{"report_id":"eb687f85-a909-4b65-8f42-45a66e75621e","version":0,"status":"done","tags":[],"date":"2026-09-04T14:54:09Z","url":{"schema":"http","addr":"hgeoyys.com/","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"172.67.169.227","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hgeoyys.com/","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"title":"Facebook Trading Platform","dom":{"size":23448,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (591)","md5":"b54a22c00fdad88687a6ac1a1e8cec99","sha1":"136648d5467a42a123e7884f8eb9ce64a3b5652f","sha256":"de7ae5c0d67cc876afd593c5c8b629f5897f1b637e217645c636abb2d8c841d4","sha512":"4cf5d3ca3c5a34d8ba7ea5971e00e7d24a76f56d6857e6d5980d3004e9cecea5424bf3a46d46e36418d2855cf7381e265f3c43b114b0083c3a22817c2963f38c","ssdeep":"192:p4J3S22L6js9uVdyuSlx6TZQMbC4Emm31r/Wi93CsSl71eOuyE7iL:p9R9uVIuSlMTZQMbCXH93CsK1eK","tlshash":"17b23d3060f925b71183d1d6ea656a1b7ed1ea7bde4b060532bc0be85fd3c81cd2b548","dom_hash":"domhasha46cb7fce22929134a46bc1914cc8914","first_seen":"2026-09-04T14:54:10.707481Z","last_seen":"2026-09-04T14:54:10.707481Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hgeoyys.com/","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"172.67.169.227","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-09T14:54:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"hgeoyys.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hgeoyys.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-08-31","domain_rank":0,"first_seen":"2026-09-04T09:10:23.622514Z","last_seen":"2026-09-04T09:10:23.622514Z","alert_count":90,"request_count":18,"received_data":624278,"sent_data":8459,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":13319,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":2,"received_data":68878,"sent_data":1143,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hgeoyys.com/js/script_land.js","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3129bd3960af423b67435dbe977b2e45","sha1":"a21c7ebea2ab16c8986850f512492ceddfd8eb54","sha256":"b7ae8da72d40528e8ec940f4125b04b85cc7d7a1eb59ff3283ef6bcf13ce15f5","sha512":"ca56b735ed086407ef8c56f2e0ad46a4ab94b54546cb5b7d264ff19c7db070bb5b97d806dc978d8b660ca28e1e52a9b437ce7e3ac1d7173eb1a4b9b345f9717f","ssdeep":"96:mvt/s1eSOwSdosRGCzi+LxjTIHt3lQp0MQ18HvkuNUpmjRanYMzuDwBDQgtL9Jpf:S2SdoQvi+tTIHt3lQp3QKNWtCuDQgws","tlshash":"fdc16360e7ad30760bfd10fa6ce5528b68bd403a3d0ddca94c5c591a20e6edd8bb0b58","size":5785,"data":"","first_seen":"2026-09-04T09:10:29.361166Z","last_seen":"2026-09-04T14:54:10.723153Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8234ffb82688e4fb1b4c2b19e560eef3","sha1":"763f7ab244a3287bc32103430ad7349fa9f7a3fd","sha256":"48a7cccbced9af391e249f106a862effa19e9ffbacbc4dc72c0d15013a835622","sha512":"4a50ca7fe945fbb377bcbd58624165250872bebb9d3a5501a44c3bbbfd5f8098fde91d12a20ccc166794eced4447d702b446f4a1d153578b9f7c753ee9b17e7a","ssdeep":"","tlshash":"cf31029c74f260658127742d0fdf4219fa36a1432559de887dac82a02f96c39c6a2aad","size":1638,"data":"","first_seen":"2026-09-04T08:49:11.206011Z","last_seen":"2026-09-04T14:54:10.749152Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/js/utils.js","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e6862227059899601fcaff861bf65f23","sha1":"d23a3bf999cbcf12672e46761212e5ed7a819e50","sha256":"99bd3fdd917055947e745b695f2635fccbb60b3ef37fd7717d95b4401c202214","sha512":"ce012bd347f03c29d68ed5c4f57b29f61050f5c9c6454a2512d263d8b8e415fc2dd576aa156bb42215e670a636a53152ee67bff7133d47afa87c09bb1ff88628","ssdeep":"3072:9klM0LDKjFs3OwPss3MwPodGsVntS33WMfMuihvd/AIAyX5SGmLtjo/QQEV0IQmA:9klMuDOgsU3WMfMui3y4ou","tlshash":"cb44f0ebd63c9737a1d87b35968eb3cd5a8cbca3c858567826c3b54f52788e0706c205","size":268210,"data":"","first_seen":"2026-03-21T19:29:13.356546Z","last_seen":"2026-09-04T14:54:10.717853Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/js/jquery.min.js","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87532,"data":"","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-09-04T17:18:19.174561Z","times_seen":31698,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/js/script.js","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e90016142e2f5964dbd535180377b096","sha1":"45890a8b1880c46964c4fdb420dce52c7c0165b3","sha256":"d0976603612d105286195f1db324a405d25a8639ef560b3547ce00b11209c8d7","sha512":"9aeb21bd8066fde612795827ebbfb9d9f55b09544c2e9b1eb030316baee763afec79610371a132c50da5179e1510bea2b046546e55c621d048c38cfd98bf4109","ssdeep":"384:ikORgXnkl8BiRfX4AuBWUFv5fPzQzd8wcONmsEyyPnFQQuago/PRandcAi:ikOZ8BiRwAOPzs5msEyy4VcAi","tlshash":"fca273a3320f06668fe832d7b4b89705f97cc261fc43c2b679ac1c1d62e5901db79999","size":23213,"data":"","first_seen":"2026-09-04T09:10:29.356483Z","last_seen":"2026-09-04T14:54:10.728699Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/js/intlTelInput.min.js","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dbb0be479a528255a35f2bb155525ba","sha1":"d14cf0bad49817f1ceb20a54eb9de24a59485eb7","sha256":"b3203c8bc5a7433aa901414e192bcdd9f3711464cf00d56524f2a7a0ffbec286","sha512":"9f8f9c42bffc6a5023b63ed44bd41dc102ea6ffac62801733c8f2544d0f77b052a55e01d100613f261ecfa769c452175764eb3a87812ee1d6c75dc5b0b89fafe","ssdeep":"768:0DJ0FRsgHlR5K2KOnxGlbxWQDjaD1v0CnCpCj7MSUrqU8PqXhOubH:0LgHlR54u4lbxWQDjUvUrIMoubH","tlshash":"0f23d57da356772aabfe8146a4e4a0829e6f7a411844487c7dbc8fcb1498cc375b3734","size":46955,"data":"","first_seen":"2026-05-10T21:32:02.484642Z","last_seen":"2026-09-04T14:54:10.726187Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hgeoyys.com/images/flags.webp","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.557Z","timestamp":1788533619557,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hgeoyys.