a2234bd54d97849359b81746236d229b96ae47c988ad88615b2e1e8f4f7","sha512":"c8098faf1a66bff47e3344db6ff74b2115cd6bca6654c59fb16c91c46a7a46a05cd6a267503467f289d8499c874fe0de4898e31784d26b8111a7c193d4b97dae","ssdeep":"96:jYgEa0Jc+qfYgEacNkYgXa0Jc+qfYgXacNkYgpa0Jc+qfYgpacNkOEaXsXJc+qfh:MOQxOkNQxNkrQxr8wf+rwY+NwC+3","tlshash":"0cb1e081042ba154db972dc426de7d32ef1fa1946454a874affe1888fc9ac2e5361b4c","first_seen":"2026-10-06T11:37:37.000937Z","last_seen":"2026-10-17T16:56:06.903666Z","times_seen":55,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":39,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/16131.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:23.565Z","timestamp":1792236983565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/js/16131.1790755125431.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:23 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:01:55 GMT\r\ncf-ray: a4bf015b4dc349c5-OSL\r\ncf-cache-status: HIT\r\nage: 277\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"3d67c62ead143fc7482509a36425fced\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77614,"size_decoded":31185,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41471), with no line terminators","md5":"705af189132c0ebc8e91efcf78fdf815","sha1":"f0d9c92c8d99db374a69b2139b894dc4ed5798a5","sha256":"6cd94ac48239a4bfbfd67c9318b9655ba4e4587b1a84083829cf3828d285186a","sha512":"0dcd7992fe1a8c2a6cd7bc1910a74e4d72b1af7ca942f6c15bf1db25f3e48422859430c056ec8d7a829db51ffa881e1f6289837efb595b7873fa576bcd426042","ssdeep":"1536:dI7f7lNf8H6jnq8/KHESS8fQdvlF81SuzOtGNufL:dI7fTf8HSnq8/KHZSpdvlu1SuzOt1","tlshash":"ac736ce8a9dfbeac2883934dab4b110930e91e45c8bbd9d45ddd0a1202ece5fd786315","first_seen":"2026-09-17T08:23:53.105965Z","last_seen":"2026-10-17T11:37:15.266809Z","times_seen":5,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/1271.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.137Z","timestamp":1792236984137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/js/1271.1790755125431.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:01:55 GMT\r\ncf-ray: a4bf015ed82049c5-OSL\r\ncf-cache-status: HIT\r\nage: 276\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"53f4d60179680bc59b2c1362dd4d9797\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16874,"size_decoded":5013,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16874), with no line terminators","md5":"53f4d60179680bc59b2c1362dd4d9797","sha1":"4d1fd74afed39f098d07a12593a238293f4f8bbb","sha256":"a1de1ff82f75d8ee5bd9ad31911f02355aaec85d6e50b74e8d08e0a7aa5e1863","sha512":"70aade7e74c6e0baf556e2a2de803af3712adab283c467a42b61b47533b7651c0eb4c0cd3608a13c8b91b6560d03e399e8b79a2249e7bcf1595b8d360f094a00","ssdeep":"384:Ph+dS+Qinm2JaMxjHpZdIStq/5F2yCF2Rf:P7N20QlZhm","tlshash":"2672ea0ff4c2743ac8be6155a42f451291761fa9a042d05af7bcc9ec46b4c987a2ef7c","first_seen":"2026-10-10T14:05:22.109674Z","last_seen":"2026-10-17T11:37:15.267484Z","times_seen":6,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hrcke.com/main.html?","date":"2026-10-17T11:36:19.238Z","timestamp":1792236979238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Sep 2026 18:40:12 GMT","end":"Mon, 21 Dec 2026 18:40:11 GMT"},"fingerprint":{"sha1":"AE:BD:84:85:8E:C5:11:85:74:3D:03:31:4C:F1:48:FC:FD:34:A4:40","sha256":"52:31:09:0A:7D:15:EA:28:1B:57:B2:D1:58:31:0C:CE:F0:5C:97:E1:7C:EB:CA:D4:75:1E:24:D4:DB:76:14:32"}}},"request":{"raw":"GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 17 Oct 2026 11:36:19 GMT\r\ndate: Sat, 17 Oct 2026 11:36:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18235,"size_decoded":1522,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c58605e541d081ebcd45c40fad622d9e","sha1":"9de7f6680dcd5e9ceb316ea2b4cb9f9a2a34828f","sha256":"879f45afe333c4a1b946dac0b2effcfd9b769707dce4d7053506e88fa0682ed3","sha512":"74364d5d9e4aa7ae768d8da369edf41ccd1ffd6a90f76359a726c20b4a0964db5c96d288bd186299e2b9064fde13d3408c3eed0801b3601a8b317196129f8e99","ssdeep":"192:H3pa3pNc3prA6JA6+cA6jn6hn6mcn6bObOmcOnN6AN6rcN64E6gE6LcE6Yr6/r6b:H3Q343VbBxeiSE++RDLuyik0RQw1","tlshash":"fa827991087ba114ab871dc123df6d37ee0ea254b850e5786bfd0cd8ad9bc660371b2d","first_seen":"2026-10-10T14:05:21.794307Z","last_seen":"2026-10-17T11:37:15.224962Z","times_seen":6,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":47,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://www.walletlink.org/rpc","fqdn":"www.walletlink.org","domain":"walletlink.org","tld":"org"},"ip":{"addr":"104.18.37.8","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:23.777Z","timestamp":1792236983777,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletlink.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 03:44:49 GMT","end":"Fri, 11 Dec 2026 04:44:46 GMT"},"fingerprint":{"sha1":"DB:77:7C:18:18:41:0B:38:B9:B0:CE:81:19:67:5D:EA:D6:EB:30:1C","sha256":"47:E6:F6:F0:87:B0:EA:68:98:81:44:DD:4A:DA:9F:E1:06:34:DC:C1:7C:AA:09:29:85:10:A8:87:F6:5D:7D:7B"}}},"request":{"raw":"GET /rpc HTTP/1.1\r\nHost: www.walletlink.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://hrcke.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: vMPyMXPPNGimOjuZZLJXGA==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: __cf_bm=az7H5fXxcM7HVSNwZ4R45StKFoofJVAJRdRoxuzIWF0-1792236980.7078328-1.0.1.1-6SEsp9Socb_rBZ6rRSjC9Fl_cmTnmlCcoAfY2e_8Vad3JGTLfVErvTU8rs0eIIJjhgEglCxr7cNpfUPsProMnBc7x7HO9aXKc6SvUfcyVsmu6qFAI7YVKLEhRzzT9wUZ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"az7H5fXxcM7HVSNwZ4R45StKFoofJVAJRdRoxuzIWF0-1792236980.7078328-1.0.1.1-6SEsp9Socb_rBZ6rRSjC9Fl_cmTnmlCcoAfY2e_8Vad3JGTLfVErvTU8rs0eIIJjhgEglCxr7cNpfUPsProMnBc7x7HO9aXKc6SvUfcyVsmu6qFAI7YVKLEhRzzT9wUZ"}],"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 17 Oct 2026 11:36:24 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: h5U0KqPN2qp/NPCUqFO2iihmPgk=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qn%2FNOgjOIpM7nWuOZOSacVl%2F%2BxqgyWzt15UN0jt4sgozsbTyzIOWLptR8zzaW96pIIXBhR3Q5IGSVpTqgmKOT04UHFOBpuK1vED2q79jo%2FHpAhE0olRmSNP1Hrje5WmMdmaXIA%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: a4bf015cb9fe723c-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":574,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-17T17:55:32.063546Z","times_seen":19168837,"resource_available":true,"data":null}},"time_used":522,"timings":{"blocked":0,"dns":16,"connect":17,"send":0,"wait":483,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/img/bank2.79333296.svg","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.474Z","timestamp":1792236984474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/img/bank2.79333296.svg HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncf-ray: a4bf0160fc238be6-OSL\r\ncf-cache-status: HIT\r\nage: 276\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"6669e07f515a15a8b75c9fe88bb19cdc\"\r\nlast-modified: Wed, 30 Sep 2026 08:01:48 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110742,"size_decoded":83619,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6669e07f515a15a8b75c9fe88bb19cdc","sha1":"9014ed1c58bb078c8f455eb2f3a5e9ff09617070","sha256":"6f6c80b27b0fbe8288bd78b7c5b373c69be811160fbf6e1f2f1224c607353d24","sha512":"9d82949f1dd8fbe90ea261f54945242c04e0b985024fac8161dfc96a67c150f49c395f6e3866c785bb62abbda2f084b1acb971367ae9e1c789d25ac2d69925c3","ssdeep":"3072:ezxZ5HhlNy6TftYmwd4OIR7NzlaDFS1GINp2DT5RG+NRZ:eZ5HU6xY341LzlaDFS1bI+gZ","tlshash":"adb3128339f5a92108d6443f5857604d59a262d74888c05fe823f6f7f58cef1b6768f8","first_seen":"2026-10-17T11:33:03.265649Z","last_seen":"2026-10-17T11:37:15.26812Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getStockList?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.617Z","timestamp":1792236984617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"POST /exchange/RockieNews/getStockList?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nport: 2\r\nlanguage: zh\r\nTimeZone: UTC\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236984469\r\nx-signature: 3b62830dd81357f85944f560127ffbf3a4f71836b0ca5c3ba0d96eea7b3ed36a\r\nx-nonce: 8cd8c71ce5474f3c83e52c9d964de531\r\nContent-Length: 61\r\nOrigin: https://hrcke.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":61,"data":"{\"page\":0,\"size\":5,\"keyWord\":\"CNH\",\"countryId\":39,\"isCoin\":0}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf0161d9d349c5-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://hrcke.com\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41814,"size_decoded":10005,"mime_type":"application/json","magic":"JSON text data","md5":"80a6ae7aaaede234f7b666eabae7347d","sha1":"7d34db566d1f438952a592856a80fc9bec96207b","sha256":"0b909f797d526ead9b15e56980210b62208dc2b459647b9721eac05864a4e010","sha512":"9807ee7789026aa8de4e9f4d12639024ceec13c49d757ad752a4e91c51cb5f96541521737ce72b3e67df2c943eb5b33446b551fd74b4801d9096211f0ab44649","ssdeep":"384:3zPygVAgGy7iTT1Gq7Frz6B6uZxdawuu4rq7J51KgPWwELeYVI:3TycNG6ibrz6B6uZHa04rq7J5fa1VI","tlshash":"4713532d9beb5d7d1fe451e118c9fe4a664d22eb91c0fdb1d3a0cf2842e52bb042b095","first_seen":"2026-10-17T11:33:03.25434Z","last_seen":"2026-10-17T11:37:15.269375Z","times_seen":2,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieGoldNewStockController/tickerList?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.622Z","timestamp":1792236984622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"POST /exchange/RockieGoldNewStockController/tickerList?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nport: 2\r\nlanguage: zh\r\nTimeZone: UTC\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236984490\r\nx-signature: aa56efe9b3c808bc3993db64bf71bd6d5943016e7107451ba6c3ace6b42a122a\r\nx-nonce: 03d6ae5f8d5a432b89e027207c89eea1\r\nContent-Length: 65\r\nOrigin: https://hrcke.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":65,"data":"{\"coinName\":null,\"page\":0,\"size\":10,\"countryId\":\"39\",\"etfType\":1}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf0161d9d549c5-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://hrcke.com\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1675,"size_decoded":1209,"mime_type":"application/json","magic":"JSON text data","md5":"4499d74bbbfc706c5d8ea06b5234b0ec","sha1":"f6e612bb70b3c1dc5f5e9c83d1c233cf1b32a869","sha256":"f554906f7e3cc358e6b02cc00e558d5ca18c2abc7c300cb86d84a3bff6c6ff10","sha512":"e82a8a981e4311d2fce4a271b4a53289137b3c86cd67147a32aa4c06b13b56af7ac2df12ef14347510942713f951a10cd54d23dcf4830205568429114928a908","ssdeep":"","tlshash":"953130af9334b92a9fd0d1d10b237712047033ab6280e10eb6dddb4426b2ec71c5a917","first_seen":"2026-10-17T11:33:03.274654Z","last_seen":"2026-10-17T11:37:15.270999Z","times_seen":2,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/semiconductor-manufacturing-international.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.542Z","timestamp":1792236994542,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /semiconductor-manufacturing-international.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:34 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: zstd\r\netag: \"d249f29a59f3c54ffe4d5949a6802c71\"\r\nlast-modified: Wed, 08 Sep 2021 08:54:56 GMT\r\nx-amz-id-2: MievHZO0cfXfaFju4X+FP/AV0GiGKFQN5pFOfPqWcXaN3IN2e4eqLPsffsX0cNYiibKOxz234/yxQOaSXJuH1aFMfCliZuEz\r\nx-amz-request-id: 0C8KWMPF5MDAPVGG\r\nx-amz-meta-hash: d249f29a59f3c54ffe4d5949a6802c71\r\nx-amz-version-id: null\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1348, 830\r\ncdn-cachedat: 10/03/2026 19:11:49\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: ae7131af2cabc6c3b294fb3a9acabcb2\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":546,"size_decoded":1291,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (546), with no line terminators","md5":"d249f29a59f3c54ffe4d5949a6802c71","sha1":"e73da87ce3ef1e795a2d6b93fa82e8b2930600ed","sha256":"490cdefee3d82e630c8cc82ed5f17f2e4aa34a5ab961f7babf949506dd73aa1e","sha512":"1c4f3cf33171682b0c31077d4fa935ab6aa0180c876de201b4ae07afeae19e2d811e956e38bc00bd3f574eca5b88b7271f2f06b5497063fd4ad5366a105b1bdf","ssdeep":"","tlshash":"62f081cc5768918c5f4185e9a778009a919f50ea51b6a0c5d5937b49a4095c73904e8c","first_seen":"2026-10-10T14:05:21.912317Z","last_seen":"2026-10-17T11:37:15.272266Z","times_seen":4,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":36,"connect":2,"send":0,"wait":2,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/img/Frame-1.5fa63895.svg","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.467Z","timestamp":1792236984467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/img/Frame-1.5fa63895.svg HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncf-ray: a4bf0160ebf08be6-OSL\r\ncf-cache-status: HIT\r\nage: 275\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"7e2be277c80861dbbe6a490fcc8c70c0\"\r\nlast-modified: Wed, 30 Sep 2026 08:01:46 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2935,"size_decoded":1734,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7e2be277c80861dbbe6a490fcc8c70c0","sha1":"38c46205829f5d7a2273fa143ade3cba8f89cba7","sha256":"b244cee110517ea174870fc62217a6a3f385ac323d113f3628e8f2bd38cf0207","sha512":"0de8b7423a265ae2d395a4359fc63af3aca9b16b7ddf687bd2792dd891b9d83473069170f74e187f3febe5e7417c0491ab71aa6f3da0d8f070f60310e3f06f24","ssdeep":"","tlshash":"2f5164fed39852d4590fd3a0ec2b01716baf38ba6bd5978c0250ced573681a9ca8cc84","first_seen":"2026-10-17T11:33:03.422053Z","last_seen":"2026-10-17T11:37:15.273453Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieGoldNewStockController/tickerList?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.815Z","timestamp":1792236994815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"POST /exchange/RockieGoldNewStockController/tickerList?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nport: 2\r\nlanguage: zh\r\nTimeZone: UTC\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236994561\r\nx-signature: ca4365757cb645e51bdbb9c6868784edb3ceaabeb148926eead1de24a398303e\r\nx-nonce: 87d859873cec4d10b11889847d6c69a3\r\nContent-Length: 65\r\nOrigin: https://hrcke.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":65,"data":"{\"coinName\":null,\"page\":0,\"size\":10,\"countryId\":\"39\",\"etfType\":1}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:34 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a19aa549c5-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://hrcke.com\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1675,"size_decoded":1209,"mime_type":"application/json","magic":"JSON text data","md5":"4499d74bbbfc706c5d8ea06b5234b0ec","sha1":"f6e612bb70b3c1dc5f5e9c83d1c233cf1b32a869","sha256":"f554906f7e3cc358e6b02cc00e558d5ca18c2abc7c300cb86d84a3bff6c6ff10","sha512":"e82a8a981e4311d2fce4a271b4a53289137b3c86cd67147a32aa4c06b13b56af7ac2df12ef14347510942713f951a10cd54d23dcf4830205568429114928a908","ssdeep":"","tlshash":"953130af9334b92a9fd0d1d10b237712047033ab6280e10eb6dddb4426b2ec71c5a917","first_seen":"2026-10-17T11:33:03.274654Z","last_seen":"2026-10-17T11:37:15.270999Z","times_seen":2,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994645\u0026x-nonce=82b5b73ed2d549299819bb5684b10faa\u0026x-signature=cc2d3aa76f688a17168a353eacb024d9e56cd348c5afa5de8914d9aac0fbce5d\u0026fileId=9005134","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.837Z","timestamp":1792236994837,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994645\u0026x-nonce=82b5b73ed2d549299819bb5684b10faa\u0026x-signature=cc2d3aa76f688a17168a353eacb024d9e56cd348c5afa5de8914d9aac0fbce5d\u0026fileId=9005134 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 5725\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1bf478be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/dd135c6f7004448fbc6d59f58fc6bb8e.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5725,"size_decoded":6150,"mime_type":"image/png","magic":"PNG image data, 188 x 33, 8-bit/color RGBA, non-interlaced","md5":"5a58b997268f0dad1951358e0918aa12","sha1":"891f8704358361301d7ebf74c971c48d97132762","sha256":"70f99636c65b087664fc67f44b30a148664a7fcf1a701943d54df7065c73b51e","sha512":"3a50beeaac42561154e97d9b51b325c597c9ed73145453a2a67cf908035b965dad60327fd2f66564bbbf594b5a563ba1f9cb12d503640e0d3f8fa89db97365b9","ssdeep":"96:JpS1Uwg9n+w+OFNv0SViMaXkONnPSwTv3zQsBpfa84KP1j8rcS+p4lZGW4L5S4Db:JpSbcnPHxafnPfTLQYfa84KPyVbRM/jz","tlshash":"b0c19f9c2448b4d703e0e9658193375c7d8a4926d4a0a73fe418d4cfe7c1f66e58f399","first_seen":"2026-10-10T14:05:21.987882Z","last_seen":"2026-10-17T11:37:15.274784Z","times_seen":4,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":718,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994648\u0026x-nonce=fdeedad041594584a723446615cecc80\u0026x-signature=8716d1fdec15173c3d5431124416aa396fbb777de92714568f94cc568cc95abe\u0026fileId=9005252","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.849Z","timestamp":1792236994849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994648\u0026x-nonce=fdeedad041594584a723446615cecc80\u0026x-signature=8716d1fdec15173c3d5431124416aa396fbb777de92714568f94cc568cc95abe\u0026fileId=9005252 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 18744\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1cf788be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/12b71c1bd00c4914a788a10e45bb5a66.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18744,"size_decoded":19170,"mime_type":"image/png","magic":"PNG image data, 500 x 107, 8-bit/color RGBA, non-interlaced","md5":"f2cd70002bfa345404fcab845b20a2ba","sha1":"61cc538a333df4fd71a1dfb3cf7c5a7abd92e93c","sha256":"3f504652904af4cdcb188a108131fc18e35f16f51902d9486f63bd8658a12ad7","sha512":"bd9e5d074646b9eddd1b3fed4541e2ecc7ae872dd583d172b72681bb11cc94e1786d19d2bbd99fe600166ebcfcaf6aeeb68563928bd3ba0c14213f1ace258c9a","ssdeep":"384:OLbp037W/kwyGEMmtmVB4asLBPbrOtx2J0HFsOnmyVzMLKOBtZd0eXc:gkw2MmtNasdPbKX2fpyXOHZd3Xc","tlshash":"9282e11da075b6dd22b133e09cc15259a07e9073c17a58dfd6d4e2df02ba123a4ea253","first_seen":"2026-10-10T14:05:22.217584Z","last_seen":"2026-10-17T11:37:15.275486Z","times_seen":4,"resource_available":false,"data":null}},"time_used":855,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":851,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fwill-starlink-mobile-matter-for-apple-4955056","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.849Z","timestamp":1792236995849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fwill-starlink-mobile-matter-for-apple-4955056 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995197\r\nx-signature: 2ae19fee852c496154e409a5e986cfff0d1110baa376128f0a15aa2f9d87ce16\r\nx-nonce: 7b57b73ac9d04e2ba272cabd1e0b4ead\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a80e4a49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60,"size_decoded":456,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"9254f6f2ffecc51ade947bbaf8336ae9","sha1":"245a30075e20d8b6e4ebb8706dee7bcd8425ca11","sha256":"92d483ff8d1e0387c88683f46e1858b06a13d1e7cd55d8d310c1143e2d506278","sha512":"af380e46e0847e989d0744b3a96cce199bc8478be16aab3537ea70ea9d87664ebdb43cf4bd34318cf38968ee326567bd4f32e97f45bffa9731517b744a4bec33","ssdeep":"","tlshash":"08a002b74e87426a1f1e649874596a895249a448d451d5c7c5586648c1d43378045bc4","first_seen":"2026-10-10T14:05:21.927269Z","last_seen":"2026-10-17T11:37:15.276144Z","times_seen":4,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fanthropic-quietly-pitches-its-own-ai-safety-bill-to-lawmakers-politico-reports-4954941","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.853Z","timestamp":1792236995853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fanthropic-quietly-pitches-its-own-ai-safety-bill-to-lawmakers-politico-reports-4954941 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995197\r\nx-signature: 5ae873f8f4f6c4a0af5b62bd8d351475480963d86c9a5b94c3e3d8036d238143\r\nx-nonce: eecc82adff264240afd06584f1a29cdd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a80e5049c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":463,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"6199e8e9b60fea5b3147ea5d8b6bcdf6","sha1":"22deb4b11ab1ba486f730c2d0f7140cb0ad115df","sha256":"db29a70a6801c0e09674ecfced3fb942f93fe31354f016b4e2a7e6b67dad93c8","sha512":"c484879b88faaee49df6b4e96503040eb0d3623312fee35dc2c1008e27576e713b84133e2fcaad5d3c0e7bc85e2179c0f2c0944dd5153305ffc27a65e159d437","ssdeep":"","tlshash":"8da0222b0c83c20b2f0a0080300a32083208cc0cc800ca08c80c0a00c0c0233c000ae0","first_seen":"2026-10-17T11:33:03.441371Z","last_seen":"2026-10-17T11:37:15.276788Z","times_seen":2,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fus-lifts-restrictions-on-new-mexican-flights-from-capitals-airports-4954901","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.863Z","timestamp":1792236995863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fus-lifts-restrictions-on-new-mexican-flights-from-capitals-airports-4954901 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995197\r\nx-signature: 6d6c94135b291f23aa3b8c7fc7d1e9c1d0b739bf7c079f9726c3d45d4d65cf27\r\nx-nonce: 3816ceb55157495cbdb5b5f8a9f1e232\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a81e5d49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":463,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"68d06d4d606d03a0c9b6ad68da612b0a","sha1":"b6cd1e1a54ab92e382a9ae5327e5e96baea7873e","sha256":"e68742429fcd9bf07e70dd9b30fc56ffa8703452b2c72bca7fbe0b5aafc3ad06","sha512":"40c38f2af76eee918a170c9717c27459b72d27fd93dd369d6cf18d2ed43d2385a12d212547561eb4d38f00a083cf47229aba4ab441b81129c782446c2be06e74","ssdeep":"","tlshash":"95a022230c03c20baf0a0080300a320830288c0cc802ce00c80c0200c0c823380002e0","first_seen":"2026-10-17T11:33:03.342474Z","last_seen":"2026-10-17T11:37:15.277778Z","times_seen":2,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Ftesla-unveils-new-roadster-with-flight-capabilities-set-for-production-in-2028-4952962","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.865Z","timestamp":1792236995865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Ftesla-unveils-new-roadster-with-flight-capabilities-set-for-production-in-2028-4952962 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995198\r\nx-signature: 48fc3b4baeb49eadb0a7305a3ac6a592099546d06f8b495c8a5e88f9e88258a8\r\nx-nonce: 50ff8482d4914595a173b5a2e84dafbe\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a82e6249c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":462,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"05baf67b79c2a6f35e0d50b38099663d","sha1":"232ea3bea901f163cecded9af5afeb5beebe9788","sha256":"96d852ec3061102c6fb266c3ae2359cae8912814f9c27f7874e26077a94cdebb","sha512":"5f4bdf3270cf436cff0a6c73aa1b52c4b84be59e459370a0eff69a7a31a703f6fe340e74674517d2d8c7a745577c845d199fd277a6d25adc125e1d5cf9e6c2a4","ssdeep":"","tlshash":"b9a02233cb830a0f0f0b0c8830002008000288888000e080c220830880c02338000288","first_seen":"2026-10-17T11:33:03.318785Z","last_seen":"2026-10-17T11:37:15.27873Z","times_seen":2,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/fonts/element-icons.ff18efd1.woff","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hrcke.com/main.html?","date":"2026-10-17T11:36:21.555Z","timestamp":1792236981555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/fonts/element-icons.ff18efd1.woff HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/static/css/chunk-vendors.1790755125431.