{"report_id":"f1173073-f9cd-4850-89d1-a2e8d3092e56","version":6,"status":"done","tags":[],"date":"2026-01-27T12:22:08Z","url":{"schema":"http","addr":"cecrreha.digital","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"104.21.21.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"cecrreha.digital/","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"title":"Helvionex - ICO \u0026 Crypto","dom":{"size":218626,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45273)","md5":"191582069911f1ee6820948a2ae03ca4","sha1":"c4e528e61f33823da5c93db00f26eac0c936b507","sha256":"3c9a567a4cc97078ba01a852b7a61894d6f19ac147ba2217972ee3d87b47fbba","sha512":"25e787a007721c22c4784069c0703d47ae49588e053c8d05a5969658d2898e16ac1f1f3ffdf2dc39f660439dd45dd1754d1fe131d3920578ec015402ff0f7597","ssdeep":"1536:zMbKFWGtsEJPjQBq1Wixx2IV1ICINYtIVWvt8VPB6RxknNucRaXYC5BU:YbKFpLqbx0Q6hYC5BU","tlshash":"0a24ac23426934260537c6d034ba5b37d6a6de4ffaa70a003eecd7e62feac907457119","dom_hash":"domhashc384e94a22664b195519e784a1ad33cf","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cecrreha.digital","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"104.21.21.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-03T12:22:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cecrreha.digital","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":396,"request_count":66,"received_data":2068504,"sent_data":53151,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-25T22:30:32.196824Z","alert_count":0,"request_count":5,"received_data":473027,"sent_data":2406,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-25T22:25:20.721908Z","alert_count":0,"request_count":1,"received_data":3786,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ipapi.co","ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-01-21T11:31:32.920055Z","alert_count":0,"request_count":1,"received_data":2483,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/js/jarallax.min.js?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56292bc8bec5cf213681fa33eab00234","sha1":"e489de853846fa1c8f686bedcb20cb50dc42e6b1","sha256":"31159e40a07249ad9836f2b3283328979bb23a11a0c973ae1ebd482bf6c88567","sha512":"0daa4722ca8861f28dfd5b53990980aaf50e51440061a3d8a3282ca41d2b72d8905941d5cead8dab7955ce4d80c13eb51107d7bc570f847df38aa62e7f50f0e4","ssdeep":"384:sNOFAgK3XCdWCwHGJp8Au2gjx2alX7GUqyDjwpoUkij224tNA1qxiqw:sNOFo3y0CwHQmAu2gjx2alXnqwjwpoUJ","tlshash":"9382d95933a0333185aff1dda84fda4cf63495785396881a220cc5fdad25d3c82bae9d","size":17776,"data":"","first_seen":"2025-07-28T08:05:35.843547Z","last_seen":"2026-02-02T20:32:32.044786Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5843dbdc71ff8014a5eafd346a262da","sha1":"127e1d971efab9341db8079f10663dc28e8e0a2f","sha256":"8e73a30d35c83ea6a597c3343324d2b7df097ad26e67b62efb5266ee12d317b5","sha512":"ac28dfa1a6fd09528e1ffc3f4fa19b0719c01f9033872e3eab51175b95c451179f1db22445b43ef9947e1810a5a37fdddeae7cdd7fe03b814a98e16e8642ab74","ssdeep":"","tlshash":"7e514241671662f381f60f36b12fb642713ad015140328b2b9bd9d90aba6deb5363d1e","size":2771,"data":"","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-04-12T18:40:00.483991Z","times_seen":13140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-04-12T19:12:51.315562Z","times_seen":80100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/js/jquery.easing.js?