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 07:57:10 GMT","end":"Sun, 29 Nov 2026 08:54:52 GMT"},"fingerprint":{"sha1":"2E:85:B1:A5:A6:77:9E:F4:19:60:30:DE:F6:82:4F:E5:03:15:B7:62","sha256":"98:FD:F8:2B:5C:6D:7A:99:7A:B6:0C:2E:60:AD:4E:84:9A:ED:A2:ED:D4:9E:05:09:B4:4D:20:06:AA:A0:3E:38"}}},"request":{"raw":"GET /images/flags.webp HTTP/1.1\r\nHost: hgeoyys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgeoyys.com/css/intlTelInput.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T19:58:34.977728Z","times_seen":18279333,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"hgeoyys.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/css/style.css","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"104.21.87.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.343Z","timestamp":1788533619343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hgeoyys.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 07:57:10 GMT","end":"Sun, 29 Nov 2026 08:54:52 GMT"},"fingerprint":{"sha1":"2E:85:B1:A5:A6:77:9E:F4:19:60:30:DE:F6:82:4F:E5:03:15:B7:62","sha256":"98:FD:F8:2B:5C:6D:7A:99:7A:B6:0C:2E:60:AD:4E:84:9A:ED:A2:ED:D4:9E:05:09:B4:4D:20:06:AA:A0:3E:38"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: hgeoyys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgeoyys.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:53:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 10:25:18 GMT\r\netag: \"6a609a8e-b2ac\"\r\ncontent-encoding: gzip\r\nage: 1281\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l2xLcR39SJ2VtCJF0%2F0AGA0p6XCZILdA2w93R2kgZylDGJEWkd%2FookKClmVmHo05tGxa8OkesytxcpO%2BeFSj1i1yMPm5pExRCEeS3eHaqrWc8NfVGikQpa5CaG5kuQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35dd330ed05b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45740,"size_decoded":8162,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"e82e8d5a69c675ab1d3b0d473635b5d1","sha1":"6eb93cbe33c0755b053bee0fd39d1b0eb63295c5","sha256":"d30c270927f7725c68637d958963cbea7eb8756d7d8cdfa44258369eec19ee7e","sha512":"d35fa32627ccaa151af5b340c142470aaab55906bf50a8644efc8b3cc4850478e5475e89c58345bd5a755245f6ffd61890dad3c9d8024d4177122e4fa9e50226","ssdeep":"768:jEK4hUUYApGpdUfioAMYuwzbI6rwrb2AwC4hUUkApGp7UfioAMYuwzbI6rwrb2D:jEK4hgAYdURFYuwzbdrwv5wC4hsAY7Uc","tlshash":"d12344d62bb90504b91bc8983892cf56731c8453d00fde7cabf1207c9e891da69b7b9d","first_seen":"2026-09-04T09:10:29.377249Z","last_seen":"2026-09-04T14:54:10.712338Z","times_seen":3,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"hgeoyys.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/images/Apple_Pay_logo.svg.png","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"104.21.87.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.371Z","timestamp":1788533619371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hgeoyys.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 07:57:10 GMT","end":"Sun, 29 Nov 2026 08:54:52 GMT"},"fingerprint":{"sha1":"2E:85:B1:A5:A6:77:9E:F4:19:60:30:DE:F6:82:4F:E5:03:15:B7:62","sha256":"98:FD:F8:2B:5C:6D:7A:99:7A:B6:0C:2E:60:AD:4E:84:9A:ED:A2:ED:D4:9E:05:09:B4:4D:20:06:AA:A0:3E:38"}}},"request":{"raw":"GET /images/Apple_Pay_logo.svg.png HTTP/1.1\r\nHost: hgeoyys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgeoyys.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:53:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 21 Jul 2026 18:42:30 GMT\r\netag: \"4fde-65723629a1180\"\r\ncontent-encoding: gzip\r\nage: 1281\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=We2pPuBHKHClc2tBXcRWF7tfYtJV25Ejei5O8YCAJeRgA%2FLBA3HpbtbX29C1UZr2FLHjaMxTWCYxVaPAteuUBaaMCX3Swat0BJEBvV8TwMAeF4n6hQg%2BGXUyQKKVtg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a35dd3311d15b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20446,"size_decoded":20910,"mime_type":"image/png","magic":"PNG image data, 1280 x 526, 8-bit gray+alpha, non-interlaced","md5":"9194740a8e35e83955e3be6c6f3eda91","sha1":"52388f5deaa5919fb9cc1766e86dbd05ddcada0c","sha256":"5e76ca7d90f4fa1215720d12296cf00c42a774ed728b209811adfbea4fbe25a5","sha512":"505a10287ea09b025c7f8df34205cc977c9c33c9500d7e26a963e223997a3663f42f3076be532a9148c7c1cfb05639aed0a6b6eac8753931ba4d9ac23c69c0bb","ssdeep":"384:bJzts+xUkIFys42JzUZ5xEpQ+nT21OvMCWUbdhUFu/QR6/Zlbf0MzlSbqJ/ZYdWa:dC+1y42tUZ5URnTzvFbgFuF/4wa6hYdP","tlshash":"5d92d06630ebc50c67d23f62b4e5095cd31e37e409f55b19609a6688a037eb8fecde10","first_seen":"2026-09-04T09:10:29.3978Z","last_seen":"2026-09-04T14:54:10.713619Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"hgeoyys.