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:21 GMT\r\nserver-timing: cfExtPri\r\nvary: Accept-Encoding\r\ncontent-type: binary/octet-stream\r\npriority: u=3,i=?0\r\ncf-ray: a4bf014ebfa649c5-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 273\r\nserver: cloudflare\r\netag: \"535877f50039c0cb49a6196a5b7517cd\"\r\nlast-modified: Wed, 30 Sep 2026 08:01:45 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28200,"size_decoded":28600,"mime_type":"binary/octet-stream","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-10-17T14:21:05.793617Z","times_seen":30522,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieMessage/getDocumentIcon","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:22.681Z","timestamp":1792236982681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieMessage/getDocumentIcon HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:22 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-type: image/jpeg\r\npriority: u=6,i=?0\r\ncf-ray: a4bf0155bafa49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/757647a95a604b8695468a54aa9cf1a5.jpg\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23489\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23489,"size_decoded":23941,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 900x900, components 3","md5":"a5987dbce66024d91986ead64d2bff06","sha1":"e6997ed44137afa6ffd1407083428d468ad93137","sha256":"867eebb2070d7067da55b630fe99c83ab784fe2b7d867de3852c084ad7261052","sha512":"00f537e3d2227e2c4c7d8e69fb0fac48c9c1f24b5a3183a324276d2f2d9aaf635940aa95bc1cfb20ebfdb2cf41daabc6f04a77356ffb889bfefc2614b9417ad2","ssdeep":"384:UNPPsO+ZfeXub44+6R+s++34ATTRQqIvRel/DQP2jKpD:CeZWupR+4xTTiDvRgceW","tlshash":"4eb29f8f6b4dff04c801b334c9d31968b31b8c3535a265a57692a4709f5237bbc9ea72","first_seen":"2026-09-17T08:23:53.114661Z","last_seen":"2026-10-17T11:37:15.259245Z","times_seen":3,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/tencent.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.548Z","timestamp":1792236994548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /tencent.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:34 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: zstd\r\netag: \"b6b6212c794786a6191c8eaa62ddbef3\"\r\nlast-modified: Wed, 08 Sep 2021 08:54:10 GMT\r\nx-amz-id-2: LIvs07xPsiy9vSS144KFDt3F2LBk+dJTsBbhclf7T5//ZlkTAalgHpyk1ehmPhpt3e1Xovq7ZG0=\r\nx-amz-request-id: T25A4KK67BSFG858\r\nx-amz-meta-hash: b6b6212c794786a6191c8eaa62ddbef3\r\nx-amz-version-id: null\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1346, 830\r\ncdn-cachedat: 09/30/2026 05:04:18\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 4fca2de4ba03420a9e54a48ad4df2f01\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":1092,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with no line terminators","md5":"b6b6212c794786a6191c8eaa62ddbef3","sha1":"0eee8c5d6ea6b2447dc1eb96d633f22bbe3dddda","sha256":"3f5b31e046f2fa0d3aaa656feeab6a4adfef2c31bef3216d8df9b91a5a6d6a08","sha512":"5ca7d0bf4b5eaf333f4994ed5a630d91f5c30dc7ba14e44b91b25dd15143a3e2ba35815fdb9930b197412d08b813e8b308d1f55f47ab41ddcf68abc469135abc","ssdeep":"","tlshash":"b5d097e8b339a01e1004c2fa13b8206b202730da954a8ac9f180251866043cf180890c","first_seen":"2026-04-25T12:05:50.065867Z","last_seen":"2026-10-17T11:37:15.279722Z","times_seen":5,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":30,"connect":1,"send":0,"wait":2,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fproofpoint-taps-jpmorgan-ubs-for-125-billion-debt-deal--bloomberg-93CH-4954872","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.886Z","timestamp":1792236995886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fproofpoint-taps-jpmorgan-ubs-for-125-billion-debt-deal--bloomberg-93CH-4954872 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995198\r\nx-signature: 8426c3a8c6b84afe78a8cb46f1b84432fab0bd44bbbe4e9a8f768d23af6cbb4f\r\nx-nonce: c6b976aee8164702a9ac899d67a0ec0f\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a84e7749c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60,"size_decoded":456,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"fc969ad251a17f1be356712a478f0368","sha1":"c9a6646881c81ed765312b38e0cdfc060a528fad","sha256":"ba57d79b6ff86f062ad4de864da3ba6218c47b368d7bf6b66b333df92641642e","sha512":"24a384cd3cc92a9d30f73d26d81d2af2ca4f73d893ba9b83afce435e9cf4ba3afba02b40716c5059ddaa8dbcb9837e7da814efc3f6254063d6a1f2509347256e","ssdeep":"","tlshash":"48a002675ec743592f097494655966889149e448c585d585d514565881d423780856c4","first_seen":"2026-10-17T11:33:03.355616Z","last_seen":"2026-10-17T11:37:15.280353Z","times_seen":2,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fsound-inpatient-nears-1-billion-refinancing-with-existing-lenders--bloomberg-93CH-4954841","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.891Z","timestamp":1792236995891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fsound-inpatient-nears-1-billion-refinancing-with-existing-lenders--bloomberg-93CH-4954841 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995199\r\nx-signature: 255b46c9ead6c422e2b3f64fac1554c396bddb60f6540da35463cf3924f12a29\r\nx-nonce: 08dfdf9061724499b9f465f7ac8ff695\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a84e7c49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60,"size_decoded":456,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"6c0a79d4faa144541ce0f7ae0ae1c520","sha1":"f3db0e29f1a3155e3e6bc15141b9b5f9b645db19","sha256":"caee2841204943cf700251630f89b0a316ea9aa3b41645424a1f61eaf53c0d4e","sha512":"7ed71b97723bd6ced93c7199f9793d2670b031aff6a2249cc83532d6254f157a24872591583c90e340650f2ef3f3ee336fbe2c78988ce311acf5af0193511849","ssdeep":"","tlshash":"20a002774e8382990b094a94304565995159a848c989e585ea165a4da1d4227404dbc0","first_seen":"2026-10-14T19:48:13.843527Z","last_seen":"2026-10-17T11:37:15.28129Z","times_seen":4,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fus-stocks-lower-at-close-of-trade-dow-jones-industrial-average-down-034-4954815","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.894Z","timestamp":1792236995894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fus-stocks-lower-at-close-of-trade-dow-jones-industrial-average-down-034-4954815 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995199\r\nx-signature: 8d6b70dfdd2c4f4bdc06febedfc88d09d90b20ed3fb49351316b78c6c61df1d8\r\nx-nonce: 46443d4a8b3e4f179453b8a36f9ed459\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a85e8149c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":461,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"beab2e10f8084af970dcd50bd3a2e8fb","sha1":"604052bf009204a58706ab4f79bfa4e2506dc011","sha256":"af46f65af4b484ebd906e1ec69a2efa0e45007662e3f47d64512ba5ed1dd976d","sha512":"45b918994d5134323992ad48ad1bcdf2afa0572509d8ceab5c768258ee7c43a284ebc7d04ff68571012c943ef939bf979f8e5d744a5902708ecf3fc2e949726a","ssdeep":"","tlshash":"a8a022238e8303080f0c00c02238a00c300cf88ce800cac2c800820882cc3338000ac8","first_seen":"2026-10-17T11:33:03.415411Z","last_seen":"2026-10-17T11:37:15.281942Z","times_seen":2,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Feconomy-news%2Ffeds-warsh-says-ai-boom-could-boost-growth-but-warns-of-bumpy-transition-4953102","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.928Z","timestamp":1792236995928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Feconomy-news%2Ffeds-warsh-says-ai-boom-could-boost-growth-but-warns-of-bumpy-transition-4953102 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995201\r\nx-signature: 7ab97fdfbf6e65d8bf599d61438fa9090cfc116a48aa247ee9bb51fdd2c57fdb\r\nx-nonce: 7727a6a491ec4ffbb8efff197320394d\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a88eb149c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":467,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"ae8488893ab1545d7d076d6afdea3dbc","sha1":"64503d54c60e949ec336b40b0123d48a30a191c0","sha256":"48470c93df5d3e85347ba9939705042f99655e5b322570e9d7869ad52d4f8a45","sha512":"78d7b4ee0e11160f36742416df4deb93e82f1d292993a3debec818955b3ae4cf4df676cb77c2d8cb6480046b26c823f22ecd8f7786a02024e2af2224b2992c19","ssdeep":"","tlshash":"71a022b3cf838b8c0f0e08c03032220cb0088888e0a0f2c0cb00830883c023380002cc","first_seen":"2026-10-17T11:33:03.344994Z","last_seen":"2026-10-17T11:37:15.282842Z","times_seen":2,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/goldForeign/getSumNumber?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.073Z","timestamp":1792236984073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"POST /exchange/goldForeign/getSumNumber?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nport: 2\r\nlanguage: zh\r\nTimeZone: UTC\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236983939\r\nx-signature: 7a5b7b7431685a7b79aae4b4bc6e032a0edddfc70d53c407bdba8bcc3ec84612\r\nx-nonce: fb7997e31e344429880fb952c2e81dd8\r\nContent-Length: 106\r\nOrigin: https://hrcke.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":106,"data":"{\"limit\":5,\"symbol\":\"USD_HKD\",\"resolution\":\"1\",\"to\":1792237560000,\"from\":1789644960000,\"timespan\":\"month\"}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf015e6ff149c5-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://hrcke.com\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3505,"size_decoded":1126,"mime_type":"application/json","magic":"JSON text data","md5":"179c86794260a3f4b35dd6219b01e8ed","sha1":"4a98ade03b7c78f6910cdfb3723edbefac1b00a0","sha256":"b8f2a16fe849b9d9359ac9dd7e1e228bc90a5a0467aa87ce0881452e2232daf7","sha512":"8eb6a746329dd337a96393f3ebbb6d5f7abc8a7bc1b8aebe982b53e758dd0823c69d00de14c5f864247d9916b63c9ed8d4e03aaa42961cc89870d714db4bf457","ssdeep":"","tlshash":"9c711638aee51c6db47fbc58c6b5c2dae7ca754f02e7b77b0acb4c6411e500909b8126","first_seen":"2026-10-17T11:37:15.283743Z","last_seen":"2026-10-17T11:37:15.283743Z","times_seen":1,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/24897.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.676Z","timestamp":1792236984676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/js/24897.1790755125431.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:01:56 GMT\r\ncf-ray: a4bf01623a0849c5-OSL\r\ncf-cache-status: HIT\r\nage: 276\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"2bee39725c8b18c518b49fcad709c1c0\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21867,"size_decoded":5314,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21752), with no line terminators","md5":"2bee39725c8b18c518b49fcad709c1c0","sha1":"836d765de31b34fc2e7c0ad2fa41f6683821dc81","sha256":"1d4ff641bbe07de2037b7b1a2e77a198e1e6714bca391514edfe45bb4f7db7ef","sha512":"d27310860c0ea046cd46d3bbee7737843a645570040e84c5623ba03cbbcef8a53784a21bfd55c1e1acdeed8b8da290d7dca606f41c09e9277ff6a01c5816b04a","ssdeep":"192:L8YQVrhnpDIh8NQVdchvI6oJPyiBEJhELP7eEKN4oBoQFtFJwTmWXrxB7vN48T41:Ee5hJPyePaBKgPW7KZ8WZ","tlshash":"cda2d61ae087a06d4d6ba1d4601f1015a0b90f99190dc969fbf8dce49df8d5c2b2fbbc","first_seen":"2026-10-10T14:05:22.160671Z","last_seen":"2026-10-17T11:37:15.285698Z","times_seen":4,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/anta-sports.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.544Z","timestamp":1792236994544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /anta-sports.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:34 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: zstd\r\netag: \"0406daba4988ebaaa5b5d877defeaacb\"\r\nlast-modified: Wed, 26 Aug 2026 10:08:39 GMT\r\nx-amz-id-2: eukeNekS/YDZJvQ8MNrg8M2z34945bd6ABms2ecOyVSRSif/pfF8imwcr05hTbQh5bK6i4+FOGEfntVrpQqswYiVcwWaUGBn\r\nx-amz-request-id: 0C8RX54Q0T4B2RHX\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-hash: 0406daba4988ebaaa5b5d877defeaacb\r\nx-amz-version-id: dFEIv_SrvBOdXN4I3d8f8cLFc1zHeywu\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1233, 830\r\ncdn-cachedat: 09/30/2026 07:16:33\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 95d3b404484771ce60682a235b448dea\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":329,"size_decoded":1240,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (329), with no line terminators","md5":"0406daba4988ebaaa5b5d877defeaacb","sha1":"4e7751582f6bf3ae902a223e9a445875c00ef044","sha256":"d2d565d4832d2a1ddb21b56507f2e339160d7b986a78956816b6c171d294d5d6","sha512":"230c2dff327837d04e86e66532576c8ac1cce559d6c7ef3879331be01188aba848f5ee6651fd7d7f3ab376ba1ecbf0d51696a8f26e67698ba460b04b8ba29cbe","ssdeep":"","tlshash":"90e078ac655c555c5e104bd4db945151504b10d372da07e5f0e07d0074847df5890d55","first_seen":"2026-10-10T14:05:21.821206Z","last_seen":"2026-10-17T11:37:15.28655Z","times_seen":4,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":34,"connect":2,"send":0,"wait":2,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fexplainercould-hackers-get-inside-my-fridge-4955339","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.812Z","timestamp":1792236995812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fexplainercould-hackers-get-inside-my-fridge-4955339 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995196\r\nx-signature: 5e24b5e13d01b34407a35477af83dbcf95dacd1cedd322ba8c7a5136f39aa5b1\r\nx-nonce: f65603d22bf7446a93ec63e073b5f6cd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a7de3349c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":463,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"210f0ca29b45235f19caeffa08cffaa5","sha1":"993174cea2288cdf0db547fa5045eb4549fa7776","sha256":"084a9f274f0de693231c040008acf0071b6d5cd83406841f8dc4971e0d2ee8ec","sha512":"6fddf03febebe1667076b9dfc53170713da93c71216ecb0cf3b4353cbbcb84bfe08520986fdd07a341227da03daabbdfcf221986d0f37c0fa64ad0635b301fd9","ssdeep":"","tlshash":"66a022a30c83c20b2f0a0080300a300830808808cc80ea00c808a280c0c023380803e0","first_seen":"2026-10-17T11:33:03.449056Z","last_seen":"2026-10-17T11:37:15.287188Z","times_seen":2,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fjios-32-billion-ipo-tests-investor-appetite-as-ambani-legacy-faces-scrutiny-4955160","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.828Z","timestamp":1792236995828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fjios-32-billion-ipo-tests-investor-appetite-as-ambani-legacy-faces-scrutiny-4955160 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995197\r\nx-signature: e5ae988238f90d3fe9c802be81c96ddb98376a9fdeb042d5819cf6eabc20b188\r\nx-nonce: 69480cf4c1ea4d018aa9afbb8fde9dc1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a7fe3d49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60,"size_decoded":456,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"2ec2e77b4797d8c55942bf536826ea2a","sha1":"c15fcb74fa1656e99a5d16fe9e216cf333fd9827","sha256":"b0f10ffb10fd77902ced74be582c3a3f7629b614a64cdfd23038357749cad921","sha512":"6efd4ac41670e5171ea1dc99793358f69f43ecfe489c1ef1b18ff5d9718e86d49a0fdcc19472435ba3cdacb0ee5202bf5cf6dd140f88ffee1bbc6792461b9663","ssdeep":"","tlshash":"f2a002674f8742590f0d5484605565885149a448c941d595c5589688a5c823790466c4","first_seen":"2026-10-17T11:33:03.350444Z","last_seen":"2026-10-17T11:37:15.289295Z","times_seen":2,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fas-ai-rally-wobbles-stock-markets-spotlight-turns-to-earnings-4953575","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.883Z","timestamp":1792236995883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fas-ai-rally-wobbles-stock-markets-spotlight-turns-to-earnings-4953575 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995198\r\nx-signature: bc6368bcbd6bf9996546f1a5089293cd87d64a433c2ef643e9b17a497f165d38\r\nx-nonce: c3566f9e052744338bf30df3bf156818\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a83e7449c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":463,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"3ce3f81466edd1567761a7525f126c53","sha1":"8824a926af20c2bf100b222baa468409d86407dc","sha256":"b2bb6dcb7b45819bbf3c999513cd5e1d0bb451026a81ee2c0c48bc038ee9419c","sha512":"07dd32d2012a8c8dec92d7832279427eb79e08e96dc5dd44180484eef88cd9406490d45ed356c559709a7d315afe21bb663cbcc729d708a7ba547a0a766f3755","ssdeep":"","tlshash":"00a022230c0be20b2f0a0088300a320830808888c800ca00c8080200c0c0233c0002a0","first_seen":"2026-10-17T11:33:03.384211Z","last_seen":"2026-10-17T11:37:15.291465Z","times_seen":2,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fwhy-is-rock-tech-lithium-stock-climbing-today-93CH-4954804","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.902Z","timestamp":1792236995902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fwhy-is-rock-tech-lithium-stock-climbing-today-93CH-4954804 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995199\r\nx-signature: 7513f688ff06f85d67ced00cb1b61fee4e6d011dd1d4c7cd4522be08f3d7e370\r\nx-nonce: 86e1c5c11c0c4444b72c1c8db505c009\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a85e9049c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60,"size_decoded":456,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"f0a37b43cad153a77d4f31cd2ae8cf33","sha1":"3c847ae1aa2d33c2b6ac2c2444f74a0de7b52057","sha256":"c93bd624266a6fbd9552a5cfdeb054b131f2ca8950b3f845471cc8fc8f6ac28c","sha512":"a4bded35dffd31df55198f3639f73969119c88bd2541dbdeffaf69182c0f36cae85de4ae84eaeb4ad13e91ed824fb60f5ee5e388b3af4131f4eaa6a58c02d93d","ssdeep":"","tlshash":"66a002a78e93465d0f0964847459654c554da44cc481d5e9d516964881c827780467c4","first_seen":"2026-10-17T11:33:03.270482Z","last_seen":"2026-10-17T11:37:15.292649Z","times_seen":2,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/fonts/iconfont.ee704908.woff","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hrcke.com/main.html?","date":"2026-10-17T11:36:21.411Z","timestamp":1792236981411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/fonts/iconfont.ee704908.woff HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/static/css/app.1790755125431.