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4addf6be3bb7c0bd79873715f146a38d","sha1":"fa9c1a22c52ee5119c80e62aed9f499c6dd88b2a","sha256":"fa900c43a7a64e4bde901005073ca0e2e48589d424e1a28ccb126e026e23f9f8","sha512":"4ef79c60406e030fad8f174419763d099bef733896fd4e051cd153033d71d81e881eec7e91c66ca5182181172c6dc173eb1d07282f14287c7958561fd61c0df0","ssdeep":"96:Jg/rrbuDImRN2+jTFkx2kZoZpPau9ugPlZ3s7WsyCtYqvPIJkO3ETqF+gZpd3ZOW:JWvCImFMLePBDtybbnTOUWMgLfOrj/V4","tlshash":"8691374868fe70208317f5b4461b9005627aba574c5cbe25fc4c4ea02f5893a8bf6bfc","size":4581,"data":"","first_seen":"2025-07-28T08:05:35.91751Z","last_seen":"2026-02-02T20:32:32.050819Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8aff6e9fc173e88bbbba01d9fee7f088","sha1":"6940e23214a16e513351b1fe8ce5d2e2fc49ccbc","sha256":"860b659d57c7c64addb1792c3019333f95caff9828cb1ea0862e75b3f259639e","sha512":"741bcd51e27286a2c302db2f43e739bab7bfc67282d4eec3b0a339ba33a9556220f65d29dbbe12735bae2930e134f39305ea88ce16726adee5f122adc31dc800","ssdeep":"","tlshash":"fc517a153baf8134c17765d51fc76690a730a10f6d07ca8c7c6cc2e48f568348abaeb9","size":2617,"data":"","first_seen":"2025-07-28T08:05:36.026534Z","last_seen":"2026-02-02T20:32:32.062225Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/SmithyQI/jquery@3.7.1/jquery.min.js?t=1692201600","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"15ffffd8b5f5a7a55ff5a298ec603077","sha1":"85002b57b610ea212edbcd64a4cffa3f1d032f57","sha256":"1e6e55120b9e92dd8c9017265aabc73c3d111848d0463984bbe61583bf66c8df","sha512":"4783c33ff82e55a329852967cac59681c3313a6f822388eb97eab2d08e60713ab890166a1982212729449377d1e13d7d960172a8fba10b9d454706409245bb39","ssdeep":"1536:nf4/7GaL7Ixuv2FMzYQBZ0sJWLD/YhDDCXmJ4CEZKbJPBKF8fgfoBagE2yqL4v:9SBCIWHl0a8fgfVqL4v","tlshash":"73931addb2c6b06217a731b940bf510bf236195d280d8440f129d8e9bc79b4a92bbf7d","size":89677,"data":"","first_seen":"2025-07-28T08:05:35.890863Z","last_seen":"2026-02-02T20:32:32.025248Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/js/slick.min.js?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"839bcc6a30decea537da26962b13ecaa","sha1":"2c8bf8c1c826f9d3982ec0b4aa501713aa1eeb82","sha256":"7cab001f5f952620414c21e7eb357ec0ec5cbc6349d5bd888a775cdd08f77518","sha512":"45b046002d6739aee48b9604d3c688645fcca6ff73a5832b0d690afc4328065a9f27a48d16e8d4331fcaa29dbf18809200498ed92ea0eeaf20b122209e2c5d61","ssdeep":"768:CtJtq2qUvcssINKhS9XMgPccQfJqyUXIokdqPYaCq1MUJCHrmt+qBRiSXA079zgI:lzm5h11Bx9fP","tlshash":"f923530592d42b3585dba0d67405d80de3fbf778ab11908436cc8796a86c858cfebbf9","size":48340,"data":"","first_seen":"2023-06-12T20:39:45Z","last_seen":"2026-04-08T08:31:28.540995Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e9c32e66e502c93811fb3a9a2064ae3","sha1":"1e0eef84faca5835a701b3b6da70e7dcf83cfb2e","sha256":"747a768ab667a41deb82fc8ac79b8daf42240e3981bb74f147cf018d41f3ab53","sha512":"615f36f9965d2a0412e47622e309645d532d73214fc6f3b79ebf96b910f512acbd391d8efbb13935304b22e4bddd13b6459ec334dc5473a2c40564480b8a994e","ssdeep":"","tlshash":"26410e3c617a04210d3fa157d3cf63883029207b7243d2adb5ee4f962fe5510eaba9d1","size":2154,"data":"","first_seen":"2025-07-28T08:05:36.043424Z","last_seen":"2026-02-02T20:32:32.063145Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","size":258914,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-04-12T13:49:54.211301Z","times_seen":1514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/js/jquery.appear.js?