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/images/facebook-icon.svg","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"104.21.87.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.372Z","timestamp":1788533619372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hgeoyys.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 07:57:10 GMT","end":"Sun, 29 Nov 2026 08:54:52 GMT"},"fingerprint":{"sha1":"2E:85:B1:A5:A6:77:9E:F4:19:60:30:DE:F6:82:4F:E5:03:15:B7:62","sha256":"98:FD:F8:2B:5C:6D:7A:99:7A:B6:0C:2E:60:AD:4E:84:9A:ED:A2:ED:D4:9E:05:09:B4:4D:20:06:AA:A0:3E:38"}}},"request":{"raw":"GET /images/facebook-icon.svg HTTP/1.1\r\nHost: hgeoyys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgeoyys.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:53:39 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s3rxGiiz193tuAuyn0FGkDOtg%2F3t4iqAEq%2BGIlHZWq%2B022gpE8wjoiDEf6W820JKqsBYkMep0u63htXwfazjUhVl1w%2BvIFLwjEhXM%2FOj7jrzwPRbNFjyzB7NPXFfKA%3D%3D\"}]}\r\nlast-modified: Tue, 21 Jul 2026 18:43:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nage: 1281\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"47b-6572364cea4c0\"\r\ncf-ray: a35dd3311d16b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1147,"size_decoded":1345,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a5300d49266a652ad4b8f0612b288f78","sha1":"8c1eb172301af60ebd3c3b1e490958f69188a309","sha256":"8942790864a4fbd06b71faee059676baa99b871b678dab9623024e8945f3ed3b","sha512":"7f07de14802d813b2f888e5d030ae8d2b8d1e54939f276de0e7a1a5c1476665f53ef0d85b46d4dcf77787adddae94904242109d8a2dad6adfb64527e5ac2abb2","ssdeep":"","tlshash":"51214780d150167c859783effbb46cc8146e20db75a50ce942e4563660632da92743cf","first_seen":"2026-05-03T04:05:03.462526Z","last_seen":"2026-09-04T14:54:10.71642Z","times_seen":5,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"hgeoyys.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/js/utils.js","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"104.21.87.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.594Z","timestamp":1788533619594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hgeoyys.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 07:57:10 GMT","end":"Sun, 29 Nov 2026 08:54:52 GMT"},"fingerprint":{"sha1":"2E:85:B1:A5:A6:77:9E:F4:19:60:30:DE:F6:82:4F:E5:03:15:B7:62","sha256":"98:FD:F8:2B:5C:6D:7A:99:7A:B6:0C:2E:60:AD:4E:84:9A:ED:A2:ED:D4:9E:05:09:B4:4D:20:06:AA:A0:3E:38"}}},"request":{"raw":"GET /js/utils.js HTTP/1.1\r\nHost: hgeoyys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgeoyys.com/js/script_land.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:53:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Jul 2026 08:18:47 GMT\r\netag: \"6a607ce7-417b2\"\r\ncontent-encoding: gzip\r\nage: 1281\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FN6a0YzLufpZ6%2FRdR8zrQGWDaTqPeO%2B3z9oj8mWUD76mneCL7VdMoUFlA7PH9XqAQU9w7fjkF30SUvN3fcXLZsvUVaYFtXm4pgGqTC4EiDawCg6pzdLZ0E5JKvef%2Bw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35dd3327d3fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":268210,"size_decoded":79509,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"e6862227059899601fcaff861bf65f23","sha1":"d23a3bf999cbcf12672e46761212e5ed7a819e50","sha256":"99bd3fdd917055947e745b695f2635fccbb60b3ef37fd7717d95b4401c202214","sha512":"ce012bd347f03c29d68ed5c4f57b29f61050f5c9c6454a2512d263d8b8e415fc2dd576aa156bb42215e670a636a53152ee67bff7133d47afa87c09bb1ff88628","ssdeep":"3072:9klM0LDKjFs3OwPss3MwPodGsVntS33WMfMuihvd/AIAyX5SGmLtjo/QQEV0IQmA:9klMuDOgsU3WMfMui3y4ou","tlshash":"cb44f0ebd63c9737a1d87b35968eb3cd5a8cbca3c858567826c3b54f52788e0706c205","first_seen":"2026-03-21T19:29:13.356546Z","last_seen":"2026-09-04T14:54:10.717853Z","times_seen":14,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"hgeoyys.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"104.21.87.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-04T14:53:38.457Z","timestamp":1788533618457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hgeoyys.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 07:57:10 GMT","end":"Sun, 29 Nov 2026 08:54:52 GMT"},"fingerprint":{"sha1":"2E:85:B1:A5:A6:77:9E:F4:19:60:30:DE:F6:82:4F:E5:03:15:B7:62","sha256":"98:FD:F8:2B:5C:6D:7A:99:7A:B6:0C:2E:60:AD:4E:84:9A:ED:A2:ED:D4:9E:05:09:B4:4D:20:06:AA:A0:3E:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hgeoyys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:53:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: zstd\r\nlast-modified: Thu, 23 Jul 2026 14:38:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=egDH4EBRAAVJ4DUEnDQQuz2CvE%2FQFYUltlsbu%2BgMEEY8ossJ4fR8hJ6oPvEim72m2wSFrmFvlQiWeTjsiSJc9KUXXKfB6%2B9lEia44lFUjAKb2ECbvPBUjRqh8LVePA%3D%3D\"}]}\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a35dd32b8c11b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":23220,"size_decoded":7246,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (510)","md5":"fda20afc6821c4a9bcdc2e5bcde6bcb7","sha1":"7e3516b084a477cad4af23bc0852caaeb6296cbe","sha256":"5e199ab941c769c04c7f6edd3b5c3bf0b1e17e895521137a6a28cb50dd1145d6","sha512":"67354321c2c73d186879d87f8a48fe1138c99abf3fd685c40a6d5beab5e3840f57346b3bbcd4736bcc46d538a7d88268c4132a152aebb1852147e90e1be6579f","ssdeep":"192:5w6xS2YL6jf9uVdkUIlx6TZiMbC4ECmE9/Wi9FCsSl7D8OuyE7i8M:5YG9uVWUIlMTZiMbC2H9FCsKD8FM","tlshash":"bea23d7060f925b71183e1d6ea656a1b7ee0e67bde4b460432bc0be45fd3c81cd2b548","first_seen":"2026-09-04T09:10:29.393342Z","last_seen":"2026-09-04T14:54:10.719665Z","times_seen":3,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":6,"connect":13,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"hgeoyys.