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:21 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 68696\r\nserver: cloudflare\r\ncf-ray: a4bf014e296976ef-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 275\r\nlast-modified: Wed, 30 Sep 2026 08:01:46 GMT\r\netag: \"6a23e734cb2441057f1068f167ae6781\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68696,"size_decoded":69048,"mime_type":"binary/octet-stream","magic":"Web Open Font Format, TrueType, length 68696, version 1.0","md5":"6a23e734cb2441057f1068f167ae6781","sha1":"a4508d99633127520e2aff560b6bdfee20b1869d","sha256":"a1234a42df919401d1f0a7a0b59e3a08f971cdb9c141c45426e9ab8ccdab7e2e","sha512":"0190e5716c2e01d85438e0ef5bd0e3f894848e214574dba60029a7339f1ec0c66f4b7490aaabdbd4c3f0dfe07ea42c1de57ef5de08372ebda44c811135383f90","ssdeep":"1536:l4KsvVovRZ/ZcTCMNxQ5qmsE13GukaGwx7ls/g+fqOyZe5:l4VyvRZ/ZcTLQUmZ12uTfsLik5","tlshash":"78630205eac81b6693ef82b90dda73a8df124ac7728b172343a9d35b0bc56cc1b8541d","first_seen":"2026-09-17T08:23:53.101011Z","last_seen":"2026-10-17T11:37:15.296064Z","times_seen":5,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fmoodys-upgrades-egypt-to-b3-on-fiscal-reforms-keeps-positive-outlook-4954858","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.889Z","timestamp":1792236995889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fmoodys-upgrades-egypt-to-b3-on-fiscal-reforms-keeps-positive-outlook-4954858 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995198\r\nx-signature: bc5048f1d6569e1268a48f989caa356c0e53745f3335a647516940b6ab711386\r\nx-nonce: a2624a2bb9b74ffea6d93fa11d06210b\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a84e7a49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60,"size_decoded":456,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"19f292d7e08890ec93691a7d223979c9","sha1":"61a3aa3d29cd7589a37de0029cfd8bfffe2a6301","sha256":"b49cb6600386b45a1df439e13e7c6d14b97663138620ffd96c49274669d661ac","sha512":"0677472f634a71617be7d4bae8f9b94d47b0acdc7ae5d65adee62733fc1b6120a936420ce114b6eb6bb8f87491a4fae4fa2fe86645aab172dafffbba8a7bbe87","ssdeep":"","tlshash":"81a022230ec302080b088880308020880008a88cca80c080c000230cc0e0a23000a2c0","first_seen":"2026-10-17T11:33:03.347848Z","last_seen":"2026-10-17T11:37:15.296972Z","times_seen":2,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fassorted%2Fnvidia-launches-rtx-spark-laptops-starting-at-2599-432SI-4953961","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.940Z","timestamp":1792236995940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fassorted%2Fnvidia-launches-rtx-spark-laptops-starting-at-2599-432SI-4953961 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995202\r\nx-signature: d60ba3aca54e38cf788e48ecad4d8c37a6afc8aff8153ead21a4f9b573a1e375\r\nx-nonce: 13ca1891516f4650aa651815e938410d\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a89ec349c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":462,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"548221b82ced7a03ee9f878d317f110d","sha1":"2c68e348139d00c0fe47175958ea6daad97ab6c7","sha256":"82273eecbbc8d074881e7373f8c968f1b28947fb354d595a3653245289049b00","sha512":"f8b8ea86314fd1d34298c0a85b59c5f0bc10025101e1fc1eca2ac5136c2334d93ddaa2656dae4b44405b0b48565d3113a1a5f3d7e47beebdd9a1b35f986efebd","ssdeep":"","tlshash":"7fa00277db834b9d0f8a68847495765a924594ac8551e585c790ab4c81c42b780456c8","first_seen":"2026-10-17T11:33:03.310394Z","last_seen":"2026-10-17T11:37:15.300377Z","times_seen":2,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Feconomy-news%2Frussia-says-it-struck-ukrainian-steel-plants-and-power-infrastructure-4955358","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.949Z","timestamp":1792236995949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Feconomy-news%2Frussia-says-it-struck-ukrainian-steel-plants-and-power-infrastructure-4955358 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995202\r\nx-signature: e5fcfe03206ae410d5235fb4fc91d3f61058e427b4b6003e7c12798f8a85851b\r\nx-nonce: fcaa7f4bde6e4cfebb4a64933de4d6b8\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a8aec849c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":462,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"def186d64a11744e78396e6357061b88","sha1":"25b4dddfffacc088d2c07ca965e271b61c148a6f","sha256":"3dd5b3b21965def32743e1cacb64dc52b9063d97ef66d68218cff6f4a042f7c9","sha512":"b5d881beaf79f18f7cbd59d928031f03160ee981f403d6e75979ef64e52dac91a696920de3f017fbca17301248560d7709a3fe8ebfa7ff20c917264f60bd8242","ssdeep":"","tlshash":"16a02233cb830e0c0f0b8a803000280802c880c8c000e080c3008b08c0c82338008a88","first_seen":"2026-10-17T11:33:03.452339Z","last_seen":"2026-10-17T11:37:15.301884Z","times_seen":2,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fforex-news%2Fwhats-the-likelihood-of-yen-carry-trade-reversing-4955329","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.951Z","timestamp":1792236995951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fforex-news%2Fwhats-the-likelihood-of-yen-carry-trade-reversing-4955329 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995202\r\nx-signature: 32c9725019e542f47f00645bd01a4efb720a3b8a89899d4e596503b5691e1e21\r\nx-nonce: 5e54103643d64286bb93aaf44f1366b9\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a8aecb49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60,"size_decoded":456,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"3041cd095635eabaec15e243b7624de5","sha1":"7ed892d98dfb2aec585d7061c206604208293053","sha256":"95cf0dd89dc8210eaf1e1879bbc2aaf84fadc6351d3835368a6668a61250e3f0","sha512":"70249b61d02c1cc495f595abaac326c72d3b4a730a73da4fb631619e9f945ad772372d74b1535822fd058e9745acd3c413a94b1b8d5a4c29b0a96d1e2425340e","ssdeep":"","tlshash":"89a002674e8343590b4945d4304565485149a85cd989db85da56568c82c822741497c0","first_seen":"2026-10-17T11:33:03.281484Z","last_seen":"2026-10-17T11:37:15.303342Z","times_seen":2,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fgeneral-news%2Fecbs-lagarde-urges-fiscal-discipline-as-inflation-risks-rise-4955280","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.956Z","timestamp":1792236995956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fgeneral-news%2Fecbs-lagarde-urges-fiscal-discipline-as-inflation-risks-rise-4955280 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995202\r\nx-signature: 789acd81dc957cd20ad274350a766978fcab05a2c721cee5bdcdfcd7b782911d\r\nx-nonce: 7ff6efb18dd34c3da5d56cbbae575459\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a8bece49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":467,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"e0c6da64ff76050141187fa966323dda","sha1":"10f6eedb3485f00237139662d7448f8c83ae424a","sha256":"4da66f5827aa64b7acdb41bfcca151c017d08445c20159df089edaf2379a1c20","sha512":"3d72393dcf3cb5fddbf24ed661b87ce2f5d648cb69b902f85cfb2abac6e9d2b271c37a6ad7ad21c9578769d6c4cf0ccd9b540d648ac29c75c8d50216e5807ab4","ssdeep":"","tlshash":"caa022b3cf830b0c0f0e88c830b0200822088088f020f3a0ca20830883c0233800028c","first_seen":"2026-09-13T12:35:58.7359Z","last_seen":"2026-10-17T11:37:15.304683Z","times_seen":3,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/app.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:21.808Z","timestamp":1792236981808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/js/app.1790755125431.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:21 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:02:03 GMT\r\ncf-ray: a4bf0150485e49c5-OSL\r\ncf-cache-status: HIT\r\nage: 277\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"9cad8e753e4dfc9cef01fc3423c4f354\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2784926,"size_decoded":1386119,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"520bf13e83d5a11cbcb648cd7c0bbd4e","sha1":"0f264a9bb860b986da433d174e4464d6ea3211a9","sha256":"87aaccccc9e0fc062f5202f2e814ccf5af1f3d4d5f4e4a1c314e83b35641ecc3","sha512":"cf96623f6704c245094784514a8b54ada7338609adbef8460a6a0d0aab54d8b6d7bc5c1a6759c915bb1397b16f3877c21e4a293c9e7905454e34d416c70d01a9","ssdeep":"6144:v9v7HFLKezzdXOApF+7OOez1yXy0UnRZNumv8MkGNTqyotUDtuU1TF6WGh9LA5x:d7luAzMAD1yXy0QRIMFNukDtuA6ba","tlshash":"bb256ef1e32852fc9d0e87e9e92a58683a2f20fb79d1ccb8426cded095425d9cd45cc9","first_seen":"2026-10-10T14:05:21.964387Z","last_seen":"2026-10-17T11:37:15.261539Z","times_seen":6,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/32729.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:23.931Z","timestamp":1792236983931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/js/32729.1790755125431.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:23 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:01:57 GMT\r\ncf-ray: a4bf015d8f2249c5-OSL\r\ncf-cache-status: HIT\r\nage: 277\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"f381f7e7ca3c18703f6f8213740ee208\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3616,"size_decoded":1402,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3616), with no line terminators","md5":"f381f7e7ca3c18703f6f8213740ee208","sha1":"c3339ec40cfbb1cfb9e3e56da2a805c608c9e094","sha256":"8b2a561b03ac3321b42fd0e71753e776cd7238efe1e44914112f8147da078f68","sha512":"074cac56f4ab49105c4b6573712d3c8e60a46ce37204ea66675ffb09e79a3bf7310cdd19c892d017afddf21196d690cec28ae47638c564ce14e987b48b52186e","ssdeep":"","tlshash":"09713192828b0afb05051ed8b70a7fc3cdc916b4e06e7a2524b4dcf16973eb8634593c","first_seen":"2026-10-10T14:05:22.132818Z","last_seen":"2026-10-17T11:37:15.305574Z","times_seen":6,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/Home/wgDashboard?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.590Z","timestamp":1792236984590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/Home/wgDashboard?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nport: 2\r\nlanguage: zh\r\nTimeZone: UTC\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236984464\r\nx-signature: 1a6817c8930a8517af81c7fcaf940bfca0824c9e4a8441c6d23c8ae23920759f\r\nx-nonce: a3c1519356664fbf96409e4a442757cb\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf0161a9be49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":414,"size_decoded":687,"mime_type":"application/json","magic":"JSON text data","md5":"92060df2d12bde8b14d8887e940b8042","sha1":"947d12089bb8201bf2f8af356ac01ef96add77d2","sha256":"1ddbb32a768e443a1192d271e290d311f840ea780bbcd4d612002f9db6203367","sha512":"a1b96b8cffd44117ce903d766dfd31af20f5f8ae3523de5edad0f3afdcec45113313b07301c275e4f2190938f8b425f503c89064dcf4650f10b219a574973d1a","ssdeep":"","tlshash":"3be0ab80e108de98af453a6a3ebc657401793b6348a8508e04cc1d5c1c888a36002b2f","first_seen":"2026-10-17T11:33:03.458396Z","last_seen":"2026-10-17T11:37:15.306448Z","times_seen":2,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994646\u0026x-nonce=39e9e9feffc344a995d71b53ab8f0de1\u0026x-signature=388b28e5478cf528971f1701a846b2c2bf9ca37d78dfb37d007425268eb6ba70\u0026fileId=9005154","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.843Z","timestamp":1792236994843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994646\u0026x-nonce=39e9e9feffc344a995d71b53ab8f0de1\u0026x-signature=388b28e5478cf528971f1701a846b2c2bf9ca37d78dfb37d007425268eb6ba70\u0026fileId=9005154 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 2950\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1bf5b8be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/d8ceb48df0b9425aaaa341bdefb811c3.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2950,"size_decoded":3375,"mime_type":"image/png","magic":"PNG image data, 99 x 31, 8-bit/color RGBA, non-interlaced","md5":"776723305566685fec2aa655a9120602","sha1":"b710e079f76272679bfa47c1f0edb25ffa66c0bd","sha256":"5cf4b834bc3ac970113b5b9da208c4f6db8750bb608c7932136face52c345167","sha512":"c56c1e4e6a03abbc506752d453428efaccf3e6c3abf422bc91b83b6b540507cf7be7b58a15f99945fe1713a47baf6109ba06944f2ab13790e548c6d55b2a3dc2","ssdeep":"","tlshash":"43514adb40e6dddacae10e5120938f9fb12b78f35cc30407efa135afa5967209916c68","first_seen":"2026-10-10T14:05:21.962705Z","last_seen":"2026-10-17T11:37:15.307814Z","times_seen":4,"resource_available":false,"data":null}},"time_used":729,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":729,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fanthropic-signs-lease-for-first-canadian-data-center-4954967","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.856Z","timestamp":1792236995856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fanthropic-signs-lease-for-first-canadian-data-center-4954967 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995197\r\nx-signature: a0a9c5203bcd3fd5663fccd385a84cdcd0c94b92412b106ea70010898e62e80f\r\nx-nonce: 0d1ba381cc3c49a3ad55188d59d59af9\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a81e5249c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":463,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"97504557a1351df16b9c183ef216b518","sha1":"40625852846cc4e53eb13f7d8aae181c8366112f","sha256":"b58aa54fab37752eaba70b61bc3e494c8388484e3bf3aaaa74720e8c8d3e4b3e","sha512":"7de8d7c880d17e6b7341a173ba9391d86301cca3aea01817617a1ec1d549c27ac5d3a8420e2798cf4bfe249001979c744b225ecc2c452de83d71f5e9729e3fa0","ssdeep":"","tlshash":"dba022230c03c20f3f0a8080300a32083008880cc800ea00c8080200c0c82338000ae0","first_seen":"2026-10-17T11:33:03.369273Z","last_seen":"2026-10-17T11:37:15.308652Z","times_seen":2,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Feconomy-news%2Fwhat-would-superintelligence-look-and-feel-like-4955224","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.931Z","timestamp":1792236995931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Feconomy-news%2Fwhat-would-superintelligence-look-and-feel-like-4955224 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995201\r\nx-signature: 7adba2421b0f1ac096ae293a9deeec68e1b00bbad6bb6227a7657f605b6aa590\r\nx-nonce: cc36996f5e6b4c6eb8c2975569803e54\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a88eb749c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":467,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"bb72e40f7623ede6f1f10508c88ab3ad","sha1":"5bb68faf600fe147a3a58e89d10cc59f0c245ed7","sha256":"6c5b7a54f0ede0ac72de98755ede957907f77bc953860f22ab40052ee3e26aad","sha512":"df4742025605d349d97520eca8a00d00621d14e2ef437e7a080d5073fe5b021ecd5f3dd7a6ff088c381502db4f18a90f376721f1393087fa81db3ce00aadaa90","ssdeep":"","tlshash":"39a022b3cf830b8c0f0e08c030302008220a88c8e220e2a0ca80a30882c03b3802038c","first_seen":"2026-10-10T14:05:21.86098Z","last_seen":"2026-10-17T11:37:15.241866Z","times_seen":4,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Feconomy-news%2Fukus-relations-strained-as-trump-shifts-stance-on-russiaukraine-war-4955294","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.933Z","timestamp":1792236995933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Feconomy-news%2Fukus-relations-strained-as-trump-shifts-stance-on-russiaukraine-war-4955294 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995201\r\nx-signature: 1a38b1e91c80a15f4d744fa0e652d388202b4b08c437f3938e2cb168b3771dda\r\nx-nonce: b719be74f2b04580a0e5073e2e71de9a\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a88eb849c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":467,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"e0aabb970637bd5e1527172b6dbfadfc","sha1":"89aef37699829ec14cc34e372a3ad21f5b35d9b7","sha256":"fb0c55379528ca4b386060a324079df2c566c5f1ecdaa03bee3c66828385c3e2","sha512":"8d7b4fc1c9e3f727ac09589c19fc32cda8f5f2f98a5814804b54c530ee7f1ec3065b24c52ea1dc10a6b10d09a2ec661363f891fcee40f53947f6161964471eaf","ssdeep":"","tlshash":"43a02233cfc30b8c0f0e08c0323020083a0a88c8f020e380ca00c30882c0233c002a8c","first_seen":"2026-10-17T11:33:03.245274Z","last_seen":"2026-10-17T11:37:15.309918Z","times_seen":2,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/assets/chunk-vendors-siqc5on6.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/","date":"2026-10-17T11:36:17.560Z","timestamp":1792236977560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /assets/chunk-vendors-siqc5on6.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:17 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 26 Aug 2026 06:44:23 GMT\r\ncf-ray: a4bf0135bb290b41-OSL\r\ncf-cache-status: HIT\r\nage: 274\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"668fe9c34f4ee792f06aacef6e4b6613\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48522,"size_decoded":32990,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (45572)","md5":"668fe9c34f4ee792f06aacef6e4b6613","sha1":"f3114aa5645403353609838fbdfb018dd67b8af9","sha256":"b2515357ecc929b93d2b26be625edf4bdae111bcce178736798544fb348bf33b","sha512":"c69d02f6c33e2b797925957330ce0ed55a4b913777987e4c4160118c3a30861d291e6c9a8419c2736d5839d477c66154081fbb289242b19ec10ad5eb0403a709","ssdeep":"768:E2PuMXL/MQFUUxvqSjSFsLqLt0TqdnlfzA5vfjunSQQ3J8MRIXEX+67Y:ksTMAU0rLqBlf2fjAkyGGgJ7Y","tlshash":"ee23d09a887ed5168e1132869b5b51032a61e607709cc630fe4e1765df0dd0aefb6fc8","first_seen":"2026-03-20T15:34:08.487202Z","last_seen":"2026-10-17T11:37:15.223275Z","times_seen":8,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://hrcke.com/exchange/ws?x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236984063\u0026x-nonce=c4a90d34f34a4700b76477d1f7ba6323\u0026x-signature=d30fe1e8d172ad915e377e8139ac72212c4d2fa29e53592b31b21d109c22725e","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.069Z","timestamp":1792236984069,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/ws?x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236984063\u0026x-nonce=c4a90d34f34a4700b76477d1f7ba6323\u0026x-signature=d30fe1e8d172ad915e377e8139ac72212c4d2fa29e53592b31b21d109c22725e HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://hrcke.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: lb5tP2zKCRNfLw8KZhSVmQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 17 Oct 2026 11:36:24 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: yu72uxLBnIGddldI1xUb6Z/9oWk=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nPragma: no-cache\r\nCF-Ray: a4bf015e8fe91525-OSL\r\nCF-Cache-Status: DYNAMIC\r\nAccess-Control-Allow-Origin: https://hrcke.com\r\nAccess-Control-Allow-Credentials: true\r\nX-XSS-Protection: 1; mode=block\r\nServer: cloudflare\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":534,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-17T17:55:32.063546Z","times_seen":19168837,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":286,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/hashMap/getValue?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.153Z","timestamp":1792236984153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"POST /exchange/hashMap/getValue?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nport: 2\r\nlanguage: zh\r\nTimeZone: UTC\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236984129\r\nx-signature: 4df26cb78e0cdbac5c01c90a6c1e18e1fe7d6df054d266a49a5744d85cfd625e\r\nx-nonce: b5e976c6582947169098b923dfac7c23\r\nContent-Length: 20\r\nOrigin: https://hrcke.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":20,"data":"{\"key\":\"jumpLogin2\"}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf015ef83f49c5-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://hrcke.com\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68,"size_decoded":552,"mime_type":"application/json","magic":"JSON text data","md5":"978ac2f43478e09aa86daa9fbcd760fb","sha1":"948e595f4f76754f7227bd270bf764070ab31652","sha256":"5c489507a26090780be55a4e7e0bee39955367a03b944977a9a73aae6a637ac1","sha512":"b9287ba1b7e06c9d504a7b7fe80b06f317a2d7941a5da3a5c869d91c916e24d5560b2c2b012c99739b0727e60f50f7d1cb974002259f9dcaf34dafaf50cdecf8","ssdeep":"","tlshash":"f4a022c030300e300f830a00380c3800002c208308c0a88c0c8cab0838c0c33c003f30","first_seen":"2026-09-17T08:23:53.118695Z","last_seen":"2026-10-17T11:37:15.311381Z","times_seen":5,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994645\u0026x-nonce=5feb06d9546a4c9a8cd80c7c76074a31\u0026x-signature=85bfa88891a1aa4d6839e90f8efd285b353ddd9405d02d7bd8750c7f3349d671\u0026fileId=9005103","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.834Z","timestamp":1792236994834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994645\u0026x-nonce=5feb06d9546a4c9a8cd80c7c76074a31\u0026x-signature=85bfa88891a1aa4d6839e90f8efd285b353ddd9405d02d7bd8750c7f3349d671\u0026fileId=9005103 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 2480\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1bf3f8be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/e1095d2c14504eceb0d4c2ca8395435c.