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"592342629b66f17bbdedc983dd83921c","sha1":"ed82bcae3a0e6aeb586201649bef4b48988ac37e","sha256":"b2800b5e85a96329aae224cbabc2bb4c925ef17d34a2628225a387f6d796abe1","sha512":"7e18dc1b34a36d727e0343bd52c3664fb538c8a30a4280a6648ac836a1e3520b365f544196ab8b14885aa464e5b9cac67cd1c99998f9ac0c1da6043127069387","ssdeep":"","tlshash":"a771010a79eb1ab54877613e9f9fb2442260503b1202d8113ceddf6caf90d68b597fd8","size":3579,"data":"","first_seen":"2025-07-28T08:05:35.905319Z","last_seen":"2026-02-02T20:32:32.026441Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/js/main.js?v=032","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cca0ac6298bbed0e47a669a5c9b1680b","sha1":"3aaf4d5906eb827ad7f1b49ecf781c46e40e8ee6","sha256":"bf7e6bb112a856a4a3d1447ecacd38303dd987dcd69f24d925128aa4d85a25c5","sha512":"1d05bd1100fc76d7062bcfb05acc9a684e5123c6925e6fef9e06fe27320c7b0a2bf300fb8999bbf671d0f552197f79c2568e210c783851aa9626fb8d733c5994","ssdeep":"192:xJGo6Xa9Yajdk86qCRCJmXPTDH5+QIHxg+ddIIJ02q3CR609mN1xuH2:xNHoxDZ+zRzddIlCGN1UH2","tlshash":"2812434aa9f21062117b227e5f6fc304a7a250131a4adea17d9c4a485f4873c67f6bfc","size":9324,"data":"","first_seen":"2025-07-28T08:05:35.86955Z","last_seen":"2026-02-02T20:32:32.053224Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/js/jquery.ba-throttle-debounce.min.js?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7898c1fecf8c840965f9db729e9c3b2","sha1":"69058603b500892a87aa8d2810396433087ec64a","sha256":"c9dc35c0297af802a4277beb28cc2d946ccf6f64aad791087d338f74085a5eb5","sha512":"e1dfc0810f935926769112f86ac00a56fa5f81af21541773f298f4c54d712da82d9145675f80f0dffa7b51c0800776d26d2bff5f6b9ba90139e9461fa8bd5bcd","ssdeep":"384:03ucPNUEHePWh4WHHzOxhWP594zza2H89aMgGwVXFwtst7H9tCptp52Drs:b7DiyMua2H89aMgGw0ut7H9Mptp40","tlshash":"f442001f239d2237da07719a4d4f82897a36e91d2343491db62cd4d16d748386b3eebc","size":12548,"data":"","first_seen":"2025-07-28T08:05:35.864927Z","last_seen":"2026-02-02T20:32:32.061115Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"84b27775c3eeaff32c33c6d0ee8f5d0f","sha1":"e854087ae58f832e21f8d18a72bad63b28e6edad","sha256":"6f968d2e9b616153dd9042025c1b5b6bb3ba81afcccb58554b0c0dca0a7dba64","sha512":"518cefcd9f9a92d130d4b05737ec9aae516132bac96fee4ad79de8b8e480c302379f4a19044b18edc5778151f3dc6255dd48cf073ec7d7730d76260daa52e8e9","ssdeep":"","tlshash":"66e02b2b45b504b1016b9266a7cbab85e271004b5045660abc4c4b2a3fd0dad28f0fe2","size":382,"data":"","first_seen":"2025-05-09T14:17:52.522987Z","last_seen":"2026-02-02T20:32:32.06412Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/js/bootstrap.min.js?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"015e1ad2cc95b5c4da149ea6045514f5","sha1":"f2fb82cfac1c8a8e8803d50cdb083b5c1094eaeb","sha256":"3f4c4a2d5c4a7759fa6455acd4aea7314d39864589650d0eda38683d9e9e66e9","sha512":"7b1d5cc6e4576df54f8ceada868394cfefdae9eba98c131194ac92ca1c8a8972b8ddbfb53be0f6aa7bfb4a287971c7dded205c79a5656b692ab2421a037b8dc2","ssdeep":"1536:putXatxRe5Y1fSF0Hyjpjdh4qnedehPiPXOS0yjpOqjfRKQrDZmacbF/vPx5nuFG:eCynnoec1fRKQrDZmacbF/vPqFmsM","tlshash":"8e93a51a33c47a37458ba076ac7aca4ff73565986387500cb65c94ec163cc74a3b6eb8","size":89656,"data":"","first_seen":"2025-07-28T08:05:35.859602Z","last_seen":"2026-02-02T20:32:32.028598Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/js/jquery.mCustomScrollbar.min.js?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f92743621e37123252069aa24e4ffb68","sha1":"975d1ea13fc673d77836777ba1290049f7b5d254","sha256":"b279b8f43e0dfb8006547b663f00f9cf4a30b30d8349dad4f7c600e0ce2e318e","sha512":"0d3f6bd487f1eb5dac9f96d9602f4664cf0f11e3bfbb6f98380a0f7341c4342cc38ebe6806859720e944aaed2a28891cc477d5d28b12fee208aac74307c02225","ssdeep":"768:BAL23pCa2ZKvS1yQc/kAROc/QO8NQjcR22f3p9cZR0z6kpC6K+y:425Y1ycqj0z6kA6M","tlshash":"5323c6a53291383bd1cff359dd0bc54c7336ab62a78a485c1b2c84749d609741bbaebc","size":47527,"data":"","first_seen":"2025-07-28T08:05:35.915418Z","last_seen":"2026-02-02T20:32:32.018884Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js?v=01","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c86b61ae6f79b75c7e08b42a351a7b6e","