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.341Z","timestamp":1788533619341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgeoyys.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 04 Sep 2026 14:53:39 GMT\r\ndate: Fri, 04 Sep 2026 14:53:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":1486,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4b1d52c19ccef2398d1de007b3c9a55c","sha1":"c57fa2bcac927a7d60c526cb7ec2b6249019dfe7","sha256":"05f842619ec9f615de0b749034eadaea60e3554d798683fb01ee1eb27abd1e68","sha512":"9dfc4ab3832325eb1438bd85674e15ceb62771b94f06ea8e48a2e286453d571218df3f6727b8df4c1bdfa47218eb5fed0298601da289391a736a76a230d68c3b","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:vXuM0p2+g7r","tlshash":"1e427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T22:54:08.549336Z","last_seen":"2026-09-04T19:22:49.166978Z","times_seen":18719,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":18,"send":0,"wait":37,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/css/form-style.css","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"104.21.87.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.347Z","timestamp":1788533619347,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hgeoyys.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 07:57:10 GMT","end":"Sun, 29 Nov 2026 08:54:52 GMT"},"fingerprint":{"sha1":"2E:85:B1:A5:A6:77:9E:F4:19:60:30:DE:F6:82:4F:E5:03:15:B7:62","sha256":"98:FD:F8:2B:5C:6D:7A:99:7A:B6:0C:2E:60:AD:4E:84:9A:ED:A2:ED:D4:9E:05:09:B4:4D:20:06:AA:A0:3E:38"}}},"request":{"raw":"GET /css/form-style.css HTTP/1.1\r\nHost: hgeoyys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgeoyys.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:53:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 08:32:32 GMT\r\netag: \"6a608020-1474\"\r\ncontent-encoding: gzip\r\nage: 1281\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hxizyMhuCuGU1oWUl45oLB7K7mfRwK3w1VpypyLNEM5BSsQQGr4mdC%2FjSK2mOKdLghytjPHyT8V%2B3VLO6WdWWXAeRLvuOqnajA8aMAe3rOY8ecCyb0b%2FhIOa8BfbnQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35dd330ed09b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5236,"size_decoded":2455,"mime_type":"text/css","magic":"ASCII text","md5":"a8b400c9f322da831dcdb9cca33b1b7b","sha1":"b49e0a0621a9642dc3b80fee6f5795688f520677","sha256":"f281c470bd33e7604deece641765f181b51cf0fc90effaed746de87c0d34aec9","sha512":"9ae293358d20606295da0335845eb3996751c998900e5ddcc39d698cd530af616ca6a49014be164b695f7bf701ea4df98c2190205c9fa7beb4c7e6c79c42d4f6","ssdeep":"96:gn5CHptf3u52plkft7+jU4bYsUFAMj7DdHFnAzsFNc:gn4ptfe52plkfF+jU4+Fzj7pHFnAzsFq","tlshash":"d0b11352597348a9782756587beeca83334d2043d409ce7bbfc862588f853f87666f4c","first_seen":"2026-09-04T09:10:29.370846Z","last_seen":"2026-09-04T14:54:10.722255Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"hgeoyys.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/js/script_land.js","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"104.21.87.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.361Z","timestamp":1788533619361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hgeoyys.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 07:57:10 GMT","end":"Sun, 29 Nov 2026 08:54:52 GMT"},"fingerprint":{"sha1":"2E:85:B1:A5:A6:77:9E:F4:19:60:30:DE:F6:82:4F:E5:03:15:B7:62","sha256":"98:FD:F8:2B:5C:6D:7A:99:7A:B6:0C:2E:60:AD:4E:84:9A:ED:A2:ED:D4:9E:05:09:B4:4D:20:06:AA:A0:3E:38"}}},"request":{"raw":"GET /js/script_land.js HTTP/1.1\r\nHost: hgeoyys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgeoyys.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:53:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 06 Aug 2026 07:14:38 GMT\r\netag: \"6a74345e-1699\"\r\ncontent-encoding: gzip\r\nage: 1281\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I9J4f1UA63t5gzR1PD2PF9h%2BWA96iLi38j%2FaAzTeTng3f4eJtuJIP5fZpytRjfX3KOmMjoFqVSW5zZhDLYw4NwvRbhbdSKyJz1dQgXg7JouyN2Q4NARVleJDjVfEQw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35dd3310d10b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5785,"size_decoded":3189,"mime_type":"application/javascript; charset=utf-8","magic":"Algol 68 source, Unicode text, UTF-8 text","md5":"3129bd3960af423b67435dbe977b2e45","sha1":"a21c7ebea2ab16c8986850f512492ceddfd8eb54","sha256":"b7ae8da72d40528e8ec940f4125b04b85cc7d7a1eb59ff3283ef6bcf13ce15f5","sha512":"ca56b735ed086407ef8c56f2e0ad46a4ab94b54546cb5b7d264ff19c7db070bb5b97d806dc978d8b660ca28e1e52a9b437ce7e3ac1d7173eb1a4b9b345f9717f","ssdeep":"96:mvt/s1eSOwSdosRGCzi+LxjTIHt3lQp0MQ18HvkuNUpmjRanYMzuDwBDQgtL9Jpf:S2SdoQvi+tTIHt3lQp3QKNWtCuDQgws","tlshash":"fdc16360e7ad30760bfd10fa6ce5528b68bd403a3d0ddca94c5c591a20e6edd8bb0b58","first_seen":"2026-09-04T09:10:29.361166Z","last_seen":"2026-09-04T14:54:10.723153Z","times_seen":3,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"hgeoyys.