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2480,"size_decoded":2905,"mime_type":"image/png","magic":"PNG image data, 93 x 29, 8-bit/color RGBA, non-interlaced","md5":"d0a48ea1b54333cf7ea1f56c1b558ad5","sha1":"4f88190f25053729c2dc757bb5cd3ce82aa60fe6","sha256":"1c0d3e0db4580bf45b7189c4e76ccbbd70239cb48624ae30431089be6bc4609d","sha512":"e9ea6e0ebcd36414e5e166c5bf4c3155df60496ced9454cd3eb7cc1114400a3416103c4b838404608262e1877fe94149df91b470b63b8104ee3d4da0debc7532","ssdeep":"","tlshash":"d6515aef26b014d222dd6e82095a2308336c6cd3688dc023d4e3e2ab0a013f054387d2","first_seen":"2026-10-10T14:05:22.000572Z","last_seen":"2026-10-17T11:37:15.312175Z","times_seen":4,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":759,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fcompany-news%2Farrested-openai-engineer-seeks-bail-denies-plans-to-flee-us-4955246","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.961Z","timestamp":1792236995961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fcompany-news%2Farrested-openai-engineer-seeks-bail-denies-plans-to-flee-us-4955246 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995203\r\nx-signature: dbdb57920152011e194f54b366c64130161fa56867ca14857765a5b09f8257ca\r\nx-nonce: bdea0a6ddf4e4540aa11b9bddbacc1f6\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a8bed249c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":462,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"1d2c2c9040e9cb5d547d42c98f5d1bad","sha1":"740ead5638d8c3f90703d7be61bfc0eb2c258c40","sha256":"dc2281f7cbb32df58a00c46b8be1a0dd7920bb414eea90ecf744b9673ccc3aef","sha512":"a97febc0432fb126eb3859d48798cffdbddc6a8ded72eaa627e25f66a0dba53f2d199c6071fae21485d1ed00058e2148e91c8b3d2770db814ded21410fc8cfb2","ssdeep":"","tlshash":"a3a02233cf830a0c0f0e28803080208a8302808ce080f080c200832880c82338000288","first_seen":"2026-10-17T11:33:03.287887Z","last_seen":"2026-10-17T11:37:15.31305Z","times_seen":2,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/css/chunk-vendors.1790755125431.css","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hrcke.com/main.html?","date":"2026-10-17T11:36:18.612Z","timestamp":1792236978612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/css/chunk-vendors.1790755125431.css HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:18 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Sep 2026 08:01:45 GMT\r\ncf-ray: a4bf013c4c220b41-OSL\r\ncf-cache-status: HIT\r\nage: 274\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"63eb89104ecd4ff5aea4cca06cf52369\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245454,"size_decoded":57037,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"644fe63f6603c2c663162c997f65b4c8","sha1":"1fc5522d88aef746217c53b775bcf98faa0a3bf3","sha256":"28f476d53925b76fc14e20df5da92e62248e1e064f7bfa08003c81d0a722fff0","sha512":"2f0068a89480b5f12781e20e638d60e057bcfb28ea3164f67b2a2a1d1330ed8a6dd46b4493dc38d6cfa7b1c0969ea062c2172fde785106715fc26df76f22f887","ssdeep":"1536:l81a495jN6tScCZhrZ5H1DphNi5i7Gp1o8m66upmV4FlHGMJihoCcZCOud8G8tK7:w66MmV4FlH9YXrxmNH9yDclfabHkBI","tlshash":"3434f722ed89a04c7b17c9232bcd6b9cd136e161e1200b6afd1739898fd79c83177769","first_seen":"2026-03-20T15:34:08.652956Z","last_seen":"2026-10-17T11:37:15.314919Z","times_seen":8,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/css/app.1790755125431.css","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:21.815Z","timestamp":1792236981815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/css/app.1790755125431.css HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:21 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Sep 2026 08:01:45 GMT\r\ncf-ray: a4bf0150586549c5-OSL\r\ncf-cache-status: HIT\r\nage: 277\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"66695ff9e7d1c77bf3dcb4d2470d6ed9\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":796477,"size_decoded":98863,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"66695ff9e7d1c77bf3dcb4d2470d6ed9","sha1":"511a93134aa8ef6af00d05c3f93b33c3187460e7","sha256":"e65713f5d923c71c9d14d1b642a5908c008c9409694514f1c05db0f83fbe3a31","sha512":"a40395854b382c1865cb40f593bf92a61952478b16f528abfd85ab8a4c35bd559d9ac92c34e10db17ca8d564ed25406ca898967be838212cd315cc979e2408fd","ssdeep":"6144:czV/Z2kwKAfl9zfKZz600I4LlYFoJmmYBkvR7ti0+Ydlf/Ge1jlN2YFJp585Soit:nlYFoPYBkvRL2q5kwxG1G","tlshash":"f405e867f787312a9527ca1966c0bfec4e2dd222c6110fbaf41376188bc76d60563a4f","first_seen":"2026-10-10T14:05:21.832978Z","last_seen":"2026-10-17T11:37:15.316028Z","times_seen":6,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/77358.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.135Z","timestamp":1792236984135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/js/77358.1790755125431.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:02:00 GMT\r\ncf-ray: a4bf015ed81e49c5-OSL\r\ncf-cache-status: HIT\r\nage: 276\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"efb22829decb6e2ceaa52c6dd3ed9d60\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16225,"size_decoded":5337,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16225), with no line terminators","md5":"efb22829decb6e2ceaa52c6dd3ed9d60","sha1":"749b35907f3961710d250680c1823cbf5cd9a7e9","sha256":"bb893fdde1024008bf7cb1928e32bdff50601f72f69c75d0ea2d4dd7e1661e4e","sha512":"07150750c61070e8020657c024c55e72421ced67cf79ccd4641259a2ce37fda58dc879b2f2c8dcd0b54bcc50ad8e41f1ba23c68cf1689abf33878d9044c399c6","ssdeep":"192:PP4/sLITXKeDxFZhhZ+AJWkhPvAUyR7ioYtKYSmT90SUSRnRQ5oRG7x/j0nAKAHy:Y/sMTpvhx8UxDKkXnRQ577xIAbHpSt","tlshash":"eb72b88bb0d2b5329e9ab1d6611f0210a4330e68b41da07e7efcdcd65aa494d136df7c","first_seen":"2026-10-17T11:33:03.325568Z","last_seen":"2026-10-17T11:37:15.316985Z","times_seen":2,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/fonts/element-icons.ff18efd1.woff","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.349Z","timestamp":1792236984349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/fonts/element-icons.ff18efd1.woff HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/static/css/chunk-vendors.1790755125431.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\nserver-timing: cfExtPri\r\nvary: Accept-Encoding\r\ncontent-type: binary/octet-stream\r\npriority: u=3,i=?0\r\ncf-ray: a4bf0160392449c5-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 276\r\nserver: cloudflare\r\netag: \"535877f50039c0cb49a6196a5b7517cd\"\r\nlast-modified: Wed, 30 Sep 2026 08:01:45 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28200,"size_decoded":28600,"mime_type":"binary/octet-stream","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-10-17T14:21:05.793617Z","times_seen":30522,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/hashMap/getValue?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:23.652Z","timestamp":1792236983652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"POST /exchange/hashMap/getValue?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nport: 2\r\nlanguage: zh\r\nTimeZone: UTC\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236983647\r\nx-signature: 7b5cf88d903173566f1959772cce7dabc6aa0ecb3fc6fa2264503e68989f13fe\r\nx-nonce: 823b60436b2d4e2eb7037f36038a718c\r\nContent-Length: 20\r\nOrigin: https://hrcke.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":20,"data":"{\"key\":\"jumpLogin2\"}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:23 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf015bde0849c5-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://hrcke.com\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68,"size_decoded":552,"mime_type":"application/json","magic":"JSON text data","md5":"978ac2f43478e09aa86daa9fbcd760fb","sha1":"948e595f4f76754f7227bd270bf764070ab31652","sha256":"5c489507a26090780be55a4e7e0bee39955367a03b944977a9a73aae6a637ac1","sha512":"b9287ba1b7e06c9d504a7b7fe80b06f317a2d7941a5da3a5c869d91c916e24d5560b2c2b012c99739b0727e60f50f7d1cb974002259f9dcaf34dafaf50cdecf8","ssdeep":"","tlshash":"f4a022c030300e300f830a00380c3800002c208308c0a88c0c8cab0838c0c33c003f30","first_seen":"2026-09-17T08:23:53.118695Z","last_seen":"2026-10-17T11:37:15.311381Z","times_seen":5,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/img/Nodata1.4e18906a.svg","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.485Z","timestamp":1792236984485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/img/Nodata1.4e18906a.svg HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncf-ray: a4bf01610c718be6-OSL\r\ncf-cache-status: HIT\r\nage: 276\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"f437063aba5d5b5382387c68ac69615d\"\r\nlast-modified: Wed, 30 Sep 2026 08:01:47 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2680,"size_decoded":1457,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f437063aba5d5b5382387c68ac69615d","sha1":"14763edda9c781c3a3136a973f32979fd4717a35","sha256":"173f49bd568040f6eb63d5ad787a34703c30c688c95e6979138b6be905167eb8","sha512":"10bf4050584d9eb9a6cb4e38821f6225be9b40c998dec875455c156e4c92867f36dea184fa110169b4225663c3130c451cdb923b028e465524d925a5bbf3a7e2","ssdeep":"","tlshash":"6d51639c334e86f4fe01a788bb174098752f6cfa565592e4cd141e2e382543e6d6f4c2","first_seen":"2026-03-20T15:34:08.644597Z","last_seen":"2026-10-17T11:37:15.318371Z","times_seen":7,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994648\u0026x-nonce=02f5a76f502e4e0fb4c7da1c708f97d7\u0026x-signature=6121a6f54c00d7ee15e774b610a0a860ff5344e1ed8b70049c266f4f4fd1055f\u0026fileId=9007618","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.852Z","timestamp":1792236994852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994648\u0026x-nonce=02f5a76f502e4e0fb4c7da1c708f97d7\u0026x-signature=6121a6f54c00d7ee15e774b610a0a860ff5344e1ed8b70049c266f4f4fd1055f\u0026fileId=9007618 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 39424\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1cf878be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/61046d8ffba547fea6c319ffb9e0d9f1.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39424,"size_decoded":39850,"mime_type":"image/png","magic":"PNG image data, 1366 x 768, 8-bit/color RGBA, non-interlaced","md5":"2a3f3575160a540036b16551650ca272","sha1":"2fadaea1ed9c8375944512704cfada105c31b378","sha256":"090a80ac2dc491f404a14f37a81bff654cc7406bad2cbbda9dc528b5aead69e5","sha512":"45c609b271de63c42947e0fad36aa07c63f9184270b8aef6e837855883c6d26325dc09ed49f04a0b78b71c39b85f657252d01bfbeecaa7e4fdfdb2103ceaf26c","ssdeep":"768:CuEjUpnF+oywAc8EewQCoZyC07zrVJCWndj6We:CNwpnltAJNCoK3rbC8jRe","tlshash":"1b03f2c835f40e4be2cfaa311f592a94730c3b7cf65720518d1989f1e20edd720ab56a","first_seen":"2026-10-10T14:05:22.10027Z","last_seen":"2026-10-17T11:37:15.319229Z","times_seen":4,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":862,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Ftesla-rangebound-at-380-with-weak-trend-live-levels-93CH-4944787","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.911Z","timestamp":1792236995911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Ftesla-rangebound-at-380-with-weak-trend-live-levels-93CH-4944787 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995200\r\nx-signature: f02a592faa8f1e6f92eaf88badeb72ad721c0d1307bbc1148229aa03b0573b7f\r\nx-nonce: 46415b8a458a4f81b5c95fad3e6c7571\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a86e9849c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":462,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"05baf67b79c2a6f35e0d50b38099663d","sha1":"232ea3bea901f163cecded9af5afeb5beebe9788","sha256":"96d852ec3061102c6fb266c3ae2359cae8912814f9c27f7874e26077a94cdebb","sha512":"5f4bdf3270cf436cff0a6c73aa1b52c4b84be59e459370a0eff69a7a31a703f6fe340e74674517d2d8c7a745577c845d199fd277a6d25adc125e1d5cf9e6c2a4","ssdeep":"","tlshash":"b9a02233cb830a0f0f0b0c8830002008000288888000e080c220830880c02338000288","first_seen":"2026-10-17T11:33:03.318785Z","last_seen":"2026-10-17T11:37:15.27873Z","times_seen":2,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2F105-77-31-realeconomy-stocks-jump-as-q3-earnings-broadens-market-rally-4953371","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.916Z","timestamp":1792236995916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2F105-77-31-realeconomy-stocks-jump-as-q3-earnings-broadens-market-rally-4953371 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995200\r\nx-signature: 1d4524b4a270b2c154a3562d0859d8a996244a26f9aa569138f04a38adc21eb1\r\nx-nonce: eb128fd9b21e48ff85e26f2e017818dc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a87e9e49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":461,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"485ff1fd2fc4766f152702fa7ced966e","sha1":"38412bfe580a153badf3b3e7b42c828a8089e4d4","sha256":"eb4a8c0b26a34f060c356dfe07519e5158706e0795c6356ff3c6cfdddd4d7fe8","sha512":"e3d4c0a12b8ad0d8bec8b47eb834561872fce2f14c423a268b6022c1b386095d3eafd269c9bec55358fee8ee573b666bab1de52241abec6c8904db69f04f9574","ssdeep":"","tlshash":"3ca002e75f8b43991f0d54c462796948694da848d459d6aac914674893c42378056acc","first_seen":"2026-10-17T11:33:03.39412Z","last_seen":"2026-10-17T11:37:15.320224Z","times_seen":2,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fcryptocurrency-news%2Fbitcoin-price-holds-above-81000-as-etf-outflows-weigh-on-sentiment-4955253","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.958Z","timestamp":1792236995958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fcryptocurrency-news%2Fbitcoin-price-holds-above-81000-as-etf-outflows-weigh-on-sentiment-4955253 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995203\r\nx-signature: dde402cb6aeafe1929b9e4fd9473a5b7ef2f1d8fddb519a70f2250898b4f60f3\r\nx-nonce: 329183776aa04affba9a4295aecfd2ad\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a8becf49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":462,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"1949a38624c65d0097dbe649db9ed8b1","sha1":"27b30a04c1b5f5e2fa20a4f8f31368c6da49b917","sha256":"bece09f931469a0175997a969a9b78910fa4f192dbc57f9e856e914174cd9f90","sha512":"91574f7919faada1dd51f71a5c25147f3608d396aa24ad7158ef0e78d4bb4d58616f515b15fadcb3299baa192513f3351977b272d4cbff7d8a2be9ffe1bb56d9","ssdeep":"","tlshash":"42a02233cb830f8c0b8a0a8030002008320888a8ce80f080c280838cc0c02b3000a280","first_seen":"2026-09-13T12:35:58.688851Z","last_seen":"2026-10-17T11:37:15.321596Z","times_seen":4,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/assets/chunk-vendors-si9w04v7.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:21.822Z","timestamp":1792236981822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /assets/chunk-vendors-si9w04v7.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:21 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:01:40 GMT\r\ncf-ray: a4bf0150586f49c5-OSL\r\ncf-cache-status: HIT\r\nage: 277\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"668fe9c34f4ee792f06aacef6e4b6613\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48522,"size_decoded":33048,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (45572)","md5":"668fe9c34f4ee792f06aacef6e4b6613","sha1":"f3114aa5645403353609838fbdfb018dd67b8af9","sha256":"b2515357ecc929b93d2b26be625edf4bdae111bcce178736798544fb348bf33b","sha512":"c69d02f6c33e2b797925957330ce0ed55a4b913777987e4c4160118c3a30861d291e6c9a8419c2736d5839d477c66154081fbb289242b19ec10ad5eb0403a709","ssdeep":"768:E2PuMXL/MQFUUxvqSjSFsLqLt0TqdnlfzA5vfjunSQQ3J8MRIXEX+67Y:ksTMAU0rLqBlf2fjAkyGGgJ7Y","tlshash":"ee23d09a887ed5168e1132869b5b51032a61e607709cc630fe4e1765df0dd0aefb6fc8","first_seen":"2026-03-20T15:34:08.487202Z","last_seen":"2026-10-17T11:37:15.223275Z","times_seen":8,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/img/Crypto.com.98724f32.png","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.499Z","timestamp":1792236984499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/img/Crypto.com.98724f32.png HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 11297\r\nvary: Accept-Encoding\r\ncf-ray: a4bf01611cb58be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 276\r\nserver: cloudflare\r\netag: \"0d69c0c37d1649994f7ec45f23bd962e\"\r\nlast-modified: Wed, 30 Sep 2026 08:01:46 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11297,"size_decoded":11662,"mime_type":"image/png","magic":"PNG image data, 209 x 46, 8-bit/color RGBA, non-interlaced","md5":"0d69c0c37d1649994f7ec45f23bd962e","sha1":"ab8314757d7d211631c373441bf1adc1d0ccc779","sha256":"2657f924244a3f68b70918b389d688743eb2e689e74d0a9e1388d4386e66cf96","sha512":"636343faf9c71a0fa4437b19194355732bd281adb261e7087ae24d427038c1908f19fbe0c9306adb6dc0272e9ab9a30662c9af0521414926356dcf05ba75c342","ssdeep":"192:bSEPjjeAooJruYNDZarsQObX40oALqVcLlJItgR0iFXDDWoq3RL7/D7566Tr9WQL:OWNlJrdDZhXfxLqVcLlJ80l/hyRL7/D9","tlshash":"e932b07e7db871fda65dc065c8b31d949daea81f29c760f8a336a09346436121b828f1","first_seen":"2024-10-04T11:22:09.875275Z","last_seen":"2026-10-17T11:37:15.322423Z","times_seen":8,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994648\u0026x-nonce=b2ffab1a584c4417b1c71b6f34fc78b9\u0026x-signature=24c30be8e000553be8318a6f88849f6f72438bda6e427adfadd0fb3b6e958805\u0026fileId=9007626","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.854Z","timestamp":1792236994854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994648\u0026x-nonce=b2ffab1a584c4417b1c71b6f34fc78b9\u0026x-signature=24c30be8e000553be8318a6f88849f6f72438bda6e427adfadd0fb3b6e958805\u0026fileId=9007626 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 35098\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1df978be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/5fe07058eaa34dfd8cb8423fa78921b4.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35098,"size_decoded":35524,"mime_type":"image/png","magic":"PNG image data, 1500 x 900, 8-bit/color RGBA, non-interlaced","md5":"e1d7a525d4db32d5434dc3c17c078e03","sha1":"1dac31d38d854c497f55340d299aad9ca499bab8","sha256":"1ac9816f313da1994db43170dc1f2e206ff525b420dea986005a1a3e85910bf8","sha512":"9e2bb4069c7c2ddfeb734431df2ebb98dd78b6eb5e670dfaca7bbcd063cc65d70488e44997677de199c2c7f91475778368d511ff41e0f267180b3787c21f86d5","ssdeep":"768:drX6TFWdwro7nDAoToaOwWoKmMcsKrGDIoLb6mu0gP1+3FuT01ORLgkliDvlFe:drWFWdwrofAovOwTcXKrGsoLs0skOLgs","tlshash":"9bf2e072c6dbf421de461fbeadb2a662dc19508c4834c2f4ea26ad226bc649c435f116","first_seen":"2026-10-10T14:05:22.219179Z","last_seen":"2026-10-17T11:37:15.323167Z","times_seen":4,"resource_available":false,"data":null}},"time_used":891,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":880,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994810\u0026x-nonce=7c5d0c841fc84f6a95b2c07e38d377a2\u0026x-signature=1ef2dafd8eb3200d584986847fa3acbf24cfadb3b64c42793690f9542f479cb3\u0026fileId=9008060","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.994Z","timestamp":1792236994994,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994810\u0026x-nonce=7c5d0c841fc84f6a95b2c07e38d377a2\u0026x-signature=1ef2dafd8eb3200d584986847fa3acbf24cfadb3b64c42793690f9542f479cb3\u0026fileId=9008060 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45808\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a2ba658be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/aa0ab9a9769a4123aaf9b8786feca7c7.jpg\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45808,"size_decoded":46235,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x450, components 3","md5":"9958a373cb1e930e662bec0180f08397","sha1":"58d9b331671b992964b3daf3ad5b8428ebc63eaf","sha256":"2437edfc3b60a11175f949e3d96b2e11b995f2ed234c3983fdcb63be1cab0f3c","sha512":"749b8f515e131064c973c803e7f407c77423b39a33396da0476daf68bf7b001dd6c3db64033dd0b10eb44c0d7230b2df4be4b653e67fd935a35109b4a0164e51","ssdeep":"768:89j7nhZvF3liEn4l7aFj+Q/CRjcFJDXwyMcUmhCZp+H5DDB:+j7nhZvF3lp4lc+Q/PFmFscpsXB","tlshash":"a7230252d49f062ece51b5fbbb4e01864a465e477a88c56723708cc093fb79a9dea3c0","first_seen":"2026-10-17T11:33:03.409778Z","last_seen":"2026-10-17T11:37:15.323881Z","times_seen":2,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://hrcke.com/exchange/ws?x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236981403\u0026x-nonce=2c6d1ab4f1514a8f9881c8bdb8847b7f\u0026x-signature=99ff43937684bb08794ddd210b875d7577c17062a15da484b3cd813b43a71235","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://hrcke.com/main.html?","date":"2026-10-17T11:36:21.420Z","timestamp":1792236981420,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/ws?x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236981403\u0026x-nonce=2c6d1ab4f1514a8f9881c8bdb8847b7f\u0026x-signature=99ff43937684bb08794ddd210b875d7577c17062a15da484b3cd813b43a71235 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://hrcke.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: gkclOGJfm420tcv4PoIZFQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 17 Oct 2026 11:36:21 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: cDuu4lczks6qaoR/YvCPH+OMWLc=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nPragma: no-cache\r\nCF-Ray: a4bf014e09dd56c5-OSL\r\nCF-Cache-Status: DYNAMIC\r\nAccess-Control-Allow-Origin: https://hrcke.com\r\nAccess-Control-Allow-Credentials: true\r\nX-XSS-Protection: 1; mode=block\r\nServer: cloudflare\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":534,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-17T17:55:32.063546Z","times_seen":19168837,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":0,"dns":18,"connect":19,"send":0,"wait":384,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/img/toss.7c50a733.png","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.493Z","timestamp":1792236984493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/img/toss.7c50a733.png HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 8928\r\nserver: cloudflare\r\ncf-ray: a4bf01610c938be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 276\r\nlast-modified: Wed, 30 Sep 2026 08:01:53 GMT\r\netag: \"7ee6208ed2a8401a781e796f510f7b46\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8928,"size_decoded":9269,"mime_type":"image/png","magic":"PNG image data, 225 x 68, 8-bit/color RGBA, non-interlaced","md5":"7ee6208ed2a8401a781e796f510f7b46","sha1":"d5c086ef14384c919b002ffbd5ae5451378ea2fe","sha256":"6f590dad236108a96ed2a15da1da322faf2dbabd2bad0c5f20b882c9cdc9655b","sha512":"7243f7ce298e9abfb8b333014b263e74020d0c2f9d9d690c26b0e725e34f73f54708bd082b8ab1dc5849ce0ddab0f9bc3aef8d04026473f701c8cf7859339495","ssdeep":"192:ESvbqzyOIc/rj5q7ffZ+kUIF46iLTwmFtDPlAeN0Lke2ETMA:D2zy+/r47ffZLF4jD8LFv","tlshash":"a802bf9428ed9334c8ac2dfbc2fe277cf5305d513521e967a7397a15e3c761526d0a01","first_seen":"2024-10-04T11:22:09.861426Z","last_seen":"2026-10-17T11:37:15.325876Z","times_seen":8,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994643\u0026x-nonce=683cade209ae4de1b9b6f757c7c16ec1\u0026x-signature=99312fe0cc1b6f433ec4e43cc992ac2a82471b030148dc72508cb26c23ac392f\u0026fileId=9005125","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.826Z","timestamp":1792236994826,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994643\u0026x-nonce=683cade209ae4de1b9b6f757c7c16ec1\u0026x-signature=99312fe0cc1b6f433ec4e43cc992ac2a82471b030148dc72508cb26c23ac392f\u0026fileId=9005125 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 5659\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1af1b8be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/027319aa426b452a832465f2577c1eb3.