sha1":"16ee5c0d605e5a30b9f58107dbded4a97ba9bfa2","sha256":"e1759a4dbfab9dcdae85ac8ee40e4c961a098eb49f7e5a96ceb1ab928e6f681f","sha512":"cb1485a28c54e0b665efebb05f6c21696c28e8679f1e818e92657a121286c337231a435ea84bebaaee26b6b6c7e966049c85d1b4db8b9070c096d18ae4d8308c","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68a:cDiIz8A4knYdw","tlshash":"0cd2e7aeb365673ba6fd82a270e54503af7f79444604083d78ac8ede0288ed171f5b34","size":29872,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-04-07T02:34:18.150961Z","times_seen":391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/global_lpn_1_2/validation.js?v=01","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5ec8fab2fe5f2ea37688e53ac17e107","sha1":"7fd97c718f4c7803166ac1651d08ef44d41baeb1","sha256":"0ebd806817fa3379a90117bded52cd86259e5b8168eeae7b7dcc1ee95bb33ba7","sha512":"a0063ec46538d44fd21bcb65c2f6027f67f129401e5e30b146a986dd16414d578f71490d0cc29be6b52d81e5e36cc367b4e06d9f42126714c496a70357777c03","ssdeep":"96:WOTqLdUpFVkda+pcfQiEnCObOwrSjWDsknMOPOQ0hnu4oGW0s3ALOwu:WOWLdUpFVkda+pmQrnRhrSj0BmQZvGto","tlshash":"90b173e870f10519693356fd26df510669d9710bec45d98e3ecc83800f568e8ee9a3ec","size":5310,"data":"","first_seen":"2025-04-18T11:50:01.200675Z","last_seen":"2026-03-21T18:18:01.318425Z","times_seen":233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/js/main.js?v=032","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/js/main.js?v=032 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=3,i=?0\r\netag: W/\"691f1e96-246c\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ANrV9flCxjRRRmy3R2VxeKjUSn11ZC%2BW2Oin41fsJfrTJQeiEnoAG2xnyTu54pyMTIC9kpoAY7wtqyimW4pUktz%2B6NZqh3%2F3c%2BrKcBvP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836384ed6b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9324,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"cca0ac6298bbed0e47a669a5c9b1680b","sha1":"3aaf4d5906eb827ad7f1b49ecf781c46e40e8ee6","sha256":"bf7e6bb112a856a4a3d1447ecacd38303dd987dcd69f24d925128aa4d85a25c5","sha512":"1d05bd1100fc76d7062bcfb05acc9a684e5123c6925e6fef9e06fe27320c7b0a2bf300fb8999bbf671d0f552197f79c2568e210c783851aa9626fb8d733c5994","ssdeep":"192:xJGo6Xa9Yajdk86qCRCJmXPTDH5+QIHxg+ddIIJ02q3CR609mN1xuH2:xNHoxDZ+zRzddIlCGN1UH2","tlshash":"2812434aa9f21062117b227e5f6fc304a7a250131a4adea17d9c4a485f4873c67f6bfc","first_seen":"2025-07-28T08:05:35.86955Z","last_seen":"2026-02-02T20:32:32.053224Z","times_seen":25,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/pxiByp8kv8JHgFVrLEj6Z1JlFd2JQEl8qw.woff2","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/pxiByp8kv8JHgFVrLEj6Z1JlFd2JQEl8qw.woff2 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/lander/pl-helvionex-v2--yez-/css2.css\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 5480\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-1568\"\r\nexpires: Fri, 06 Feb 2026 12:21:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2B0qNQmqzUomXGY9bFqrQ27Ykr0GsIAxOd%2BQDKmR9gTK8BZUFoF%2BGJAKRbWuKXwsbYsPpgF5sGd6uhJyPmU6e5adDT2hkgj0a9vkCuNa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48363af9b9b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5480,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5480, version 1.0","md5":"79da53ebaf3308c806394df4882b343d","sha1":"aea8bfab8884109d90687579267125530134855e","sha256":"d38499128fe4185b8488375cdabe54cec8423900d214c86edcaa21c94ff4ebe9","sha512":"dad4e9c0b32b0e87bef6f357f699534a43bd2b248600ce319c9e37a0652870aa1f56acd30877ac96cce9dd24de467ae8c1b371009da63e4bbab9d1de225e4b56","ssdeep":"96:FvA6NknwDEh+8Gg8cx7vNw/PBXMoZYUQwgCorfILJJugbd1ffTfU3KCrba4z371q:FinwJ8n82vNoZXMoZ0PrfILJo+fLXaPA","tlshash":"59b18e091aabff5bda823a3f6a38700d1838a77a414771e5031db5dc56fd26833b5688","first_seen":"2024-05-15T15:21:29Z","last_seen":"2026-02-02T20:32:32.020364Z","times_seen":41,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/js/slick.min.js?