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/images/facebook-icon.svg","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"104.21.87.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.586Z","timestamp":1788533619586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hgeoyys.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 07:57:10 GMT","end":"Sun, 29 Nov 2026 08:54:52 GMT"},"fingerprint":{"sha1":"2E:85:B1:A5:A6:77:9E:F4:19:60:30:DE:F6:82:4F:E5:03:15:B7:62","sha256":"98:FD:F8:2B:5C:6D:7A:99:7A:B6:0C:2E:60:AD:4E:84:9A:ED:A2:ED:D4:9E:05:09:B4:4D:20:06:AA:A0:3E:38"}}},"request":{"raw":"GET /images/facebook-icon.svg HTTP/1.1\r\nHost: hgeoyys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgeoyys.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:53:39 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wEyz922ncFwIKlJD7Cnef704DJSaPUYCqnzKdQERjW4AK5t7sX51pfNIO4bKtu4CvhrwhyrXsaexHEsyvEDxc%2FZrJ00yPs3Xd3S%2Brq7KVsTv4GrLtkiwZc4a2EY2Wg%3D%3D\"}]}\r\nlast-modified: Tue, 21 Jul 2026 18:43:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nage: 1282\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"47b-6572364cea4c0\"\r\ncf-ray: a35dd3326d3cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1147,"size_decoded":1339,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a5300d49266a652ad4b8f0612b288f78","sha1":"8c1eb172301af60ebd3c3b1e490958f69188a309","sha256":"8942790864a4fbd06b71faee059676baa99b871b678dab9623024e8945f3ed3b","sha512":"7f07de14802d813b2f888e5d030ae8d2b8d1e54939f276de0e7a1a5c1476665f53ef0d85b46d4dcf77787adddae94904242109d8a2dad6adfb64527e5ac2abb2","ssdeep":"","tlshash":"51214780d150167c859783effbb46cc8146e20db75a50ce942e4563660632da92743cf","first_seen":"2026-05-03T04:05:03.462526Z","last_seen":"2026-09-04T14:54:10.71642Z","times_seen":5,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"hgeoyys.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/css/custom.css","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"104.21.87.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.344Z","timestamp":1788533619344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hgeoyys.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 07:57:10 GMT","end":"Sun, 29 Nov 2026 08:54:52 GMT"},"fingerprint":{"sha1":"2E:85:B1:A5:A6:77:9E:F4:19:60:30:DE:F6:82:4F:E5:03:15:B7:62","sha256":"98:FD:F8:2B:5C:6D:7A:99:7A:B6:0C:2E:60:AD:4E:84:9A:ED:A2:ED:D4:9E:05:09:B4:4D:20:06:AA:A0:3E:38"}}},"request":{"raw":"GET /css/custom.css HTTP/1.1\r\nHost: hgeoyys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgeoyys.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:53:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Jul 2026 18:57:41 GMT\r\netag: \"6a5fc125-617d\"\r\ncontent-encoding: gzip\r\nage: 1281\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8eMoHWbhocAQIzoLq2d0NhmSJF4DsfdOzyIAbtREL7sb767q%2B%2BdJ5xcweY%2FuKUYkWulVHrJ%2FTGycs07tJIEZVVAM79wTHyiuHxtSRdaxociY5DhemlgrzBZScug38A%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35dd330ed07b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24957,"size_decoded":7437,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"c141797abe22460c625c15c10228bd53","sha1":"c6c0795443b2d648b73fefdf3f2c3a11ecccfb26","sha256":"f191675ddfa95a1fa351317dd2c602ab9f7f172144b3b599229f88e91cfabe75","sha512":"95b3533d3e6f7261295726331afbdc29997215e9477802ebe779013b92f2bfebae7355cdc76f19f533f399b4bd1ff42605aba79b7a17eda23853aa9456bd69db","ssdeep":"384:n0DYNiUpWUI+7nL4p+QB+g+Hc1gTxxxx9f5t:B3pWUI+7n+B+g+81gTxxxx9f5t","tlshash":"06b2639d99011047a337d778aff20728e66940a39b4211bd7eec36464ff62688672fdc","first_seen":"2026-09-04T09:10:29.365776Z","last_seen":"2026-09-04T14:54:10.724003Z","times_seen":3,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"hgeoyys.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/css/form.css?v=4634634634","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"104.21.87.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.345Z","timestamp":1788533619345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hgeoyys.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 07:57:10 GMT","end":"Sun, 29 Nov 2026 08:54:52 GMT"},"fingerprint":{"sha1":"2E:85:B1:A5:A6:77:9E:F4:19:60:30:DE:F6:82:4F:E5:03:15:B7:62","sha256":"98:FD:F8:2B:5C:6D:7A:99:7A:B6:0C:2E:60:AD:4E:84:9A:ED:A2:ED:D4:9E:05:09:B4:4D:20:06:AA:A0:3E:38"}}},"request":{"raw":"GET /css/form.css?v=4634634634 HTTP/1.1\r\nHost: hgeoyys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgeoyys.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:53:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 23 Jul 2026 14:38:33 GMT\r\netag: \"6a622769-709\"\r\ncontent-encoding: gzip\r\nage: 1281\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZcEuUcSAHJ0OwkVXHaaIWFZO%2Bn%2BE5XeEccTjbnHVXvkM9XJ3z8WUErvQpMk5blux%2FU%2BYKefrgR7%2FS7RnKnpBf%2B4EEtb8tvSaSzKMICd1BcSsW3gaU7BCy0iZJ0Vylg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35dd330ed08b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1801,"size_decoded":1115,"mime_type":"text/css","magic":"ASCII text","md5":"b32ed8dbb39c6c999e39de63fbbc2845","sha1":"d13bceadbcbef1f0a190f75feb5743deec987348","sha256":"77e16a8bc940c890ad7d7eafc776f2f7ff7e6906b4efc5963c530b6b3681f36a","sha512":"ba6b705d3fd892a1df3a6bd0beb2e303184acb59dcea17b3653a440f5d27f3206403ddc8b2972e627676bc8b91dc7047a6f86110af831598074d8b1ef1de969a","ssdeep":"","tlshash":"fa314fb5aa0799957812ebac3777d6d7330aa107a801c13ebfc676509f873e40161f4c","first_seen":"2026-09-04T09:10:29.368313Z","last_seen":"2026-09-04T14:54:10.724902Z","times_seen":3,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"hgeoyys.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/js/intlTelInput.min.js","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"104.21.87.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.359Z","timestamp":1788533619359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hgeoyys.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 07:57:10 GMT","end":"Sun, 29 Nov 2026 08:54:52 GMT"},"fingerprint":{"sha1":"2E:85:B1:A5:A6:77:9E:F4:19:60:30:DE:F6:82:4F:E5:03:15:B7:62","sha256":"98:FD:F8:2B:5C:6D:7A:99:7A:B6:0C:2E:60:AD:4E:84:9A:ED:A2:ED:D4:9E:05:09:B4:4D:20:06:AA:A0:3E:38"}}},"request":{"raw":"GET /js/intlTelInput.min.js HTTP/1.1\r\nHost: hgeoyys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgeoyys.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:53:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Jul 2026 08:19:25 GMT\r\netag: \"6a607d0d-b76b\"\r\ncontent-encoding: gzip\r\nage: 1281\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FxhJig3TKjkoAvxXH4ffnL9a%2BMkRJ25vJhSW4vCbMApfKz%2BozFcTNgZ0dc5vCRXbfUCVLggHsbLAnrJESwNmOydE14HwwF7%2BbYlAhebfDARce9jdWFwcgWuQmri1ZA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35dd3310d0fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46955,"size_decoded":18663,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31166)","md5":"9dbb0be479a528255a35f2bb155525ba","sha1":"d14cf0bad49817f1ceb20a54eb9de24a59485eb7","sha256":"b3203c8bc5a7433aa901414e192bcdd9f3711464cf00d56524f2a7a0ffbec286","sha512":"9f8f9c42bffc6a5023b63ed44bd41dc102ea6ffac62801733c8f2544d0f77b052a55e01d100613f261ecfa769c452175764eb3a87812ee1d6c75dc5b0b89fafe","ssdeep":"768:0DJ0FRsgHlR5K2KOnxGlbxWQDjaD1v0CnCpCj7MSUrqU8PqXhOubH:0LgHlR54u4lbxWQDjUvUrIMoubH","tlshash":"0f23d57da356772aabfe8146a4e4a0829e6f7a411844487c7dbc8fcb1498cc375b3734","first_seen":"2026-05-10T21:32:02.484642Z","last_seen":"2026-09-04T14:54:10.726187Z","times_seen":4,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"hgeoyys.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.504Z","timestamp":1788533619504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hgeoyys.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 188532\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-04T19:59:40.709902Z","times_seen":276856,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":27,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/js/jquery.min.js","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"104.21.87.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.348Z","timestamp":1788533619348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hgeoyys.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 07:57:10 GMT","end":"Sun, 29 Nov 2026 08:54:52 GMT"},"fingerprint":{"sha1":"2E:85:B1:A5:A6:77:9E:F4:19:60:30:DE:F6:82:4F:E5:03:15:B7:62","sha256":"98:FD:F8:2B:5C:6D:7A:99:7A:B6:0C:2E:60:AD:4E:84:9A:ED:A2:ED:D4:9E:05:09:B4:4D:20:06:AA:A0:3E:38"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: hgeoyys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:53:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 21 Jul 2026 18:58:52 GMT\r\netag: \"6a5fc16c-155ec\"\r\ncontent-encoding: gzip\r\nage: 1281\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TjakduLLXsHeU0Jd6HkorDcT%2B%2FDrkyfW%2BiRc%2FoCLhPBSqI93ejUbYlADnhTN2PeV9mbMMj6gH3o9rxsGhnPYjyUm8orq311vyJxdBGfFry7VMnna4u73%2FO%2BHiw1TnA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35dd330fd0ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87532,"size_decoded":36164,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-09-04T17:18:19.174561Z","times_seen":31698,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"hgeoyys.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/js/script.js","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"104.21.87.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.350Z","timestamp":1788533619350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hgeoyys.