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5659,"size_decoded":6084,"mime_type":"image/png","magic":"PNG image data, 150 x 37, 8-bit/color RGBA, non-interlaced","md5":"79f40ce3f608056b21daa64207eda86e","sha1":"18303e0b04e2fa37f04cf4cfba4f66e5e7db2ab2","sha256":"07e6070bf626e74f24c4bab6d095c3307f8e95c6636c89cf207713ff5cd0c268","sha512":"13603f0052559ecacc5f2545275785330554b6cf30965f1a9e82b06f3716af9db6a61e4973d65f51a6013bd29d62b191ea6a3a399bb042c39fba71c275150a50","ssdeep":"96:6StxlTtuJI1e0rgiwTGNn8S0FtLR2eLeECNhR2hdbq+D+dATaGVnt8Mdr+eu7v12:6SJTQcdwT6GFxXLeHNhR2PgATaouz12","tlshash":"8fc17ea387406866b8b21b5502cb056fdfd351fc2e7f66879a35d5e623d113cb5a20c3","first_seen":"2026-10-10T14:05:22.175019Z","last_seen":"2026-10-17T11:37:15.326672Z","times_seen":4,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994648\u0026x-nonce=12777834ce574232af97d4ff21073aa8\u0026x-signature=243af7eed9b3d05cdc21d1f7ed2fb9cd5c1a923692b6a747c62d90995093706a\u0026fileId=9005254","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.850Z","timestamp":1792236994850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994648\u0026x-nonce=12777834ce574232af97d4ff21073aa8\u0026x-signature=243af7eed9b3d05cdc21d1f7ed2fb9cd5c1a923692b6a747c62d90995093706a\u0026fileId=9005254 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 206052\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1cf7d8be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/5404e0232c694ffa850014d8c51e3da7.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-17T17:55:32.063546Z","times_seen":19168837,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fanthropic-offers-blackstone-doubledigit-yield-in-chipfinancing-deal-ft-reports-4955079","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.831Z","timestamp":1792236995831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fanthropic-offers-blackstone-doubledigit-yield-in-chipfinancing-deal-ft-reports-4955079 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995197\r\nx-signature: 03daa10e1d9348c028c1a732fbdea94dcf273f5415343063be8652f26b2f7d79\r\nx-nonce: 1e7b1b6fa23c4be6860d9a9a3bdbec81\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a7fe3e49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":463,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"75a7a2ea9ec2dd96a876bcb4094d9ad4","sha1":"a5ad20723fe9d8f38eba7d768be90b85fb86256d","sha256":"b8a8cecea2f974b8571a6893fc1347f0134fdbf1669a13a38e6559ee950a98d9","sha512":"b50ad7dfc805de7f501575b8fc1dc7f3526bf8c4d9b2c6890a693b2809d6447c1e4a3f077da73c0bd200a86f377434873662cfd5c53c3d2b19f27b41910daa29","ssdeep":"","tlshash":"a8a002674f47d20f6f0a5984705a358831558849dd46ea49da18a694d1c82378156aa4","first_seen":"2026-10-17T11:33:03.293425Z","last_seen":"2026-10-17T11:37:15.327405Z","times_seen":2,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fcolombia-stocks-lower-at-close-of-trade-colcap-down-055-4954873","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.882Z","timestamp":1792236995882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fcolombia-stocks-lower-at-close-of-trade-colcap-down-055-4954873 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995198\r\nx-signature: cea9890d9e5beb3e614217b70c41844340c48f6ed171408296e2379b7704589b\r\nx-nonce: 22bc7e1deaa34b86a4011ce5a3c4db6a\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a83e7349c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":462,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"4ca4f122d37e8464f7b5d90e1d409019","sha1":"f05f5480444cf8770bf395201c453785674c3746","sha256":"b5ece892af7737904985e23630439fa06cc9e9eba2d860d1e3f36a0f892c2dcc","sha512":"1e66f0bb81ebfce97ba058ff62a610a2106dc31a6efe82713f12bf468bcc522c979098d15c16effad35a95649b9096ac95809215bdcc057f0d50ec905c7e40cf","ssdeep":"","tlshash":"25a02233cb838a0e0f8a288030003808800080a8cc20e088c308cb0c80c8233c000388","first_seen":"2026-10-17T11:33:03.278379Z","last_seen":"2026-10-17T11:37:15.328571Z","times_seen":2,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/chunk-vendors.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?","date":"2026-10-17T11:36:18.604Z","timestamp":1792236978604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/js/chunk-vendors.1790755125431.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:18 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:02:03 GMT\r\ncf-ray: a4bf013c4c1e0b41-OSL\r\ncf-cache-status: HIT\r\nage: 274\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"757973e936e7d61641ff62cec6dcc9a9\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3340687,"size_decoded":1123823,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52465)","md5":"69b10db8a4d695c23712315f17830ca5","sha1":"b747fce6645cc25f1174238ae61724186b99467b","sha256":"c028a83aeb82c58f2ca08258d7fa3126df7ac8d300502b6ca7d4e1a92bf60567","sha512":"9dc53d87198066595c915859855cb5885871e40507b66de100e4bd4379464ccf7e0da5c55d761734661006c8f8c257bd40d00b7057c18138ce45c919cf14cfc8","ssdeep":"12288:HCRpXFBUjAIkuED5IGJk8EgKUg1Nl/nNmE:iUdkuENk8Eg/yBmE","tlshash":"7e2508c9b2d2b06543e720a5007f110bf23a6958740e8598f275e8ea7cbd94d927bf7c","first_seen":"2026-09-17T08:23:53.125101Z","last_seen":"2026-10-17T11:37:15.234907Z","times_seen":7,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994646\u0026x-nonce=9c1c6179813042189869231afaca60cc\u0026x-signature=6ab10ff6370189d8c810612caedccea1ebb8465f35f027bee93fd1c5aec26115\u0026fileId=9005146","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.842Z","timestamp":1792236994842,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994646\u0026x-nonce=9c1c6179813042189869231afaca60cc\u0026x-signature=6ab10ff6370189d8c810612caedccea1ebb8465f35f027bee93fd1c5aec26115\u0026fileId=9005146 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 4345\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1bf548be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/21ff348b741c4c9dbe540417bde28259.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4345,"size_decoded":4770,"mime_type":"image/png","magic":"PNG image data, 92 x 21, 8-bit/color RGBA, non-interlaced","md5":"b26e8ebf0a85c36d7b1960889657ba84","sha1":"4210ec8490a32316f30bb72cacb66132751cb6a3","sha256":"f02cd36a494f39ef0e006ed9fbb077dc536c29af5fa47166bb0c5b9e91d7e675","sha512":"e53629e815e421961c5b374a3ffc57a9032a827520bf4f2648a55bb3458d5c19f08433e6ca8b218643c8417dc6ff13ff8b552799d1b5adb415f16906013bd8c1","ssdeep":"96:IS6VpcIYurzixSiWoIp03CMpfRBownFfV/E83duP:ISocIKx603CMpJB7nFfV4P","tlshash":"49916d7c8eca6c9d5f9b232bfaee29d55400394c3560435826603c57f9e3e221978a0b","first_seen":"2026-10-10T14:05:21.778629Z","last_seen":"2026-10-17T11:37:15.32979Z","times_seen":4,"resource_available":false,"data":null}},"time_used":711,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994809\u0026x-nonce=25dd2200db79475c8dc36f8fdef234a4\u0026x-signature=5c40b73f39fc04b633fe702d7bcb47c6dab0ee219833a1b293a455e6bf02c26b\u0026fileId=9008073","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.966Z","timestamp":1792236994966,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994809\u0026x-nonce=25dd2200db79475c8dc36f8fdef234a4\u0026x-signature=5c40b73f39fc04b633fe702d7bcb47c6dab0ee219833a1b293a455e6bf02c26b\u0026fileId=9008073 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-17T17:55:32.063546Z","times_seen":19168837,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fmeta-employees-said-lulas-accounts-were-hindered-during-brazil-electionfolha-reports-4954811","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.897Z","timestamp":1792236995897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fmeta-employees-said-lulas-accounts-were-hindered-during-brazil-electionfolha-reports-4954811 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995199\r\nx-signature: 11b1bbea926c5c63bb456701251b68da73257b9c8cdb814fc248f7c3696a4ce9\r\nx-nonce: 4262f59d1efa4f30801ecc4e039c32f7\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a85e8649c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":463,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"aff5ae55e68709dc4d9833bfda0045a8","sha1":"f1753767b383f73770ebfc4558aab7309a064a29","sha256":"a44c8f7997cd21c7ed3f9581ec08e6c7d42834b59de68f51ee4d6f4bbfc55758","sha512":"a3d53e86c07fe4b1614dbfcd2ace0eb00154237108c71dff2d2f1dd4122754691452b72028732bb10c72b79344f241184e5900116230e61559ec472b23b7ae46","ssdeep":"","tlshash":"75a022330e03c30f2f0a0080300a32c83000c80cc800ca00cb0c0200c0c02338200ae0","first_seen":"2026-10-17T11:33:03.393265Z","last_seen":"2026-10-17T11:37:15.330559Z","times_seen":2,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/assets/captcha-mini.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/","date":"2026-10-17T11:36:17.553Z","timestamp":1792236977553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /assets/captcha-mini.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:17 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:01:40 GMT\r\ncf-ray: a4bf0135bb280b41-OSL\r\ncf-cache-status: HIT\r\nage: 274\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"89ef751b31087e2f7b9b908097499b1d\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5719,"size_decoded":2127,"mime_type":"application/javascript","magic":"HTML document, Unicode text, UTF-8 text","md5":"89ef751b31087e2f7b9b908097499b1d","sha1":"ce21323dc3a6653b3e6e35f9c23e4a64ab680863","sha256":"c7f3811ce644c6029ab05ee97583c3277a0ea16ff153fbe2a288ac52da4e0ac9","sha512":"ae11bc13ac34ca7288c8e2f2841c64cf8b78976f074889e2abb2dc16e7892674cfc58f7a3f9f1bd828ca2328b2cbf6dd70d53f33d7a1fef46246d1c4d7f92756","ssdeep":"96:HeewKHcVHbblkutbbZTeRDou8plO5a1xG4Btx8x5zWRAZf2xGD:HeeH8VnlkUREDou8prjhJIFf+GD","tlshash":"dfc1022a2e7b0575d8a7006e5b5b314ab470810b6a05dc2c78fec3d84fd4ef85627aed","first_seen":"2026-01-10T02:47:31.863543Z","last_seen":"2026-10-17T11:37:15.331682Z","times_seen":32,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/img/Frame.8f073e80.svg","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.476Z","timestamp":1792236984476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/img/Frame.8f073e80.svg HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncf-ray: a4bf0160fc328be6-OSL\r\ncf-cache-status: HIT\r\nage: 276\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"48135929012eba63255ea1a33c3f63f9\"\r\nlast-modified: Wed, 30 Sep 2026 08:01:46 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1464,"size_decoded":1017,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"48135929012eba63255ea1a33c3f63f9","sha1":"ab59cba6bc745ebee9574906b043ccf16f5cca5e","sha256":"e06a16044c1c6a809bb920fc8e2846c55e8408016ee64f37d91a9e37c5cc464a","sha512":"5b8b4352e7e561f36f5aff35ce368a358e78958b7f5cc9117dd955fd1d3d36f8c492065098b990ffe28ed69d868fc34243cbbf1bc4674d5a8ca88122f3f653ab","ssdeep":"","tlshash":"9b3110f3a3b556e0c1939bb0f4249235a59eacf487c70bd9c1a0dc56e8660d5dc55d80","first_seen":"2026-10-17T11:33:03.247892Z","last_seen":"2026-10-17T11:37:15.332428Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fnasdaq-futures-edge-lower-as-ai-spending-fed-rate-concerns-weigh-4952930","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.903Z","timestamp":1792236995903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fnasdaq-futures-edge-lower-as-ai-spending-fed-rate-concerns-weigh-4952930 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995200\r\nx-signature: 016d38bd03a270c389cebaf925e41c8db9d4bf6d372c72ae8b09d653551dc16f\r\nx-nonce: 5797e044a47a46649613c7c9914b79f7\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a85e9149c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":461,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"b193745e56a3532a2ca6f5514b253762","sha1":"3ddde419abcfef6e2df49110603f1d2ba298a626","sha256":"79fe5ef3e92d5bc9e261fe0190a230eb555b12d5009cd7d51126ba3596d9a98d","sha512":"6a9230e3f4219c0a152b5497b1df2cf273deb51b1c82e9cee7db54330fd9ef3dbdc5a0ae8b07badce734dbd99c3846e91ba809d9266019071a6b8e01c8bc0b27","ssdeep":"","tlshash":"96a022330e83038c2f0c00e0203aa08c208cb00ce000c280c8003a0882c0233c0003c8","first_seen":"2026-10-17T11:33:03.343691Z","last_seen":"2026-10-17T11:37:15.334092Z","times_seen":2,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fcommodities-news%2Ftrump-waives-many-russiarelated-sanctions-tariffs-before-they-were-to-take-effect-under-new-law-4955088","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.925Z","timestamp":1792236995925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fcommodities-news%2Ftrump-waives-many-russiarelated-sanctions-tariffs-before-they-were-to-take-effect-under-new-law-4955088 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995201\r\nx-signature: b42c7a0d31984ab87af4b80239df3782c1692159e3d2d70c37e1f185a4ced312\r\nx-nonce: 0282f0e41cd14ea187932d1265a6f462\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a88ead49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":463,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"9ed1e305debc265694733636f982147d","sha1":"a4397d0f796f17a1648fe38756bebd3103f4234e","sha256":"c45bfd0aceda7ee5440a4d32583be00c30c4250fe0e84b253051f9d3962daba2","sha512":"8caad8f28bfd98a3ba7de7b012520eeb742e4ae51e7034f32dd7cbbdd4b3b13df11227003285265888ccf1dffeeb476227f2e67752fe33e1b89f044d47eb7deb","ssdeep":"","tlshash":"59a022230e03c20f2f0a0080300a3088300c8c08c802ea08ca0822a0c0c0233c0022a0","first_seen":"2026-10-17T11:33:03.420361Z","last_seen":"2026-10-17T11:37:15.335708Z","times_seen":2,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/img/Coinbases.f1c91fa7.png","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.502Z","timestamp":1792236984502,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/img/Coinbases.f1c91fa7.png HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 17045\r\nvary: Accept-Encoding\r\ncf-ray: a4bf01611cbc8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 276\r\nserver: cloudflare\r\netag: \"0c21bb1d685a450c9fe122470221f12c\"\r\nlast-modified: Wed, 30 Sep 2026 08:01:46 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17045,"size_decoded":17410,"mime_type":"image/png","magic":"PNG image data, 250 x 58, 8-bit/color RGBA, non-interlaced","md5":"0c21bb1d685a450c9fe122470221f12c","sha1":"e5fec11d1bf4e07b2ff6475948dfa8b862901995","sha256":"c0b11a4936d1e9f9c4737c32d75d656bcaeedc5b01466649eb91c19cf4c3c714","sha512":"88372a1ea5df7bbc8f8f43817709dfa7f7a5705aa7cd8a6e5183f83dee5b92530d81ec5eea06fc565af0dfc175c810317ebd3e3c753c8f36a17c6b50c2dce0f8","ssdeep":"384:+NQ1UWGhocrq5gQcgiws3NlRgpZtTHvQt0JOMCMbOu3HaHgfy1:71mGTcuZZoaOb6Ok6H11","tlshash":"c972d0e76a78026ffe5d7e208263cd3945bf4abe654d343b3300a16c6348c81ae2d5c9","first_seen":"2024-10-04T11:22:09.872282Z","last_seen":"2026-10-17T11:37:15.337039Z","times_seen":11,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/assets/captcha-min.css","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hrcke.com/","date":"2026-10-17T11:36:17.548Z","timestamp":1792236977548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /assets/captcha-min.css HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:17 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Sep 2026 08:01:40 GMT\r\ncf-ray: a4bf0135ab250b41-OSL\r\ncf-cache-status: HIT\r\nage: 274\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"819db36c5635591dbd7920934737a081\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2656,"size_decoded":1122,"mime_type":"text/css","magic":"ASCII text","md5":"819db36c5635591dbd7920934737a081","sha1":"c84d636f792f3651fe2ff5f1842526e7f379fcb3","sha256":"81a65d171003eaa0bb8207fa7553c0ae8efe9c742df0f5587e24b26c559cb410","sha512":"1e3119a23b0483906188fcbad36e23f75c91bd768886704b7b2ad42a333bcf077ddc9baa5e6100d5bb169ea52088359dbc750eede0e5b79208c39d9de8d9b1fa","ssdeep":"","tlshash":"3751bbf71ab901047d26d28ca89387c6a3a48503ea5acd357be1611cdfac2ecc577b1c","first_seen":"2026-01-10T02:47:31.872241Z","last_seen":"2026-10-17T11:37:15.337965Z","times_seen":32,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fcompass-sues-california-listing-service-in-fight-over-private-home-marketing-4954786","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.906Z","timestamp":1792236995906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fcompass-sues-california-listing-service-in-fight-over-private-home-marketing-4954786 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995200\r\nx-signature: bf5ceb692a64448e825c8650a0fd8f59d69dedf1ce5a8fd339e7413ca6de75b3\r\nx-nonce: 1eb9324a54bd4e61860ca09fbe02ef98\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a86e9349c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":461,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"a20b0d6c01e50ced5f3cf67fa022d676","sha1":"ce6f7fdb256fd1d5c35f327a15113d5c32ee18be","sha256":"326925c9b93a28346edaca0f0e50496bed0f4d3e8ed0fc177fd838cb7e7f0b2e","sha512":"89a5ab408f87ea1e80d58ec34da7e3fc45a440fa416a894f126954da0303e5097c080d9d580a0bc77ffd6c8b98e9087398723236fb36fda09f14d631f733d2a5","ssdeep":"","tlshash":"67a022230f8303080f0c00c0a038200c2a0ca808e000c280ca00020c83c023380202c8","first_seen":"2026-10-17T11:33:03.319854Z","last_seen":"2026-10-17T11:37:15.338924Z","times_seen":2,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getStockList?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.620Z","timestamp":1792236984620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"POST /exchange/RockieNews/getStockList?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nport: 2\r\nlanguage: zh\r\nTimeZone: UTC\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236984470\r\nx-signature: 626ca51a370b423a3394ec4cd4ae9454e80f2f3829cf29f0fe567939f17fb558\r\nx-nonce: cde89c2a71c04b4dbf8f9a91ad9f3371\r\nContent-Length: 64\r\nOrigin: https://hrcke.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":64,"data":"{\"page\":0,\"size\":11,\"bigEvent\":1,\"keyWord\":\"CNH\",\"countryId\":39}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf0161d9d449c5-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://hrcke.com\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41814,"size_decoded":10172,"mime_type":"application/json","magic":"JSON text data","md5":"80a6ae7aaaede234f7b666eabae7347d","sha1":"7d34db566d1f438952a592856a80fc9bec96207b","sha256":"0b909f797d526ead9b15e56980210b62208dc2b459647b9721eac05864a4e010","sha512":"9807ee7789026aa8de4e9f4d12639024ceec13c49d757ad752a4e91c51cb5f96541521737ce72b3e67df2c943eb5b33446b551fd74b4801d9096211f0ab44649","ssdeep":"384:3zPygVAgGy7iTT1Gq7Frz6B6uZxdawuu4rq7J51KgPWwELeYVI:3TycNG6ibrz6B6uZHa04rq7J5fa1VI","tlshash":"4713532d9beb5d7d1fe451e118c9fe4a664d22eb91c0fdb1d3a0cf2842e52bb042b095","first_seen":"2026-10-17T11:33:03.25434Z","last_seen":"2026-10-17T11:37:15.269375Z","times_seen":2,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/css/24897.1790755125431.css","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.674Z","timestamp":1792236984674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/css/24897.1790755125431.css HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Sep 2026 08:01:41 GMT\r\ncf-ray: a4bf01623a0449c5-OSL\r\ncf-cache-status: HIT\r\nage: 276\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"49fbdafef816d990b2603da8cce6d45c\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30724,"size_decoded":3740,"mime_type":"text/css","magic":"ASCII text, with very long lines (30724), with no line terminators","md5":"49fbdafef816d990b2603da8cce6d45c","sha1":"a7ba04d59b182cc54edaa5fa586cecc428fc8658","sha256":"a4d3cb5d6263c92ce90a8272f19da40ae031b6c88d22fec1a1667aef6cd29707","sha512":"5d5d9d02f263d1b151d474f1eb87e6b88bbb99db807bf38cd6e0326b59f4cebc7a4bcb7e97d051be252a82f47957a45a724aa2797c9f677d2282a7227f6052b6","ssdeep":"192:uwPCBApak122FvxPHxAPoj9QKgYxYAYeJiLY0auH:Ku/lLI","tlshash":"edd2f123965d265b1253c5146b89be73061ce7bac300d7be6cb2131d8fc735b22a937a","first_seen":"2026-10-10T14:05:22.014983Z","last_seen":"2026-10-17T11:37:15.340096Z","times_seen":4,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/xiaomi.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.554Z","timestamp":1792236994554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /xiaomi.