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/js/slick.min.js?v=02 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=3,i=?0\r\netag: W/\"691f1e96-bcd4\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bjs%2BOA7SV7z0FSXAQB%2FWxHe58MvJo49vVmPHCkF%2BsLK6wf0c80lbMPfPxRy2sYGbpok%2F5FHjXzKdHLkCHxHucgrVj1ermat%2B%2FEJ4ZXys\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836384ed3b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48340,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (48340), with no line terminators","md5":"839bcc6a30decea537da26962b13ecaa","sha1":"2c8bf8c1c826f9d3982ec0b4aa501713aa1eeb82","sha256":"7cab001f5f952620414c21e7eb357ec0ec5cbc6349d5bd888a775cdd08f77518","sha512":"45b046002d6739aee48b9604d3c688645fcca6ff73a5832b0d690afc4328065a9f27a48d16e8d4331fcaa29dbf18809200498ed92ea0eeaf20b122209e2c5d61","ssdeep":"768:CtJtq2qUvcssINKhS9XMgPccQfJqyUXIokdqPYaCq1MUJCHrmt+qBRiSXA079zgI:lzm5h11Bx9fP","tlshash":"f923530592d42b3585dba0d67405d80de3fbf778ab11908436cc8796a86c858cfebbf9","first_seen":"2023-06-12T20:39:45Z","last_seen":"2026-04-08T08:31:28.540995Z","times_seen":69,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/css2.css","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/css2.css HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/lander/pl-helvionex-v2--yez-/style.css?v=02\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=2,i=?0\r\netag: W/\"691f1e96-3855\"\r\nexpires: Fri, 06 Feb 2026 12:21:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sRBg23pEnBVSdFn0EMkjqiFikfnGbnyH05bumWKPttdrwiqysxCW%2F%2BPYkZSKTpvaTNKnChlgieudqf%2FertatpVjWEnY%2FS4w8N0BAyqhL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48363a38eeb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14421,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"608ad70aac53bcfeebf0ecf91bc20743","sha1":"7b5260aefe16a7b2ee90e68c77c023f99d06874e","sha256":"dbb3ae07317d272b7850601b0acaa908ddb73da29ef08cc1352b2e9abad10b9a","sha512":"547415692523a2b4efde48c9a2ff265ad414f8190b20f6228e69056128c8409fe22255fd48f68eced5ea711ba1ffbe4bcb16cce970539b8a98fcc1d7699fe8ef","ssdeep":"192:BB0zBbSB6BBpoBwvBXwAjEoAjpnjMonjhO4oOfNjjoNjiEjDoEjCrjyorjvCjOoa:B6s194AaMjnTXOa","tlshash":"b9527880087ba204e7972cd167ce3e36ee1df114a044da386ffe1498bc9bd5a1366b1d","first_seen":"2025-07-28T08:05:35.845626Z","last_seen":"2026-02-02T20:32:32.041983Z","times_seen":25,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/partner_img05.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/partner_img05.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 2564\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-a04\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nCMc5NHEiN7Tiq%2BSq7sqB2mYL1RUZC%2F5EbDi6gch%2FBRCi1rEzqdjMAxD90p%2FyU7P9l9EqTRZa7iuNwlDj15wgDIEDNw5n8ZMmtx%2FTOVe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836380e9fb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2564,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 161 x 40, 8-bit/color RGBA, non-interlaced","md5":"2fff682f5aa66dea58900a979ba59900","sha1":"4521edbf9e5c0dbe9b342f870037eb30e9641161","sha256":"bb9f0f2dde5425d4b69c093d3902f07ed5a43daf6b029dbad709a14cbeddd39d","sha512":"600afa234e907e429593cf2c2674a0254a4d28c267ecb9ad71b38c9af49fb7c0658f713d441a76a051f424e587d21d9418e6f3ff30f4c12e75236376ce1e4b58","ssdeep":"","tlshash":"7d513a972fa73c53a92907fe5a7741cae58f890e33f610d6a47624ab5122e429218873","first_seen":"2025-07-28T08:05:35.913312Z","last_seen":"2026-03-11T04:48:20.718343Z","times_seen":31,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/about_img01.