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 07:57:10 GMT","end":"Sun, 29 Nov 2026 08:54:52 GMT"},"fingerprint":{"sha1":"2E:85:B1:A5:A6:77:9E:F4:19:60:30:DE:F6:82:4F:E5:03:15:B7:62","sha256":"98:FD:F8:2B:5C:6D:7A:99:7A:B6:0C:2E:60:AD:4E:84:9A:ED:A2:ED:D4:9E:05:09:B4:4D:20:06:AA:A0:3E:38"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: hgeoyys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgeoyys.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:53:39 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Jul 2026 09:55:27 GMT\r\netag: \"6a60938f-5aad\"\r\ncontent-encoding: gzip\r\nage: 1281\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TcvHvP9TZ2%2FdczBgfJT7IHkSd3SyFjf5C%2B3xPWDz2jAl8wigN4O2oK3FFoLGjYRn4QawCLarztepKSEBXpkNGkZJpU4bNEOnCCxUY%2FdBopE8iaJ%2FDwTeEsvEgsg4Uw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35dd330fd0bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23213,"size_decoded":8289,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"e90016142e2f5964dbd535180377b096","sha1":"45890a8b1880c46964c4fdb420dce52c7c0165b3","sha256":"d0976603612d105286195f1db324a405d25a8639ef560b3547ce00b11209c8d7","sha512":"9aeb21bd8066fde612795827ebbfb9d9f55b09544c2e9b1eb030316baee763afec79610371a132c50da5179e1510bea2b046546e55c621d048c38cfd98bf4109","ssdeep":"384:ikORgXnkl8BiRfX4AuBWUFv5fPzQzd8wcONmsEyyPnFQQuago/PRandcAi:ikOZ8BiRwAOPzs5msEyy4VcAi","tlshash":"fca273a3320f06668fe832d7b4b89705f97cc261fc43c2b679ac1c1d62e5901db79999","first_seen":"2026-09-04T09:10:29.356483Z","last_seen":"2026-09-04T14:54:10.728699Z","times_seen":3,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"hgeoyys.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/css/intlTelInput.css","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"104.21.87.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.358Z","timestamp":1788533619358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hgeoyys.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 07:57:10 GMT","end":"Sun, 29 Nov 2026 08:54:52 GMT"},"fingerprint":{"sha1":"2E:85:B1:A5:A6:77:9E:F4:19:60:30:DE:F6:82:4F:E5:03:15:B7:62","sha256":"98:FD:F8:2B:5C:6D:7A:99:7A:B6:0C:2E:60:AD:4E:84:9A:ED:A2:ED:D4:9E:05:09:B4:4D:20:06:AA:A0:3E:38"}}},"request":{"raw":"GET /css/intlTelInput.css HTTP/1.1\r\nHost: hgeoyys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgeoyys.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:53:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Jul 2026 08:19:59 GMT\r\netag: \"6a607d2f-4a91\"\r\ncontent-encoding: gzip\r\nage: 1281\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9nChZP6Ntzr8iq9jx%2Fdz19Wln35aXhZOF3H5dtorbPNZe5e9BeD0IA4VPumL6068tkEAux66iTBMe%2Bjb2vf1b2CJdxXYU6TL2%2FsLlpO7CZn2or9GY3WZrH2rFYhspA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a35dd3310d0eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19089,"size_decoded":4928,"mime_type":"text/css","magic":"ASCII text, with very long lines (349)","md5":"7513fea554c1366d034d237f9a971f2f","sha1":"cfbf9ac95727667a9ca57722eb01cf9c28f3705a","sha256":"23c81ce553816e3fbb42c5fffa21dc02054c3939a72f27afcd27f2ba8ad2fac4","sha512":"b4267426d6196fedbc110117ddf5bb8d3ab9c3a930925e67aaa6816b5b70c34eea79e95fd0c2e3d659671161c79bc28c8a42f791ce5ef7b8f1ceb8985ce31992","ssdeep":"192:Wt/Tvsv5uVsAxJdCiFKV0863o1Z9yJW7ZHUbyhG/JYyiKdjr+/TEHRik1B3EXpqx:ybvsvk3J9Fk9yI+Rd3+/Tyyu","tlshash":"2282ce2746b41d3ea61dd1ba38a2d5f1733f488a74aedd96eec8000e1c87794e0ebd50","first_seen":"2026-09-04T09:10:29.380283Z","last_seen":"2026-09-04T14:54:10.729548Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"hgeoyys.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/images/facebook-wordmark.svg","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"104.21.87.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.367Z","timestamp":1788533619367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hgeoyys.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 07:57:10 GMT","end":"Sun, 29 Nov 2026 08:54:52 GMT"},"fingerprint":{"sha1":"2E:85:B1:A5:A6:77:9E:F4:19:60:30:DE:F6:82:4F:E5:03:15:B7:62","sha256":"98:FD:F8:2B:5C:6D:7A:99:7A:B6:0C:2E:60:AD:4E:84:9A:ED:A2:ED:D4:9E:05:09:B4:4D:20:06:AA:A0:3E:38"}}},"request":{"raw":"GET /images/facebook-wordmark.svg HTTP/1.1\r\nHost: hgeoyys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgeoyys.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:53:39 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WXuGIELNvREYgp6phdNKxfJP%2FrUJuGjMaG%2FOCQ0OMMmdLKmKau6n1I05ffO4IgI004M22WpxkE4tlUiAyld9jNBd%2BipMmt4kCtzcKARHL9AWEn2M92KjNPVUq559vQ%3D%3D\"}]}\r\nlast-modified: Tue, 21 Jul 2026 18:43:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nage: 1281\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"9e1-657236548b6c0\"\r\ncf-ray: a35dd3310d12b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2529,"size_decoded":1686,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"32560e74a457ed302a0fc3b56aa45097","sha1":"40bb81a77a5bf1c926993b5dac397ed199a72f9c","sha256":"9684f126e28d27f5012df990eab9bf23caeae5c9ab8ef1d5924d7073f1cc223d","sha512":"e66104dc8a918e50405f9030368266d76c9d3b6dec1cc3a6d1819afcd69f031792d70279ea23e283253bc0578f0a529227380ad839a5b1be242a82147bed22d7","ssdeep":"","tlshash":"8b51cdcfdb69ffb8ee9407de67a05ec8f19310e9723bc558953816900182fbd8904972","first_seen":"2026-09-04T09:10:29.363322Z","last_seen":"2026-09-04T14:54:10.730285Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"hgeoyys.