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:34 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: zstd\r\netag: \"bafe46627e6620e542f922a2a144631c\"\r\nlast-modified: Wed, 08 Sep 2021 08:57:38 GMT\r\nx-amz-id-2: WEmVfsxNznLmVOv4HRkUdOztjUIKHMantbF6eAono9IQv9IWlWUu+qwfgv9xpekiNmNbvSTMA3Y=\r\nx-amz-request-id: T259S36W9EA3FEFS\r\nx-amz-meta-hash: bafe46627e6620e542f922a2a144631c\r\nx-amz-version-id: null\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 940, 830\r\ncdn-cachedat: 09/30/2026 05:36:24\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 96896a7064caae1ee9a2ee09b5a4b74b\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":677,"size_decoded":1314,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (677), with no line terminators","md5":"bafe46627e6620e542f922a2a144631c","sha1":"9a8716c92d14c290f10c2cbcd26f2cf135cd2fd4","sha256":"b34fd0786b1c1b72ec36b36cab842c1aca07416edec825305e3125a40b139a3a","sha512":"71b117f0e7e67808871929e07c10226292ab870334aedddcd609dadd376fe7f9831b5dcc50802dd932496af5730a5c3b1442810d8a83ca30f7693ba759a8e1fb","ssdeep":"","tlshash":"4d017bcf933482c8f10956e5a3aca998537e247df1d44f8665b92b04e24cfde6c50468","first_seen":"2025-06-26T15:44:03.529989Z","last_seen":"2026-10-17T11:37:15.340759Z","times_seen":9,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":24,"connect":1,"send":0,"wait":3,"receive":-1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fla-restaurant-group-used-60000-dodgers-bet-to-hedge-playoff-risk-kalshi-says-4954890","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.867Z","timestamp":1792236995867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fla-restaurant-group-used-60000-dodgers-bet-to-hedge-playoff-risk-kalshi-says-4954890 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995198\r\nx-signature: 4393155ef4d95a03caadd8481a7789ad4230db988c9cb534e08332af45fd3eb6\r\nx-nonce: 61594a17ac454508afa4e54bbd2e8566\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a82e6449c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":463,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"ca215572906cdc84060b34fd8b089e5b","sha1":"a4f5f66beaa5fdace6e17090c38c32f6474c6919","sha256":"efa511a730945dd52b297b7018b1a8259bd7484e98db873c690632adf8d21cad","sha512":"2ca3eb60a0b5288b0b14dee13ae9237a26eeb2ed690e7570a9e891951d27da9dbd0aafb6962ebf91e3235409e67d7ca6c2145252431bf871258504df9ab13ced","ssdeep":"","tlshash":"28a022230c03c20b3f0a0080300a33083028880cc800ee00c80c0200c0c023382082e0","first_seen":"2026-10-17T11:33:03.349177Z","last_seen":"2026-10-17T11:37:15.341431Z","times_seen":2,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fexclusiveboeing-sales-chief-mcmullen-to-retire-company-memo-says-4954848","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.876Z","timestamp":1792236995876,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fexclusiveboeing-sales-chief-mcmullen-to-retire-company-memo-says-4954848 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995198\r\nx-signature: dc1c2f786e730cd33c1c245ad37be25a6774ae49e7f55c07399210c3de93a2a2\r\nx-nonce: ed10c6f8ab0a4599903c1344ca256d8c\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a83e6b49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":463,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"afd8f23a8ae66bb204d664111a5f49aa","sha1":"9fdb960fc2d49ba21ca7e599bf038a515e016098","sha256":"86427fc3464143a1b40024ce822f919ae465b8efde84af930345bd8835cd5fc3","sha512":"a72119c37dcff9e5871f7d4e1a0137d348dcbb33a4f14ac15111160d9ef3da9f05e2e50b881c8060a6ee52d21ae2348add8ac31b6ad87da38b4d2bcef3f831ae","ssdeep":"","tlshash":"04a022330c03c20f2f0a0080300a32c83000c80cc800ca00c8080200e0c0233820a2e0","first_seen":"2026-10-17T11:33:03.378613Z","last_seen":"2026-10-17T11:37:15.342894Z","times_seen":2,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/css/app.1790755125431.css","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hrcke.com/main.html?","date":"2026-10-17T11:36:18.615Z","timestamp":1792236978615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/css/app.1790755125431.css HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:18 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Sep 2026 08:01:45 GMT\r\ncf-ray: a4bf013c5c230b41-OSL\r\ncf-cache-status: HIT\r\nage: 274\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"66695ff9e7d1c77bf3dcb4d2470d6ed9\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":796477,"size_decoded":98863,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"66695ff9e7d1c77bf3dcb4d2470d6ed9","sha1":"511a93134aa8ef6af00d05c3f93b33c3187460e7","sha256":"e65713f5d923c71c9d14d1b642a5908c008c9409694514f1c05db0f83fbe3a31","sha512":"a40395854b382c1865cb40f593bf92a61952478b16f528abfd85ab8a4c35bd559d9ac92c34e10db17ca8d564ed25406ca898967be838212cd315cc979e2408fd","ssdeep":"6144:czV/Z2kwKAfl9zfKZz600I4LlYFoJmmYBkvR7ti0+Ydlf/Ge1jlN2YFJp585Soit:nlYFoPYBkvRL2q5kwxG1G","tlshash":"f405e867f787312a9527ca1966c0bfec4e2dd222c6110fbaf41376188bc76d60563a4f","first_seen":"2026-10-10T14:05:21.832978Z","last_seen":"2026-10-17T11:37:15.316028Z","times_seen":6,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236983990\u0026x-nonce=12198e60e78e4edfb675ea9b844d4bf3\u0026x-signature=4423cc13b965e48214ca94bda6ec13137e8e794bd044eed57b51bd355ec53238\u0026fileId=9007944","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.068Z","timestamp":1792236984068,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236983990\u0026x-nonce=12198e60e78e4edfb675ea9b844d4bf3\u0026x-signature=4423cc13b965e48214ca94bda6ec13137e8e794bd044eed57b51bd355ec53238\u0026fileId=9007944 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-17T17:55:32.063546Z","times_seen":19168837,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/16168.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.133Z","timestamp":1792236984133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/js/16168.1790755125431.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:01:55 GMT\r\ncf-ray: a4bf015ec81d49c5-OSL\r\ncf-cache-status: HIT\r\nage: 276\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"28d80f7727fc245f748644d28f79187d\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19771,"size_decoded":4831,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19771), with no line terminators","md5":"28d80f7727fc245f748644d28f79187d","sha1":"824c8c1de8b48e9564da1bafb5274292658e36f5","sha256":"13e1aac23582321a20719d129d771416a856f627de43cb811df1397f834c3707","sha512":"b8a2e8e3525b32a4c8a5c6109561bae69bca241a9ac43b03ae6675c3dbe1fc267ac889cd18fdd31adc49c7dec1919fa878650a883382a4c52002890fddb9f034","ssdeep":"192:k84GCU2IHL8kuj9APSNqtctTzllPlK5AgJ8Ir0SmeQrZKRYdb2UokyFGLUwYrq:V4GcIwl/eOTJCtQrZEMaUokywYrq","tlshash":"1a929505b4e7f077cd9a6016902e5210b1bb3f8ea804d849377cd9e0e5a9d28752affd","first_seen":"2026-10-10T14:05:21.84744Z","last_seen":"2026-10-17T11:37:15.34416Z","times_seen":6,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fmexico-stocks-higher-at-close-of-trade-spbmv-ipc-up-187-4954874","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.877Z","timestamp":1792236995877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fmexico-stocks-higher-at-close-of-trade-spbmv-ipc-up-187-4954874 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995198\r\nx-signature: 2e4a07e72fa04b78c375f878033b1b7befb5f0ae0c4975b7a18c1fe92f50cb8f\r\nx-nonce: bd4db3ac91d54f3aa41c06bf6a7f461c\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a83e6e49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88,"size_decoded":484,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"7862bda11aaaffb79e7f5f3a7d1d81d1","sha1":"8b46d7e545099b4c92581b7698a6434a187bd4d5","sha256":"3a92d11c2fd7bdd0d488409280b09d054e7b832467fb9e85fce5c330634ba55f","sha512":"f43a939809229059a046c4a331a06eb8f59ad507c7133288ed0c3456865827f17ee91823fdb64d86421d7db083324bcd29e4115c15772deb754a351e8fd7d113","ssdeep":"","tlshash":"cfb012114bd212ba074245d05400705b544c44ceca05c441876d416d008020740ca640","first_seen":"2026-10-17T11:33:03.4243Z","last_seen":"2026-10-17T11:37:15.344977Z","times_seen":2,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fanalysiswhy-coreweave-is-in-the-crosshairs-of-the-ai-scare-4954698","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.938Z","timestamp":1792236995938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fanalysiswhy-coreweave-is-in-the-crosshairs-of-the-ai-scare-4954698 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995201\r\nx-signature: db3523e64bc55d2ccea89eefc404234274e4011d10e9ddf6786545225062cb99\r\nx-nonce: 6fa37d02ad0b492d994699568b86bdce\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a89ec249c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":463,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"dcc9bc31a3d3c82ed51635fd4580b2f8","sha1":"1b85a01b795e08552fd1e7e6baf93ea5d3c783a8","sha256":"69ec8a5f3cc16e2b8a317bf451ee88e36613fc3697ba7c3aeafdf31cc76ebcec","sha512":"76f37fc20adeffd85e063ea53d477b510ee85e3ccd5346df450e8528032565301285803a667034008bbdbead10878980d78e4167be6a863df7d29ef1782c24a9","ssdeep":"","tlshash":"c0a022b30c03c20f2f0a0c80300a32cc3000c80cc808ca00c8080200c0c023380002e0","first_seen":"2026-10-17T11:33:03.321653Z","last_seen":"2026-10-17T11:37:15.346397Z","times_seen":2,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994647\u0026x-nonce=e3e954e02a2845c78d09c592a2304d91\u0026x-signature=9b0c60aa67c120e8dfef9aa4d930ff76b19e3a0bbc27274a8106f71d6f0a00dc\u0026fileId=9005246","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.848Z","timestamp":1792236994848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994647\u0026x-nonce=e3e954e02a2845c78d09c592a2304d91\u0026x-signature=9b0c60aa67c120e8dfef9aa4d930ff76b19e3a0bbc27274a8106f71d6f0a00dc\u0026fileId=9005246 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 33104\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1cf6f8be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/a9712ae9d1d54e1ab17546af28e13a2f.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33104,"size_decoded":33530,"mime_type":"image/png","magic":"PNG image data, 800 x 277, 8-bit/color RGBA, non-interlaced","md5":"5e31ff255e15890c5bdcf620764a1575","sha1":"0b8122eb4bec423e3ddd69227a1dd06caf1ff5cd","sha256":"469db8533446d76766424a820b4949bc0c8e6a9f82b884bbf71c93db7c356e0b","sha512":"75dc55c0bf60014ebb745da7fbe10fa012c4e8c815d6b8e5b83db01b70a04eb88da1fcc7b2e85c0296b38bf64b9fe20325522af0c3b6c513790b86f4734b4ccf","ssdeep":"768:tcp7KfC72/salyP5CLnH8LJJsbgke0MPNaebu7R9Ft20nTSXjd4vqepGVBRo:txQ2UaJLnH8dJsbgke0MV/C7R9Ft2qSM","tlshash":"8ee2f14232feb60d254440f77b7668c42df09ca79611b29ef4c5b9a62c9647f0b538cb","first_seen":"2026-10-10T14:05:21.980914Z","last_seen":"2026-10-17T11:37:15.348225Z","times_seen":4,"resource_available":false,"data":null}},"time_used":857,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":845,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994810\u0026x-nonce=0f42699f575b4129bff954860fcc75f9\u0026x-signature=8d41f33c742cf7fd19831b8b2afa9c434c3b82cddab820bf171b5844638a1ad3\u0026fileId=9008077","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.985Z","timestamp":1792236994985,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994810\u0026x-nonce=0f42699f575b4129bff954860fcc75f9\u0026x-signature=8d41f33c742cf7fd19831b8b2afa9c434c3b82cddab820bf171b5844638a1ad3\u0026fileId=9008077 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-17T17:55:32.063546Z","times_seen":19168837,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994810\u0026x-nonce=3c6f814eb37c4d3f9a116b6fa092c30a\u0026x-signature=ba60bc56fc8323af195eb2f099f2b6fbca0b2dffcb8d0bd56c28d2dc86c3ce03\u0026fileId=9008079","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.989Z","timestamp":1792236994989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994810\u0026x-nonce=3c6f814eb37c4d3f9a116b6fa092c30a\u0026x-signature=ba60bc56fc8323af195eb2f099f2b6fbca0b2dffcb8d0bd56c28d2dc86c3ce03\u0026fileId=9008079 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 308068\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a2aa508be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/03771706e9e343f5ad7b194524545e1e.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":308068,"size_decoded":308495,"mime_type":"image/png","magic":"PNG image data, 750 x 362, 8-bit/color RGB, non-interlaced","md5":"736b08a3fcc5ca4ca31575cfe6dd91c7","sha1":"e6762d34846399d5992731ce40bd098900f31298","sha256":"c97dcfcf6568fb0f1c789feb6195a423253f4df18688328ec285ec74a14848c3","sha512":"25750803bc550bb04a9d95fef166cc8d4a8ac996aeb6ebdeb1094fc923abd7854af73d30e41174a69e91c039dc32703341cbe32428856405489f38f6b86549dd","ssdeep":"6144:Uhtz6/U7S8EnIUtP4sVPzzPWneEvsiBZf4EeS37idI9YaXXSDoGezY/y:Uhd6/U+d4s9zW3Zf4+uFQeo+y","tlshash":"356423a0368b8ed858f9ae0133ad71bd15ed8453c9e97000cdb9fcd885a52dff8a0b54","first_seen":"2026-10-17T11:33:03.377249Z","last_seen":"2026-10-17T11:37:15.349025Z","times_seen":2,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":289,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fsoftbank-weighs-18-billion-acquisition-of-allied-universal-bloomberg-news-reports-4954792","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.880Z","timestamp":1792236995880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fsoftbank-weighs-18-billion-acquisition-of-allied-universal-bloomberg-news-reports-4954792 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995198\r\nx-signature: 2dc46aade471a884a961f7d5bdeaf68cf46ad4e3f347787deb949361a6c73fb8\r\nx-nonce: e863ee0b4281499b850fc9ac2f6573c5\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a83e7049c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":463,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"5930ccc89c962154582f5a3ab7adca78","sha1":"2797c8901096cc44e1dc39052d6e399ec0e223cb","sha256":"67bf805a031dcfcf697141c3712631595690d9c39010ebcc16b920dc47234bc6","sha512":"0feb9723197b2e5b87473fd02100064b0be0d2b9f62225b2de6b105a9a0ce522c9726a70146cbbfe0ad74679f68ee3ef47007b5d63526e8e2676dbc5aaae9862","ssdeep":"","tlshash":"1ca022230c03c20f2f0a0080380a32083020880ccc00eb00e8080200c0c823380082e0","first_seen":"2026-10-17T11:33:03.25743Z","last_seen":"2026-10-17T11:37:15.350343Z","times_seen":2,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fcelanese-stock-falls-after-raising-lcp-prices-globally-4954826","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.893Z","timestamp":1792236995893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fcelanese-stock-falls-after-raising-lcp-prices-globally-4954826 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995199\r\nx-signature: e0bbee0d3b79c553c5ad49862685e42d61ce83fff6dbb130ccd75e0e18a6b3fc\r\nx-nonce: 72487fbf717148b9b30c15d828b823a0\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a84e8049c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":461,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"8a1a5addcc77d98bcd99831a4118f669","sha1":"98be6af2b96fcc1e89172ca64df9dd29b576d3c0","sha256":"fe7a91a7c486e79f48d9d82c9f5e8869758ee0e79e2bafc1a05deacd71c241eb","sha512":"54f1fb9e1c4dac5d90bb0186dd36fa33c7b14a7d0cec20174c1b8e0ca6c9c8f705891f82a8fbf881bd331aa466fc5e0db8d95c1f23120f71a4d4619eab4befe1","ssdeep":"","tlshash":"d9a002a74ec783592f5d54c4a1756d49a54db448e465d796c914964882c4237c0456cc","first_seen":"2026-10-17T11:33:03.351935Z","last_seen":"2026-10-17T11:37:15.351467Z","times_seen":2,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2F31-mtd-big-tech-spills-over-into-these-aipicked-midcap-consumer-plays-4953278","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.920Z","timestamp":1792236995920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2F31-mtd-big-tech-spills-over-into-these-aipicked-midcap-consumer-plays-4953278 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995201\r\nx-signature: 4db9790ff7174711b37f585594778098dd129e2f7d4282dc63f899f225fa3cf5\r\nx-nonce: 44037afd31b040ae8c4d052318c4f7d3\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a87ea749c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":461,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"5aabd69819804398ed1582c885c8f53c","sha1":"570ab8abdc967d89fa8b9211e4981fdfad2987e7","sha256":"73fe9aabd15f3a5c38430eb3be02137f5041c91f46e66802be56d7145e7bc6a1","sha512":"fc5b1f040d25111e0750bbb1a7b2ebcb04daf06927bcca4a90485bb8a0779c59e5fe4756fd204b75c2a33c2c7ef54940a1507a4906d328de7c068c8022a2d158","ssdeep":"","tlshash":"eca022e30ec303c82f0c08e022302e08a00ea008e002e380c800020882c023380002c8","first_seen":"2026-10-17T11:33:03.328226Z","last_seen":"2026-10-17T11:37:15.354005Z","times_seen":2,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/css/chunk-vendors.1790755125431.css","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:21.813Z","timestamp":1792236981813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/css/chunk-vendors.1790755125431.css HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:21 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Sep 2026 08:01:45 GMT\r\ncf-ray: a4bf0150486349c5-OSL\r\ncf-cache-status: HIT\r\nage: 277\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"63eb89104ecd4ff5aea4cca06cf52369\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":245454,"size_decoded":57037,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"644fe63f6603c2c663162c997f65b4c8","sha1":"1fc5522d88aef746217c53b775bcf98faa0a3bf3","sha256":"28f476d53925b76fc14e20df5da92e62248e1e064f7bfa08003c81d0a722fff0","sha512":"2f0068a89480b5f12781e20e638d60e057bcfb28ea3164f67b2a2a1d1330ed8a6dd46b4493dc38d6cfa7b1c0969ea062c2172fde785106715fc26df76f22f887","ssdeep":"1536:l81a495jN6tScCZhrZ5H1DphNi5i7Gp1o8m66upmV4FlHGMJihoCcZCOud8G8tK7:w66MmV4FlH9YXrxmNH9yDclfabHkBI","tlshash":"3434f722ed89a04c7b17c9232bcd6b9cd136e161e1200b6afd1739898fd79c83177769","first_seen":"2026-03-20T15:34:08.652956Z","last_seen":"2026-10-17T11:37:15.314919Z","times_seen":8,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994647\u0026x-nonce=a88bfdde089341848e306bdef9e871d6\u0026x-signature=ffe86cc19f78c83ab8ad6d11d0ffd3256c25a2537916db1c64fe66370d0f5e96\u0026fileId=9005166","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.846Z","timestamp":1792236994846,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994647\u0026x-nonce=a88bfdde089341848e306bdef9e871d6\u0026x-signature=ffe86cc19f78c83ab8ad6d11d0ffd3256c25a2537916db1c64fe66370d0f5e96\u0026fileId=9005166 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 7771\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1cf688be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/cfb58636729241e299fd0c4032ac4be0.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7771,"size_decoded":8196,"mime_type":"image/png","magic":"PNG image data, 195 x 31, 8-bit/color RGBA, non-interlaced","md5":"7a163afc94154ffa86dda709c2df55a6","sha1":"dcc01f3b278a5fec5237e2b81342cf7384cc5e6b","sha256":"05400d3a18767708b42a5f52001aa747b969e44aca369a5946c7a1ac33fb0dcf","sha512":"edb7d66208a6c8be124fda99fe6314b54be33c63bb5b28fc8b7751ddd3ca0d4b3673aad57f1e9d4668a34e6a611bdefb1b56f50720a7ff31708bdd501cca43a3","ssdeep":"192:RSYQy2z+ApmpKBqsFbKlwFrW9J5loN5uoyiQ+Ki6zhfa4:4YX25JcsA+tW9JTo07+Wdfa4","tlshash":"a5f1afa360f1f69b9466af14429abe5316b3af1336047f1dc30265358424251c7dce0b","first_seen":"2026-10-10T14:05:22.096238Z","last_seen":"2026-10-17T11:37:15.35584Z","times_seen":4,"resource_available":false,"data":null}},"time_used":734,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":734,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fgoldman-flags-2-memory-stocks-to-buy-amid-deeper-sector-pullback-4953952","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.912Z","timestamp":1792236995912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fgoldman-flags-2-memory-stocks-to-buy-amid-deeper-sector-pullback-4953952 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995200\r\nx-signature: 3a5f113c88d602d8a8350dba60a8715b355d4815170ef3bd630dabdaa93dcc0f\r\nx-nonce: f5c6405ed6b64d3dbd2cb470ef81305e\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a86e9b49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":462,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"c6a2bc38a19b7f1fdd75cff5c75fc1b3","sha1":"66ce7888002ae46a2fc818f1cc6a8f4ca14037db","sha256":"d2379c142ea1f3e21d1ba9b5f105000506445d8c6946684e8ff2fc0dac174889","sha512":"df276477892c566bcc811b0e13ee62070c0c17adeabc051b3d468a2dd67868ccfbf832fdb58f0f5eb750d15735e0fbd390846ccfff3488c7b0bd46efc9d834b9","ssdeep":"","tlshash":"58a02233cf830e2e0f0a2880300830080008e088a000e080c280a328c0c033b8000b88","first_seen":"2026-10-17T11:33:03.272061Z","last_seen":"2026-10-17T11:37:15.357158Z","times_seen":2,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/assets/fingerprint-v3.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/","date":"2026-10-17T11:36:17.629Z","timestamp":1792236977629,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /assets/fingerprint-v3.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-17T17:55:32.063546Z","times_seen":19168837,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/65596.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:23.568Z","timestamp":1792236983568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/js/65596.1790755125431.