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/about_img01.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 189627\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-2e4bb\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kiACj9IL6ZihCqcK2n%2FADY%2BR%2Fy5bRI2EBARBJPwzL2uxVPe33AEsaZJHIeqiEagjciTg4Z8fhvAjizZf0w9HVve6RrW2RPULMXvn5U0x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836380e95b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189627,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 487 x 486, 8-bit/color RGBA, non-interlaced","md5":"3a35e7143cfa7571a777cb2c282413a0","sha1":"98ee7473940197ad322b94c205d6f9dfde5acd0f","sha256":"ab558b595bd69be1a49dbde103b3402877fdcf4923d6a3444c5a9043386324ce","sha512":"bd140d5c583e824ba61dfe18ec7bd0721aee0068b5b23abccc7f79a128c6ebcd33e6fbea9ad1e22f41937ccf781cfab10335dccddc463ced04317b2bbdb89bd2","ssdeep":"3072:lwLHsHKb6aTQOXk9wgQBxVrA4j5C30LCl9jj5/Kav/WJ3wP2osQNxQC0HbAdFqEo:6LHsHI62XgQh75ql9jj1KHajt0HQfRVM","tlshash":"420422f059d0731865089d0e8b6cbb98834532bbd59f375c4c360d6d9b1ea48eb898ef","first_seen":"2025-07-28T08:05:35.929992Z","last_seen":"2026-02-02T20:32:32.060237Z","times_seen":25,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/SmithyQI/jquery@3.7.1/jquery.min.js?t=1692201600","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/SmithyQI/jquery@3.7.1/jquery.min.js?t=1692201600 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.7.1\r\nx-jsd-version-type: version\r\netag: W/\"15e4d-hQArV7YQ6iEu281kpM/6Px0DL1c\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\nage: 999891\r\nx-served-by: cache-fra-etou8220164-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 32589\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89677,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"15ffffd8b5f5a7a55ff5a298ec603077","sha1":"85002b57b610ea212edbcd64a4cffa3f1d032f57","sha256":"1e6e55120b9e92dd8c9017265aabc73c3d111848d0463984bbe61583bf66c8df","sha512":"4783c33ff82e55a329852967cac59681c3313a6f822388eb97eab2d08e60713ab890166a1982212729449377d1e13d7d960172a8fba10b9d454706409245bb39","ssdeep":"1536:nf4/7GaL7Ixuv2FMzYQBZ0sJWLD/YhDDCXmJ4CEZKbJPBKF8fgfoBagE2yqL4v:9SBCIWHl0a8fgfVqL4v","tlshash":"73931addb2c6b06217a731b940bf510bf236195d280d8440f129d8e9bc79b4a92bbf7d","first_seen":"2025-07-28T08:05:35.890863Z","last_seen":"2026-02-02T20:32:32.025248Z","times_seen":25,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":19,"dns":1,"connect":26,"send":0,"wait":28,"receive":11,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/js/jquery.appear.js?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/js/jquery.appear.js?v=02 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EulbF35xt6jwE6vch6taHU%2F%2FLQnfDQFyLFLVCzTd%2B8hU62XubuLo2P9M3quppIZbPkPHdVABaKPu%2B0TEldpxVqzEi1JU4ItKZ5jbFME2\"}]}\r\netag: W/\"691f1e96-dfb\"\r\ncontent-encoding: br\r\ncf-ray: 9c4836383ecfb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3579,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"592342629b66f17bbdedc983dd83921c","sha1":"ed82bcae3a0e6aeb586201649bef4b48988ac37e","sha256":"b2800b5e85a96329aae224cbabc2bb4c925ef17d34a2628225a387f6d796abe1","sha512":"7e18dc1b34a36d727e0343bd52c3664fb538c8a30a4280a6648ac836a1e3520b365f544196ab8b14885aa464e5b9cac67cd1c99998f9ac0c1da6043127069387","ssdeep":"","tlshash":"a771010a79eb1ab54877613e9f9fb2442260503b1202d8113ceddf6caf90d68b597fd8","first_seen":"2025-07-28T08:05:35.905319Z","last_seen":"2026-02-02T20:32:32.026441Z","times_seen":25,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/img/flags.png?1","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/img/flags.png?1 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/css/intlTelInput.