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/images/visa.png","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"104.21.87.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.369Z","timestamp":1788533619369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hgeoyys.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 07:57:10 GMT","end":"Sun, 29 Nov 2026 08:54:52 GMT"},"fingerprint":{"sha1":"2E:85:B1:A5:A6:77:9E:F4:19:60:30:DE:F6:82:4F:E5:03:15:B7:62","sha256":"98:FD:F8:2B:5C:6D:7A:99:7A:B6:0C:2E:60:AD:4E:84:9A:ED:A2:ED:D4:9E:05:09:B4:4D:20:06:AA:A0:3E:38"}}},"request":{"raw":"GET /images/visa.png HTTP/1.1\r\nHost: hgeoyys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgeoyys.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:53:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 21 Jul 2026 18:43:50 GMT\r\netag: \"79fd-65723675ec580\"\r\ncontent-encoding: gzip\r\nage: 1281\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ek5aU9u6EHpJf2RxlaSdJ%2FTOOpbSFoRA58%2B5We7%2B%2Bo5K4MFhrXcCvsVjMqjC48r6bnka91FHMZHU5YsVcJqcelMQCAkMRcwLkJRz74o%2F3sDYFzby2VXNbyJSdvH%2Fnw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a35dd3311d13b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31229,"size_decoded":29861,"mime_type":"image/png","magic":"PNG image data, 3840 x 2160, 4-bit colormap, non-interlaced","md5":"9ff203ac4456ccb3db90c0dd1fab2ffb","sha1":"cedd156d01c9322e670d993a703c10fa0375fc7b","sha256":"de8f6ccffecc7595ccad3d3965707a3ce23c3d41ffc1194cde541b965241f2bb","sha512":"5589d9d973ae4877347c3bd63d997b539888a5cb4a4e8fd80466204376d2213517aa8cd0904c80d51f32e9c33bd856d6f55caa80278a08eec23056743942ef1a","ssdeep":"768:DjykpovomX0FQ/qPdGp3Ud35lE+S0pz1DBTPQbDFG+Na:Dmk54b13UhlS0pz1VTP4FGqa","tlshash":"a5e2f1c6bb06d61dc3cfb63b95d9f689a02b7114c70b40ca081b7e936d7299f5251718","first_seen":"2025-07-16T12:23:43.573555Z","last_seen":"2026-09-04T14:54:10.73118Z","times_seen":15,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"hgeoyys.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hgeoyys.com/images/master.svg","fqdn":"hgeoyys.com","domain":"hgeoyys.com","tld":"com"},"ip":{"addr":"104.21.87.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.370Z","timestamp":1788533619370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hgeoyys.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 07:57:10 GMT","end":"Sun, 29 Nov 2026 08:54:52 GMT"},"fingerprint":{"sha1":"2E:85:B1:A5:A6:77:9E:F4:19:60:30:DE:F6:82:4F:E5:03:15:B7:62","sha256":"98:FD:F8:2B:5C:6D:7A:99:7A:B6:0C:2E:60:AD:4E:84:9A:ED:A2:ED:D4:9E:05:09:B4:4D:20:06:AA:A0:3E:38"}}},"request":{"raw":"GET /images/master.svg HTTP/1.1\r\nHost: hgeoyys.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hgeoyys.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 04 Sep 2026 14:53:39 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IaxBdLScIQcqlPtsIDZEi4JQo4RugmkxTxZA8Qjtm%2FxHcdVLJuDK0QKwAyePF5M3qCBL97Lc5cmIihYqfjA%2FgbCSdbS%2Be6o4Sb7dvqzdvNDfoxNNLcnEBJ0LVb0f8Q%3D%3D\"}]}\r\nlast-modified: Tue, 21 Jul 2026 18:43:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nage: 1281\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"fd5-65723662d9880\"\r\ncf-ray: a35dd3311d14b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4053,"size_decoded":2417,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"55c42d54937583ac3f242da371c2e16d","sha1":"749f71b24787940813c600fb28dc03cd115215b9","sha256":"79534478273e209365b14a47e39375e95329d1f7fc41b50c2eadd8cb09a32c9e","sha512":"c7bf06b76b037836695824704ca8da99fad1bd5a6e20aa2074f47bc53d831e57420364cd162baafa9dcbfb1393ad47871a367decf308b04369d981e25a4c457e","ssdeep":"","tlshash":"f181ffa3d156a4f06e59c22026b46965b2509eeb60f0d1dcfd9f18d3fa0c0d04078eef","first_seen":"2023-08-30T12:54:33Z","last_seen":"2026-09-04T14:54:10.732874Z","times_seen":618,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-04","alert":"Phishing Block","trigger":"hgeoyys.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-04","alert":"Sinkholed","trigger":"hgeoyys.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hgeoyys.com/","date":"2026-09-04T14:53:39.505Z","timestamp":1788533619505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://hgeoyys.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:32:05 GMT\r\nexpires: Thu, 02 Sep 2027 10:32:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 188494\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18720,"size_decoded":19533,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-09-04T19:53:34.479244Z","times_seen":11974,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":20,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}