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:23 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:01:59 GMT\r\ncf-ray: a4bf015b4dc549c5-OSL\r\ncf-cache-status: HIT\r\nage: 278\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"f7dd6041ceb34e804e466905d3bdad1c\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22412,"size_decoded":7412,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11591)","md5":"f7dd6041ceb34e804e466905d3bdad1c","sha1":"2e75e7f0372e7299f5be998724e16adb7227b8ad","sha256":"a12a5c27b2915388e3f79f5e43b7a56bf13b6d0a24e6f9710b8b1c7cd53af14f","sha512":"e960f141cf0d560eeadf43eae388b107f6ffc43e4d0902e0f16c61f5efc5877aa32e916259b1a6c907eb93c008a39f527e3ac1481c1dd8a53a3faf6d8b01395e","ssdeep":"384:XvPtBSxpjIOfZh5pQtvI7kRa4Ka33dbx1kIoBwpWjtc:fPuxp8AZeg7kk4L3niFBwpWjtc","tlshash":"10a2b58cb24171314392a1fa903f520ff279751ce408085cf596e8ed5c7d9dca6a6fb9","first_seen":"2026-03-20T15:34:08.59785Z","last_seen":"2026-10-17T11:37:15.35831Z","times_seen":8,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieMessage/getRanking?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.074Z","timestamp":1792236984074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"POST /exchange/RockieMessage/getRanking?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nport: 2\r\nlanguage: zh\r\nTimeZone: UTC\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236983993\r\nx-signature: 5a53bc73ca7bdec76c210bec3109fcb7d5929bc4fb8e7fe55086caef9d42ab52\r\nx-nonce: 1968be670cbd4e7e896506a147a4f179\r\nContent-Length: 39\r\nOrigin: https://hrcke.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":39,"data":"{\"attentionType\":\"4\",\"rankingType\":\"4\"}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf015e7ff349c5-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://hrcke.com\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":486,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-10-17T17:48:17.532829Z","times_seen":336507,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-17T11:36:16.972Z","timestamp":1792236976972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:17 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncontent-type: text/html\r\nlast-modified: Thu, 03 Sep 2026 14:32:55 GMT\r\ncf-ray: a4bf01324ad20b41-OSL\r\ncf-cache-status: DYNAMIC\r\nage: 86212\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9571,"size_decoded":3526,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"01f7df9f3fa99a7402dd3379ce484f09","sha1":"02e0084b4c8c32e16cfa9fadfe1a458f0392b6f9","sha256":"119f7eaefaccefef1d4fa51db074c0f7c1155956efb65e5ea74cd836b93631f3","sha512":"83c96afaaf38d95402159bda0dd8a0da9ec16b646e29f6817ddbe034ded7a5003b5f41cfc3cbd1a59653c650f79ff6500981793aae868357737054ca13c53f80","ssdeep":"192:izJvptPWemaGpRscc/RhJcnzRtYLeSsqEgc66Gre6ftnRHq:7nFtYLJBY","tlshash":"ab12626909b30001557770ba5feb32456b32a107a546e89c7fce03448f8a65deab3fec","first_seen":"2026-09-17T08:23:53.112836Z","last_seen":"2026-10-17T11:37:15.359763Z","times_seen":3,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":7,"connect":24,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/main.html?#/","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-17T11:36:21.383Z","timestamp":1792236981383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /main.html? HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hrcke.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:21 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\ncf-ray: a4bf014e195576ef-OSL\r\ncf-cache-status: DYNAMIC\r\nage: 13509\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Sep 2026 08:01:40 GMT\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8934,"size_decoded":3108,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4868)","md5":"d378a04c3c091119ff750087069e3538","sha1":"b31bfecbeafd561ed9bb39e0348ff8cc47c3961d","sha256":"cf5ca4da22498361400a4d8d98ccefad2a89fa5de0bc4120b1ed36acbd1b8d25","sha512":"a88d23993cbdc23b3bc7e40866cca5339c305b3ae66fc07e45a900a5871d0ef72d7a9e761ada47f00c4073ffc951a78dcbe0448563432781d1c4d3c96afdd550","ssdeep":"192:xpRGmCRGmgRGOh5NZfx/v5+yf5VuV3ry3hy0x:PRGXRG3RGJrux","tlshash":"2a02c713963258390627413afbf77244837940d75642e8ddbd8c12c44fd2ee986b3ba5","first_seen":"2026-10-17T11:33:03.290994Z","last_seen":"2026-10-17T11:37:15.360559Z","times_seen":2,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":53,"dns":4,"connect":3,"send":0,"wait":49,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236983985\u0026x-nonce=1fafc94afbda4c60ba5040c289192dc9\u0026x-signature=f0ae60f1cfa803e71daac39014321e68ff7c6b5f2925b7468311403d10ee1c13\u0026fileId=9007944","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.065Z","timestamp":1792236984065,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236983985\u0026x-nonce=1fafc94afbda4c60ba5040c289192dc9\u0026x-signature=f0ae60f1cfa803e71daac39014321e68ff7c6b5f2925b7468311403d10ee1c13\u0026fileId=9007944 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23489\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf015e6c338be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/757647a95a604b8695468a54aa9cf1a5.jpg\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23489,"size_decoded":23916,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 900x900, components 3","md5":"a5987dbce66024d91986ead64d2bff06","sha1":"e6997ed44137afa6ffd1407083428d468ad93137","sha256":"867eebb2070d7067da55b630fe99c83ab784fe2b7d867de3852c084ad7261052","sha512":"00f537e3d2227e2c4c7d8e69fb0fac48c9c1f24b5a3183a324276d2f2d9aaf635940aa95bc1cfb20ebfdb2cf41daabc6f04a77356ffb889bfefc2614b9417ad2","ssdeep":"384:UNPPsO+ZfeXub44+6R+s++34ATTRQqIvRel/DQP2jKpD:CeZWupR+4xTTiDvRgceW","tlshash":"4eb29f8f6b4dff04c801b334c9d31968b31b8c3535a265a57692a4709f5237bbc9ea72","first_seen":"2026-09-17T08:23:53.114661Z","last_seen":"2026-10-17T11:37:15.259245Z","times_seen":3,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236984119\u0026x-nonce=fe72d552509241149827ddd1a1a6c0ad\u0026x-signature=56f19343922eaaaf6d16f4cc8b87264d2ad59c61d92ab04bcc294931703b9625\u0026fileId=9007944","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.152Z","timestamp":1792236984152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236984119\u0026x-nonce=fe72d552509241149827ddd1a1a6c0ad\u0026x-signature=56f19343922eaaaf6d16f4cc8b87264d2ad59c61d92ab04bcc294931703b9625\u0026fileId=9007944 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\nserver-timing: cfExtPri\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncontent-type: image/jpeg\r\npriority: u=4,i\r\ncf-ray: a4bf015ef83e49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/757647a95a604b8695468a54aa9cf1a5.jpg\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23489\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23489,"size_decoded":23938,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 900x900, components 3","md5":"a5987dbce66024d91986ead64d2bff06","sha1":"e6997ed44137afa6ffd1407083428d468ad93137","sha256":"867eebb2070d7067da55b630fe99c83ab784fe2b7d867de3852c084ad7261052","sha512":"00f537e3d2227e2c4c7d8e69fb0fac48c9c1f24b5a3183a324276d2f2d9aaf635940aa95bc1cfb20ebfdb2cf41daabc6f04a77356ffb889bfefc2614b9417ad2","ssdeep":"384:UNPPsO+ZfeXub44+6R+s++34ATTRQqIvRel/DQP2jKpD:CeZWupR+4xTTiDvRgceW","tlshash":"4eb29f8f6b4dff04c801b334c9d31968b31b8c3535a265a57692a4709f5237bbc9ea72","first_seen":"2026-09-17T08:23:53.114661Z","last_seen":"2026-10-17T11:37:15.259245Z","times_seen":3,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":344,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/img/bithumb.86e846af.png","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.488Z","timestamp":1792236984488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/img/bithumb.86e846af.png HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 8712\r\nvary: Accept-Encoding\r\ncf-ray: a4bf01610c7a8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 276\r\nserver: cloudflare\r\netag: \"d274eced33fd255cc05c2b414089a3a9\"\r\nlast-modified: Wed, 30 Sep 2026 08:01:48 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8712,"size_decoded":9076,"mime_type":"image/png","magic":"PNG image data, 239 x 74, 8-bit/color RGBA, non-interlaced","md5":"d274eced33fd255cc05c2b414089a3a9","sha1":"f24aefee7411e0194a2cc0b448a8b5d238ec78d1","sha256":"5a1c31c2b5ddff040dfd83713bf751dc2060e5edfec50a1f2b2802ef370bec6f","sha512":"a60fe5f592248d8eaf7ca710dc80fcf5a1b517d6e774797090bf4bc8515ce3e039721c901eae3941d381a3a90a5b94afff5bbed552c9b43eaa2a13512bac5728","ssdeep":"192:DSmdvlkRyvri5UiisiCVyRvRoiSy+eVq2rheTUD97ve2F6zto:2qlNTi5UiivL56y/1lvZUho","tlshash":"2b02afc7f1c75badc3c5e2f93dc357a90f14710023af561f1d152a25d90a66c728ae12","first_seen":"2024-10-04T11:22:09.867068Z","last_seen":"2026-10-17T11:37:15.361999Z","times_seen":11,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fgrynspan-holds-lead-for-next-un-chief-as-race-enters-decisive-stage-4954900","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.859Z","timestamp":1792236995859,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fgrynspan-holds-lead-for-next-un-chief-as-race-enters-decisive-stage-4954900 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995197\r\nx-signature: 8b1581a66acc9945993295981258d26004a85370449888cb0519bc14c65b7a33\r\nx-nonce: 31059a9f44af46ffa4c6101321fd97ca\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a81e5b49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":463,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"a63baf52bc84ad7a4d73a3bd10f4c60c","sha1":"da39553dec951f9657d7b40007bb346d3133f057","sha256":"398a8b5b1f5425a46e068e5253c60bebb1ed62d36d582e84f1627f12d513482b","sha512":"e950d628700329d033239b19ab85523f2b5d136f1365ac5eb8cd5b3acf54de9e48efeecb9f5dcd5aabee01b80dc0991de61878033be039ecb145bd8b2307584c","ssdeep":"","tlshash":"dda022ab0c03c20b2f0a0088300e3a083000880cc800ca00c8080200c0c023b80203e0","first_seen":"2026-10-17T11:33:03.411672Z","last_seen":"2026-10-17T11:37:15.362658Z","times_seen":2,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fnovavax-shareholder-shah-capital-to-step-back-from-activist-role-4954878","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.870Z","timestamp":1792236995870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fnovavax-shareholder-shah-capital-to-step-back-from-activist-role-4954878 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995198\r\nx-signature: ba598fc40261fab43ad8d5244ccc663bdf55c4569a638f66331db14e46c0c6e4\r\nx-nonce: f66755d3f8ae4206b080737be68916dc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a82e6649c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":463,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"96e8ff264c62eff9e1b4da0399acf2c6","sha1":"13b54bb0864844664757a173ef0788b7cee24c1e","sha256":"956073d78632a2233c12bfdedab70b6e8b8d488f3163f7b0b021169f248fa25b","sha512":"b9805011a94e048c9d0ef518e43dc3be2ec25425ea6277d3a44f712ffcb913eec40e9670337ece62f2b93489fb2fd6652c89afe39f7f348f94fd91fa3732bc54","ssdeep":"","tlshash":"eba022230c03c30b2f0a0080b00a32083028888cc800ce00c80c0a00e0c023380002e0","first_seen":"2026-10-17T11:33:03.406323Z","last_seen":"2026-10-17T11:37:15.363563Z","times_seen":2,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Ffaa-nears-approval-for-boeing-737-max-10-jetliner--reports-4954774","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.907Z","timestamp":1792236995907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Ffaa-nears-approval-for-boeing-737-max-10-jetliner--reports-4954774 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995200\r\nx-signature: 98116f9d7fec3363228f6b13a87c7da7223d3ae5602f7e9170483178f9a05349\r\nx-nonce: 56f066b1b2f24d419fff79d85c6a6f15\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a86e9449c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":462,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"d47a2742594132b565e2b6178154fa81","sha1":"396b9896a305677a0a59c2a8aedf3855b1a4a803","sha256":"ea73a9ccb2a65a81a924e8e639efc6d05db0bfba17c69a12fa0c3a9cdb9eafd6","sha512":"2a4be012897975f822c914af4a6d7534454b13cc09912dd5d131fcbe1cd91a8813cd34c2831f1a9f27c5944dbccdca64b25f6e6c8c4ef5d39c77767f20857adf","ssdeep":"","tlshash":"20a02233cb830e2c0f0b08803000280c088880888002e080c20083a8c0c0233c000a88","first_seen":"2026-10-17T11:33:03.395199Z","last_seen":"2026-10-17T11:37:15.364473Z","times_seen":2,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fchinese-online-retailer-temu-agrees-to-data-privacy-restrictions-to-settle-texas-lawsuit-documents-say-4954577","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.822Z","timestamp":1792236995822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fchinese-online-retailer-temu-agrees-to-data-privacy-restrictions-to-settle-texas-lawsuit-documents-say-4954577 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995197\r\nx-signature: 206e934073883679e8e5d62dd7da61ccb3c66590ded5906722a7459087139032\r\nx-nonce: f342435710a54d6a8540749131684a49\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a7ee3949c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":463,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"928114da14b48510294dc8e760b8e0ec","sha1":"9cafb51dc0d6108ee82dd365aea487ac7d477a1c","sha256":"601317d257d92a99a98ae384bac32269885dc796f4ac64cb6afdad3575a28103","sha512":"ee9b8f259ed867bdd145f2d0f166c81b5764ece5b2ee33581413560af1524dd9576a2a15870d2afeafd8f07591abd8da55bb2791778e19d179452f711e2681b2","ssdeep":"","tlshash":"c9a0222b8c03c20b2f0a0080300a320832008a0cc800ea00c8080200c0c023380002f0","first_seen":"2026-10-17T11:33:03.246299Z","last_seen":"2026-10-17T11:37:15.365456Z","times_seen":2,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Ffaa-set-to-approve-737-max-10-as-soon-as-next-week-4954715","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.909Z","timestamp":1792236995909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Ffaa-set-to-approve-737-max-10-as-soon-as-next-week-4954715 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995200\r\nx-signature: 292bd74c0f528329b5c2eb1cd4aa7c085f482390673d24c2ec48cdc553b42171\r\nx-nonce: b517b3d7b3034a74881a3231a9e99ef4\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a86e9549c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67,"size_decoded":463,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"c1db623d4dbcca920068914611c95ba3","sha1":"6740aea220d33eec4b0a9330ad0dcce9476b64f6","sha256":"080b123656ae9566f1b9330384f6ff5cb470f5e7178ea74fb127ab9350539e98","sha512":"2e700e96532c24d23ed9b265128311eb8871fe520cadb0e22f85d14e1e9780d6d95253c1d9b3152e312191cde74cd51501d858f653129226a4a112de90cae4de","ssdeep":"","tlshash":"e4a022238c03c20b2f0a0080300a32083000888ce800ea00c8280208f0c023380002e0","first_seen":"2026-10-17T11:33:03.42642Z","last_seen":"2026-10-17T11:37:15.366558Z","times_seen":2,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Feconomy-news%2Firan-war-missiles-target-saudi-oil-hub-as-yemen-conflict-escalates-4955004","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.929Z","timestamp":1792236995929,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Feconomy-news%2Firan-war-missiles-target-saudi-oil-hub-as-yemen-conflict-escalates-4955004 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995201\r\nx-signature: 8a8395fd052d13597aa51bf23ba038f403088e5486f84c31893cea26471047e7\r\nx-nonce: 40126620141c46f2aebf403016ab8830\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a88eb549c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":462,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"ebe873b44027eba91441a05bd886a8bc","sha1":"f8c08fa84dc372e0a94dbc5e1cc1203f0cd2fecc","sha256":"1ff474dc4a62323e0180dea97c09fe105879e5c41f55c0061a9772829c0ef8fc","sha512":"3bb1d8ba8c1d22f70681b1854da8ae6e45921a6fd6b80f8581e489a235a4e8ba379ccac4c4ac3a4bb1d90f168b267bb98ab4cfaa55d83476925047e8b9f43509","ssdeep":"","tlshash":"f0a02233cb830a8c0f0a0880b0002008a00080888080e080c380830880c0233800a388","first_seen":"2026-10-17T11:33:03.256441Z","last_seen":"2026-10-17T11:37:15.367673Z","times_seen":2,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/fonts/element-icons.f1a45d74.ttf","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hrcke.com/main.html?","date":"2026-10-17T11:36:21.413Z","timestamp":1792236981413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/fonts/element-icons.f1a45d74.ttf HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/static/css/app.1790755125431.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:21 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 55956\r\nserver: cloudflare\r\ncf-ray: a4bf014e296b76ef-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 275\r\nlast-modified: Wed, 30 Sep 2026 08:01:45 GMT\r\netag: \"732389ded34cb9c52dd88271f1345af9\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55956,"size_decoded":56308,"mime_type":"binary/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 18 names, Macintosh,            ","md5":"732389ded34cb9c52dd88271f1345af9","sha1":"8058fc55ef8432832d0b3033680c73702562de0f","sha256":"a30f5b3ba6a48822eae041e0ca5412a289125e4ba661d047dae565ac43b4a6b2","sha512":"e8971ae48f5287d252f5b0a2d0516091bef0d2febf7d01fd7b435e426d106fea251037439ec42c2937e934b66f38e5eb43d00a213cdf334f482f4a06b1817f9c","ssdeep":"1536:qTIRCXXCwinqtuPM16hD2N3SUjbwaST4DCJe:39GEcgD2njb5ST4h","tlshash":"0a433b32436a9be7f416047f5c1f55830a9f4f22f53dea8b83a6192514162fd0864beb","first_seen":"2023-07-07T11:51:21Z","last_seen":"2026-10-17T11:37:15.369033Z","times_seen":135,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/18075.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:23.555Z","timestamp":1792236983555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/js/18075.1790755125431.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:23 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:01:55 GMT\r\ncf-ray: a4bf015b3dc249c5-OSL\r\ncf-cache-status: HIT\r\nage: 277\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"5c47c6ad1b488769d98c24a0dfc01e85\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76943,"size_decoded":29573,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (42864), with no line terminators","md5":"5d2aa27ed01bbca9d14397a055611864","sha1":"5e7a818a1c2ec013c2271205d60d3549737609f2","sha256":"3b045c89d29010580d1f0397fa32c6e99d08f9b6d5d3ddfeed5f44f52c0d3305","sha512":"fc1277d4fde4c90128b7e2d4ea1a2154e67fa55e6e44c91fcbf39ad77821d90f0a3d90bfb5bcf31d9c41e3f19d8363529a61a166dc9c737208757a237e9a8270","ssdeep":"1536:B8rNZoqGLmnz1bJAc+wBkKO1hB9OAtmC8hzaPrekV/:B8BZoqnx7+yX+8A0C8h2","tlshash":"36734c9c96ef6dbe898b02e2561a1d4628ec03c2c1a4e598fdddbc190f9db4bd1c3901","first_seen":"2026-09-17T08:23:53.108972Z","last_seen":"2026-10-17T11:37:15.369774Z","times_seen":5,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/img/Frame-2.f87935e5.svg","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.470Z","timestamp":1792236984470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/img/Frame-2.f87935e5.svg HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ncf-ray: a4bf0160ec018be6-OSL\r\ncf-cache-status: HIT\r\nage: 276\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"f50c2b095585af3998c6312d63d71079\"\r\nlast-modified: Wed, 30 Sep 2026 08:01:46 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1545,"size_decoded":985,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f50c2b095585af3998c6312d63d71079","sha1":"32f02553dfac2907bbcd52a8d7c8e48f0fd42d82","sha256":"f1f50826a5e41addc673712dfbef2e9670a0d1328544ab9bdf8aa84203487f32","sha512":"d8d81855b7307770867808aeceff748ce45d6d7f7d109303ed89c9f57ec2806e2aa662938a337683d1b0e22e798c5b6fc79706f0cd0e7f5b338745eaaba34766","ssdeep":"","tlshash":"b431effae05816d0b50aa7da5c0866b61a8f14f7bfcd53954a01ae61fa282d64fcccc0","first_seen":"2026-10-17T11:33:03.379722Z","last_seen":"2026-10-17T11:37:15.370537Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/img/UPbit_Logo.8758896e.png","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.495Z","timestamp":1792236984495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/img/UPbit_Logo.8758896e.png HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 11520\r\nvary: Accept-Encoding\r\ncf-ray: a4bf01611ca28be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 276\r\nserver: cloudflare\r\netag: \"25c04875a2e7db8051efe0ad2489bac4\"\r\nlast-modified: Wed, 30 Sep 2026 08:01:47 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11520,"size_decoded":11885,"mime_type":"image/png","magic":"PNG image data, 167 x 39, 8-bit/color RGBA, non-interlaced","md5":"25c04875a2e7db8051efe0ad2489bac4","sha1":"2ecd2e4447be8125d204a74460293460491201af","sha256":"65a7da1a09261489fdde5d6d04164c140b66b348cca8620aae30f12caa5d9f16","sha512":"1154c314636472ec243c0257e1e316d110df1684aaf6741a7678f864cb09f6f19fbfcf28917a77c6d9904830203e50f2abfd482c8e84f6c2cc9ff5ac55e8f02c","ssdeep":"192:xSG+S86Bv7KLwU7F0uPFdVNDEYGyVH//b8oYpc2twnoGNXbe140fkiLwJY3x:Y48O6H7JP3vDEjyN/IoYjJ6Le14N1qh","tlshash":"0432bfed8bf50745dab6d0ed9b19b26cdb1c165542ef4c5c74840c20b971d027fc2a07","first_seen":"2024-10-04T11:22:09.868988Z","last_seen":"2026-10-17T11:37:15.371802Z","times_seen":8,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/boc-hong-kong-ltd.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.532Z","timestamp":1792236994532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /boc-hong-kong-ltd.