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 70325\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"112b5-tFG020MXScxAzCpfJx+YB8oh8dM\"\r\naccept-ranges: bytes\r\nage: 2453817\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\nx-served-by: cache-fra-eddf8230190-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70325,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5762 x 15, 8-bit/color RGBA, non-interlaced","md5":"0b1ca148890222235a0f9903636ca21a","sha1":"b451b4db431749cc40cc2a5f271f9807ca21f1d3","sha256":"54dc5bc49fbe41359681fa0af8add039fa1383a4f4eade34f7a0a5a257dd1caa","sha512":"37553ab4cecdb30b631d883dc0a1afe4b5e81b921fa2fb8054a63fa054c2f57954dddebfee1a5b676f97a392b954aaa553a803e6e9abeedd56f87da0b58a8475","ssdeep":"1536:3Cc3jdCcCx1zjonyR5/Gm5mwoKVehnITl1G/Ghdfal4pMy9c:SczdzCx9jonyT5mwo1hIp1hQ4pMOc","tlshash":"966302b241c2a627f87cb972b955522b673bfb30d280780a00cf15b6979517f04e3a3a","first_seen":"2023-09-16T21:00:24Z","last_seen":"2026-04-12T19:20:46.114509Z","times_seen":5116,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js?v=01","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/js/intlTelInput.min.js?v=01 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"74b0-Fu5cDWBeWjC59YEH297UqXupv6I\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 951787\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\nx-served-by: cache-fra-etou8220056-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 11469\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29872,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (29515)","md5":"c86b61ae6f79b75c7e08b42a351a7b6e","sha1":"16ee5c0d605e5a30b9f58107dbded4a97ba9bfa2","sha256":"e1759a4dbfab9dcdae85ac8ee40e4c961a098eb49f7e5a96ceb1ab928e6f681f","sha512":"cb1485a28c54e0b665efebb05f6c21696c28e8679f1e818e92657a121286c337231a435ea84bebaaee26b6b6c7e966049c85d1b4db8b9070c096d18ae4d8308c","ssdeep":"768:c603Xlqn/kiIzJT9FSRzA4xXnT2nYdn24X68a:cDiIz8A4knYdw","tlshash":"0cd2e7aeb365673ba6fd82a270e54503af7f79444604083d78ac8ede0288ed171f5b34","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-04-07T02:34:18.150961Z","times_seen":391,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/slick.css?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/slick.css?v=02 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vTpoDNlt0weMIMSUDRKsb%2FW51oDMLNVBER9l7VaLWXnBNNsy8KUec65PJsQ6vgNJjusbChJ7pxnjJjxkyEdpwNzHYeULMLxoznPAvL5n\"}]}\r\netag: W/\"691f1e96-6f0\"\r\ncontent-encoding: br\r\ncf-ray: 9c483637de5cb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-04-12T19:19:09.310348Z","times_seen":53674,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/QGYvz_MVcBeNP4NJtEtqUYLknw.woff2","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/QGYvz_MVcBeNP4NJtEtqUYLknw.woff2 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/lander/pl-helvionex-v2--yez-/css2.css\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 32344\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-7e58\"\r\nexpires: Fri, 06 Feb 2026 12:21:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HFOqhi%2BIzt46YteOwAX4tyshiMKDZEEUh695UAW7LfS%2F1G65EAYVQbruXMrjP%2BRWzRjRZ%2Bb4tw9ASpMlGaLF4PddsKWgbH3C6IVFRrln\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48363b29e0b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32344, version 