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:34 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: zstd\r\netag: \"eb87d0da5e55df393b4d9b151ccf9d67\"\r\nlast-modified: Thu, 11 Jun 2026 10:27:29 GMT\r\nx-amz-id-2: va98/AP3DQ3sVH88jXj8CWy/mqbqOzs7+Qq74to7p3QCwU5q2CBoEhxAEh4Sm75oGCmdOUgYia8=\r\nx-amz-request-id: AM44K2Z7F6T6JVZ8\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-hash: eb87d0da5e55df393b4d9b151ccf9d67\r\nx-amz-version-id: Qg7rMM0YtoxsTJmb2K8G500Ovwxz4jVD\r\ncdn-proxyver: 1.70\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1232, 830\r\ncdn-cachedat: 09/30/2026 04:59:56\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 621720db9c5c216906a7f170cfedc9a4\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":582,"size_decoded":1361,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (582), with no line terminators","md5":"eb87d0da5e55df393b4d9b151ccf9d67","sha1":"5e719e4ca07a684b1e019964824c6aab045e8f0b","sha256":"72825442b16a0d9881bd8a571ac39e2947cadabb7e2c837295d2b2a0924de3f4","sha512":"3140047111de5e544eb0351a3dc429eb0cdc8726a4ebd86fde0c45ced442941df39823b0ae5cccebfe3645da16fbcdc8dbbd838b0f74ac24f26f7111c73fd3fa","ssdeep":"","tlshash":"c2f0ac7cb228901c0ce352f8cc1171d0238e80c2b3ae07ec66af9735705a9deed86574","first_seen":"2026-10-10T14:05:22.193198Z","last_seen":"2026-10-17T11:37:15.372584Z","times_seen":4,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":39,"connect":27,"send":0,"wait":6,"receive":-1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fmoodys-upgrades-cvr-energy-to-b1-on-improved-balance-sheet-and-liquidity-4954791","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.904Z","timestamp":1792236995904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fmoodys-upgrades-cvr-energy-to-b1-on-improved-balance-sheet-and-liquidity-4954791 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995200\r\nx-signature: 4ee50427a666362ab9bbdc5d0b44835252280c2d1d11d1be3ee4abeef12b8a10\r\nx-nonce: d0dfaefb91434b6d89e81ef76c00f66b\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a86e9249c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":461,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"885ffa8ff006bb2b2fdfe16d55c457f7","sha1":"1537395c58d066be3268cb1b4ec2a285e6405d74","sha256":"596c659ddc5bec16a4ff96db2567ea1d0b86e8a43b6335076f8e0796a25d74aa","sha512":"be0c4168d9353b607ce28dee1ba003aba873d4f4a73efab846ef0547eb44645e4ce247b1ae395d4f80c82fff124af8a569bf0276b6a485bea53e2fa98577c2e4","ssdeep":"","tlshash":"25a0026b4e8343591f0d54d57175694ca54da94ce455d6a5ca14564883c823780656c8","first_seen":"2026-10-17T11:33:03.260526Z","last_seen":"2026-10-17T11:37:15.373279Z","times_seen":2,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Feconomy-news%2Fwarsh-avoids-rate-guidance-teslas-roadster-turns-in-air--whats-moving-markets-4953305","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.942Z","timestamp":1792236995942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Feconomy-news%2Fwarsh-avoids-rate-guidance-teslas-roadster-turns-in-air--whats-moving-markets-4953305 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995202\r\nx-signature: ded35b1d4a8efc0293e528c8b4781d07ea7db12d284ed1cfbe8b48f5916f5171\r\nx-nonce: 0a98c6eeebb947f0b98080c6719dcae6\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a89ec449c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":461,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"4ea0622e7c32e1e4c05017b54a8fc5be","sha1":"99053db47f509e18b3efd8bb0b50f1389154ee6c","sha256":"f85f90e09d83c6c412ec1d96e9396adbcdd48a39e7ede726b002fc7481ae437d","sha512":"5811401be456f57415d7c848bf5372016e7081b09595ce4c78a3b908a5f2e1462b5e344dbcf8277d956bb133d5b7027569af7754f7a88a8faa28ef1791bf9068","ssdeep":"","tlshash":"4ca022a30e8303080f0c88c02038300c280ca008e008c280cc080a0882c023380002c8","first_seen":"2026-10-10T14:05:21.845901Z","last_seen":"2026-10-17T11:37:15.374535Z","times_seen":4,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/main.html?","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-17T11:36:18.466Z","timestamp":1792236978466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /main.html? HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:18 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncontent-type: text/html\r\nlast-modified: Wed, 30 Sep 2026 08:01:40 GMT\r\ncf-ray: a4bf013b6c0a0b41-OSL\r\ncf-cache-status: DYNAMIC\r\nage: 13506\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":8934,"size_decoded":3130,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4868)","md5":"d378a04c3c091119ff750087069e3538","sha1":"b31bfecbeafd561ed9bb39e0348ff8cc47c3961d","sha256":"cf5ca4da22498361400a4d8d98ccefad2a89fa5de0bc4120b1ed36acbd1b8d25","sha512":"a88d23993cbdc23b3bc7e40866cca5339c305b3ae66fc07e45a900a5871d0ef72d7a9e761ada47f00c4073ffc951a78dcbe0448563432781d1c4d3c96afdd550","ssdeep":"192:xpRGmCRGmgRGOh5NZfx/v5+yf5VuV3ry3hy0x:PRGXRG3RGJrux","tlshash":"2a02c713963258390627413afbf77244837940d75642e8ddbd8c12c44fd2ee986b3ba5","first_seen":"2026-10-17T11:33:03.290994Z","last_seen":"2026-10-17T11:37:15.360559Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/img/customer-service.2e327f19.png","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.062Z","timestamp":1792236984062,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/img/customer-service.2e327f19.png HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 109011\r\nvary: Accept-Encoding\r\ncf-ray: a4bf015e5c1f8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 278\r\nserver: cloudflare\r\netag: \"5d4e5e100efe15db05f77f78fae2070d\"\r\nlast-modified: Wed, 30 Sep 2026 08:01:48 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109011,"size_decoded":109377,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"5d4e5e100efe15db05f77f78fae2070d","sha1":"4c825fa2366ba3816546e3174865ba336d6cfca7","sha256":"b82338cdafe940ea5c9db40e15e0c9d626473027a8a55feee3205c54f810c049","sha512":"25c0cd21b6d25c312ef530cabeb3c3aa1070fe5bf3f7a44ac3b8aeddb5ea196560e17cc454fab051d11e22e08cf6fb45488cbdc20f1a8738967c73fc1a5086ee","ssdeep":"3072:N1UFh/Q4Em/2xmdnPOPROe5b4Q3RjteQ3p:N1UFNQ4Emzdn2c0Mohvp","tlshash":"dcb312cb3eed6f5ea03bc50d56d2a9cbc8bc81e568109c7584b4a1dc6c0dece95813a7","first_seen":"2026-10-10T14:05:21.840805Z","last_seen":"2026-10-17T11:37:15.375261Z","times_seen":4,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/img/korbit.f1c45f0c.png","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.490Z","timestamp":1792236984490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/img/korbit.f1c45f0c.png HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 8235\r\nvary: Accept-Encoding\r\ncf-ray: a4bf01610c858be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 276\r\nserver: cloudflare\r\netag: \"2b6e3888a19702cd9bbff2a0f922d1a2\"\r\nlast-modified: Wed, 30 Sep 2026 08:01:51 GMT\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8235,"size_decoded":8599,"mime_type":"image/png","magic":"PNG image data, 303 x 74, 8-bit/color RGBA, non-interlaced","md5":"2b6e3888a19702cd9bbff2a0f922d1a2","sha1":"f405241a4cc88ab36819d8b24bf5141bff4d4ab3","sha256":"f6746c80eac719cc5783ac81cd4cb04168f6e28cbac459764fd033a04d96f75f","sha512":"be01f14397a000184e2a3d786c5178b3b2a4f52c987c68c96235f4ddf7167937e08d1ebb38fc9ee9737be409f9545fbe185736079587f7fbc49edbb1cba3ce33","ssdeep":"192:RdpHGismjI2Zx7AVteuaA8uwtZS/NG6A/SEl3ky94Ljj+l:XdGY/POYpA8ftZSjIRkUkul","tlshash":"2202cf6f91d7cf2688c384e75315e213588677dcf798018b885f264ed9f32ea92e9c06","first_seen":"2024-10-04T11:22:09.863969Z","last_seen":"2026-10-17T11:37:15.376018Z","times_seen":8,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994648\u0026x-nonce=7936495fd5e342e8aece748802dd5620\u0026x-signature=eedd4c65eacdb99e0563f233c9bac53893108173230ad3a3d4e1bc874474a239\u0026fileId=9007624","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.853Z","timestamp":1792236994853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994648\u0026x-nonce=7936495fd5e342e8aece748802dd5620\u0026x-signature=eedd4c65eacdb99e0563f233c9bac53893108173230ad3a3d4e1bc874474a239\u0026fileId=9007624 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 164785\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1cf928be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/1a0a0556b49e42b4b12a620da71f8d9a.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164785,"size_decoded":165212,"mime_type":"image/png","magic":"PNG image data, 2400 x 807, 8-bit/color RGB, non-interlaced","md5":"730dcd397c89f06d3c09cfb37e36d451","sha1":"d9713e1dac9d0102125bab344083dfc09513c418","sha256":"08300746dadde677429438db637567f66829cf5c8e7f89a06d1182de16dd681d","sha512":"73b531921ff5e58cc3bdcf89a7ecfb53dd4d1b904e29ed27a2677180f86ec0fa1698e6139de58089fdbd4d8f8018827c39152998f22ae57cc7211a100405410e","ssdeep":"3072:lUBzXSGX37CzprLr5KSUxeMOH8H0LlN8wIxuZnb4wO0rU+R6epMPIqy/3:WtS037a51JH8H0n6Anb4wRr/R6qwy/3","tlshash":"0cf302d941825cbad04e5331e4d17b76373c0bb456370bf5e3aa43a628deab25c82b94","first_seen":"2026-10-10T14:05:22.116891Z","last_seen":"2026-10-17T11:37:15.376739Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1138,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fcanada-stocks-higher-at-close-of-trade-sptsx-composite-up-011-4954813","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.896Z","timestamp":1792236995896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fcanada-stocks-higher-at-close-of-trade-sptsx-composite-up-011-4954813 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995199\r\nx-signature: d5fc4a5c670aab4f4b537901c23075ad3dc6d0316c231d50ce5bb9ee819e4019\r\nx-nonce: 29ed6cad275943d4b2e9513f82932b5d\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a85e8449c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":461,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"85cf07402caeebdfd74ff1eef33350be","sha1":"f716b3ba33c0300143678f60f36306071621f474","sha256":"8ff9c77f433c8b3f0e894fd35c5e81624b8cccb02e781de5b38c2ef6752e3607","sha512":"432608977a81d15ea80ac4bc9897d05ae34dd561fcf664cfa685bb152ba7fff5591e2b0dcf8293f4f07bfce86f8cc4037ac060580174d9d049b7f8d13b93ffaa","ssdeep":"","tlshash":"f8a0222b8e83038c0f0c80c02032300c200ea008e000c280ca00230883c033380082c8","first_seen":"2026-10-10T14:05:22.022216Z","last_seen":"2026-10-17T11:37:15.377445Z","times_seen":4,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fbrazil-stocks-higher-at-close-of-trade-bovespa-up-054-4954805","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.899Z","timestamp":1792236995899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Fstock-market-news%2Fbrazil-stocks-higher-at-close-of-trade-bovespa-up-054-4954805 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995199\r\nx-signature: d34ca494671722afa3ae4113929880d68a43110bba77b56b3bef6d01ac83b6f7\r\nx-nonce: 7bb03ca995e84187891d39591a2d4ea9\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a85e8a49c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73,"size_decoded":469,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"072d858c21a9bbcae9eff7425869c278","sha1":"43c91303975b0a2f7c39fccf4783d065d2c9b951","sha256":"175bca62c3958706d0404943462445bad0bba112e93a36c33254971fe8171183","sha512":"0e01c3812d3bda726c49da05aef5df851e2fad0fe62a1225f4422c662924a1821176aa001f33b3db7df0013aa1fb30701be5c5b9b69e62697171677390f7f526","ssdeep":"","tlshash":"a1a022328b83038f0b0802c0b20aa23c38c0000ec200c0e8c22cb8ac88e002300a038e","first_seen":"2026-10-17T11:33:03.259454Z","last_seen":"2026-10-17T11:37:15.378178Z","times_seen":2,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Finsider-trading-news%2Feeme-energy-spv-i-buys-142m-in-xcf-global-stock-93CH-4955244","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:35.965Z","timestamp":1792236995965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/RockieNews/getPic?link=https%3A%2F%2Fwww.investing.com%2Fnews%2Finsider-trading-news%2Feeme-energy-spv-i-buys-142m-in-xcf-global-stock-93CH-4955244 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236995203\r\nx-signature: a111588bff8d99d4ce360329dfb8a3605b4e6896d7b957bea39b7f02aa2d276a\r\nx-nonce: 22bd5f51053f43dea6be45243039e6f9\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:36 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf01a8ced549c5-OSL\r\ncf-cache-status: DYNAMIC\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71,"size_decoded":467,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"ecfd2f921c200bcf46926d36e0657c34","sha1":"2901933969a377c0b4c69561f6752295b43a226a","sha256":"e71d4fc0f19134a7f4dfced15d0e7264185608526cf4856357c3ed7e7b015e9f","sha512":"da33789872d51e9282e9770784e39d433031e97a5d356f0a9e65a94fa95bc4ea6072cfd5e01777390051c3942c3310e7bb9832b1b6daa4310d9af967074f9830","ssdeep":"","tlshash":"d8a022b3cf830b0c0f0e08c030382a082008808ce220e280cb00838c82c0233a00028c","first_seen":"2026-10-17T11:33:03.431833Z","last_seen":"2026-10-17T11:37:15.379755Z","times_seen":2,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/39229.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:23.570Z","timestamp":1792236983570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/js/39229.1790755125431.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:23 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:01:57 GMT\r\ncf-ray: a4bf015b4dc949c5-OSL\r\ncf-cache-status: HIT\r\nage: 278\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"eb800851f2d071888b8984be67bb52a8\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":318894,"size_decoded":85881,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"eb800851f2d071888b8984be67bb52a8","sha1":"0586686bd7377ed2095c7e4bfa8e48951746daee","sha256":"f13eb93b6b7d4fea94d23739a0261fecb346ff2023506cc9c9c7ceea7a63be8b","sha512":"69d518c560ada2594cf2d8be3b46969a44a77f125f68acb543f7fcfca2b1feff2f998a0f28dae2cc2f4690e3aa0cae01839d32a4a6c234809eac1f2e2bd799d6","ssdeep":"6144:p7jnaiHBkTszUnw0ElkPD5srvCn+iNuCb5JrRhg:SssTFyoHq","tlshash":"5b644ad57390f061539740e6a07b1007f3352929781c80a8f3acdce7b96aa8e6677f79","first_seen":"2026-09-17T08:23:53.129728Z","last_seen":"2026-10-17T11:37:15.381213Z","times_seen":7,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/static/js/49559.1790755125431.js","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.128Z","timestamp":1792236984128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /static/js/49559.1790755125431.js HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 30 Sep 2026 08:01:58 GMT\r\ncf-ray: a4bf015ec81a49c5-OSL\r\ncf-cache-status: HIT\r\nage: 276\r\nserver: cloudflare\r\ncontent-encoding: br\r\netag: W/\"1d6429f252c88aedadbb39bb56ab5652\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12596,"size_decoded":4039,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12596), with no line terminators","md5":"1d6429f252c88aedadbb39bb56ab5652","sha1":"396bb922a9e6873aa1bb103d5578b651475b9c44","sha256":"b48b3edd04c61a8fbb67045957f34340ae02026de356035d04e667f12dc83866","sha512":"fe59ad8ff189aa24df20ffdd66d3676d0c0c52b9abf11142fb7d7166881fa8a18b99a372ae0baf90055e68143d858ca0afb4aa1e6062db3053ab324aa6b9fe5a","ssdeep":"192:pVZXFVU5YSt9XEk/K5ZKHVY2S9XONs8uvzBWt26Xza/NgBevqXlctp9Xx7:t2f9/QwZqeNs8kove/GkvylOpn","tlshash":"1b420819f2d6681f8d8f4439201f470152662e89b886841db3bcdef489b9c18b27df79","first_seen":"2026-10-10T14:05:21.904285Z","last_seen":"2026-10-17T11:37:15.382096Z","times_seen":6,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/RockieGoldNewStockController/tickerHot?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:24.595Z","timestamp":1792236984595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"POST /exchange/RockieGoldNewStockController/tickerHot?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nport: 2\r\nlanguage: zh\r\nTimeZone: UTC\r\nx-fingerprint: efc53cd30b8f258139db34bcb9434713\r\nx-fingerprint-sign: 3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\r\nx-timestamp: 1792236984466\r\nx-signature: 45116467c1dc9ecb8690eaf51b78fb22cf0b83dce86e421f99115ff312174e5d\r\nx-nonce: b0319f927ce647deaf7fcfc6682ed296\r\nContent-Length: 50\r\nOrigin: https://hrcke.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":50,"data":"{\"page\":1,\"size\":6,\"coinName\":\"\",\"countryId\":\"39\"}"}},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 17 Oct 2026 11:36:24 GMT\r\npriority: u=3,i=?0\r\npragma: no-cache\r\ncontent-type: application/json\r\ncontent-encoding: zstd\r\ncf-ray: a4bf0161b9c249c5-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://hrcke.com\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4538,"size_decoded":1626,"mime_type":"application/json","magic":"JSON text data","md5":"caf778b75c2415da8cff5e7fd7ddfd56","sha1":"0a2ec7406d326c229dc9db9f3ef67b898befa148","sha256":"9f77be113421524bbb6ac3967e5131bbc07587b674d1004c48c422d15ea01824","sha512":"57864991b951d5a446256a63d7c70ba2e3acf3341884eae02142b3b5f2899c3d0f495b443d8e0f0b687b33250a01b24cc9e7de1cf436bd7afaddbe0e348ca20c","ssdeep":"96:m0N8AQzvBd7XP8+yQEu64oPl6k5LbnZzAFgJpgeJ2UC/Oa7:mnrxK1HbJMpUO","tlshash":"4f91abefc359f52a9f2071e143333a3040b4334b2ba5e947b9da885a16d5cd71c04b26","first_seen":"2026-10-17T11:33:03.443526Z","last_seen":"2026-10-17T11:37:15.382945Z","times_seen":2,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994645\u0026x-nonce=3ca0bd12cc654c888710dae108e60430\u0026x-signature=a48139ff80c216f3d16ea84bf41773b864e966aebfe52fcd2f4bee8280110af3\u0026fileId=9005138","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.839Z","timestamp":1792236994839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994645\u0026x-nonce=3ca0bd12cc654c888710dae108e60430\u0026x-signature=a48139ff80c216f3d16ea84bf41773b864e966aebfe52fcd2f4bee8280110af3\u0026fileId=9005138 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 2674\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a1bf4e8be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/9587f17842394848b19e39b480629fdf.png\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2674,"size_decoded":3099,"mime_type":"image/png","magic":"PNG image data, 140 x 30, 8-bit/color RGBA, non-interlaced","md5":"9b3df9ee066ad89626bceb6dbcf5d25f","sha1":"9c72ba42900332bd0c7b33d0f1e732a946585743","sha256":"00dcf44f3e7ba87b9f5acfddf9338031c24e24418a1cf4528562b6f5b0f43fb6","sha512":"56d4f638080d01560a832ff327d128d1123867fcae6a7f2eeed16f672ddc4e4577414c7d64875a43bdd339e2f2e2ed550e9ff514d4c326eda32fb47115b08529","ssdeep":"","tlshash":"77513bc07c197cbe8aa98a9d4709b635f2c02d8e43e3a70c479997b42a58ec12915667","first_seen":"2026-10-10T14:05:22.166542Z","last_seen":"2026-10-17T11:37:15.384694Z","times_seen":4,"resource_available":false,"data":null}},"time_used":739,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":739,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hrcke.com/exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994810\u0026x-nonce=b85d34d74e5b4bc6a137b39634ae280b\u0026x-signature=cb0874d281dafe4949b59ca94f41a033397fa6488064600ddb2f8cd03666c5ba\u0026fileId=9008063","fqdn":"hrcke.com","domain":"hrcke.com","tld":"com"},"ip":{"addr":"104.21.79.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hrcke.com/main.html?#/","date":"2026-10-17T11:36:34.996Z","timestamp":1792236994996,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hrcke.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 12:34:27 GMT","end":"Tue, 05 Jan 2027 13:34:23 GMT"},"fingerprint":{"sha1":"E3:AB:1E:4A:23:8A:CC:E4:28:85:DB:A6:E9:A9:E7:77:35:9E:1A:44","sha256":"E9:97:F5:CB:DC:4A:13:E0:34:EF:38:83:53:64:78:0C:0A:3F:95:14:BB:07:A6:AB:7F:05:FC:69:CF:CF:18:04"}}},"request":{"raw":"GET /exchange/rockieFile/getFile?eOR8hKy4IgKcEuUB66jf0BeqgVgdLxN2=uDFGNy36n8x7yjZ6nufM06lCTrPIwtQ8\u0026x-fingerprint=efc53cd30b8f258139db34bcb9434713\u0026x-fingerprint-sign=3ef54df2787bef80a5f005cd66115fa763e5d0e0511f7bfc04dc4692a28dda1c\u0026x-timestamp=1792236994810\u0026x-nonce=b85d34d74e5b4bc6a137b39634ae280b\u0026x-signature=cb0874d281dafe4949b59ca94f41a033397fa6488064600ddb2f8cd03666c5ba\u0026fileId=9008063 HTTP/1.1\r\nHost: hrcke.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hrcke.com/main.html?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 17 Oct 2026 11:36:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 43691\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-ray: a4bf01a2ba728be6-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"uploads/all/ea9aca0edd254bed804d22918b413d2f.jpg\"\r\nx-xss-protection: 1; mode=block\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43691,"size_decoded":44118,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x564, components 3","md5":"dc76493a0c295c3089c1ce4e6a714f9d","sha1":"eb8cad6eb3ec0ce374c4b2ce022fd522dfdd2f12","sha256":"0672d38657849f639f9acc6a710dcd7217de36bc7119737bc827c26713292dd8","sha512":"412f23c000eeec6ac49fb0740db87f398f0dd123ae2b3157a5d4f1a01a72fd8f3e5b477c7e7e6e9354149588d10ae44df7b982c9407dbab1cf846f1a15a7f2c5","ssdeep":"768:426Xb4wkKqc5ukurw1xWh5ukWLCS+A/F5kXy4hCjQ/i64t6SkgN8PwlFNBd:42q8wkKxukurw1fEukXVXizMg+sNBd","tlshash":"ea1301d5fe2b6206c15c76bad0ebd7ca1f94ec0a89d70aebdce030e165e221844453ed","first_seen":"2026-10-17T11:33:03.26927Z","last_seen":"2026-10-17T11:37:15.38574Z","times_seen":2,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":323,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-17","alert":"Sinkholed","trigger":"hrcke.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}