1.0","md5":"5e6c7802c5c4cc0423f86c3aad29f60a","sha1":"e597938d6cb61d43f563ab6f8416658e17b4bb9c","sha256":"64180e183ded4fca08e464dd5fc537841c7c11d5051a203e2ebd09d95d7b400e","sha512":"ffc54d9058be10936dda658af2883ada72cf60a4e9a9c1b218861de147d59bc25b0f185e793e5f1af69e5804c49a8112fa8b604328c59ed853a68343a8f15c21","ssdeep":"768:pbbpxrZ4uZKIyi3p7F5oWGnkUwmgbh2WpIHnsd48zWqF64f9xPL:ZjrZ4eKO57FCWjUkTpIMddF64TL","tlshash":"89e2f1e68d35e4297c23c41903e7c060b8df5dbc98061b9fad16331e3b469292ba9e1c","first_seen":"2023-05-17T20:29:46Z","last_seen":"2026-04-12T12:06:51.40614Z","times_seen":289,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/bootstrap.min.css?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/bootstrap.min.css?v=02 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=2,i=?0\r\netag: W/\"691f1e96-26ea0\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fmJBiZ1SAl6urhGd9sJnBun2II%2FjTZ4aj%2B%2B9BDeNBbqVfd08yZ0bOJebL8m8v2xOdZA%2Be861ntlzfYwBXGmhC1rYdOu62uULJdDmSsPo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c483637ce43b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":159392,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"3f9f337dc3368919c11112255611e31c","sha1":"c3a6f8e2c8f9d89dd3da36b85e0747ed9d0c2511","sha256":"9820b58bc0c97ffb83457daec5e66035ff0181e7e4c2740c1a558ffaff38ca2f","sha512":"61bf0e7cd61e170c25c00fd687156efb80289455a9c6eadf4e2366e1fdad35e9685daca6de2d033d4e2b003caa582ea599fb7524748bd9862ad55f298302705a","ssdeep":"1536:4t0aJ8if0W8DsEBpv0cuJo7YrIWM5e0VUpz600I4fj:4t0a90VUpz600I4fj","tlshash":"f5f3a4d7f581341dd4a7c259a0d1bffd052f9686e3025eabb0177ba88b896c70863e4c","first_seen":"2025-07-28T08:05:35.89359Z","last_seen":"2026-02-02T20:32:32.027222Z","times_seen":25,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/mCustomScrollbar.min.css?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/mCustomScrollbar.min.css?v=02 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=2,i=?0\r\netag: W/\"691f1e96-a605\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q1uXF2j03nhjvirKLicIY%2F5yGB5jI5pE3sKFp2zC%2F8a%2FqgslZzXaV4v4r6IlPo%2B24Rx8s7ok0RQonDmnDgEdpAUkjG7kmqSaP5AuuVbi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c483637de54b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42501,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42501), with no line terminators","md5":"1ca1f39c2b675e3345712066a464cb0e","sha1":"d687ec7a4c84ee0042aa21e8aa2ba214b2c4a1fe","sha256":"225597c6e8d2fd430f8b98b1e1b26a83be5835846232802c4b82e55995b19b28","sha512":"e8037f69c2522f5ff5e2f0abba291bb5163c6b92d498d522817b5976edefb5847d7d8011e01b265a93b93340a7f519fd8078fc71ac2464560ef2133e34fb6124","ssdeep":"768:hStyRbNWmYd7Zbt1w7R01rnk6BcxL+zhRNxA5l2ng7ytcKaWDxQ:hStyRsmYd7Zbt4R9","tlshash":"541307992a4336dffa4f447dbb81379a11fc378345521a6cf0d758a4ab88bf7a439402","first_seen":"2023-11-13T22:54:27Z","last_seen":"2026-02-02T20:32:32.030479Z","times_seen":27,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/odometer.css?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/odometer.css?v=02 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y1RNITiQcW4nm6MhDrpdPpFkyKvH83h52XYNvi%2BTgCs7f%2BvoJkO5yexaU5N6Wh4UBN3Q59xmKCahdV4ceCkZuw9OdYVpXODULqkhhrtH\"}]}\r\netag: W/\"691f1e96-e24\"\r\ncontent-encoding: br\r\ncf-ray: 9c483637de56b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3620,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b0db2ffb579367350645c5cce8bcb622","sha1":"f52705958f241317f66b5ca2153cee1c1aa8b892","sha256":"6613bec6b1e7bf01e3507ca03d1f4baeeb321d13275fcd99ee7fc85f3025e89f","sha512":"4312b7eec24f918e3fdef8d00e35b3fcbc47477e4eae2f4299ea103e1926466d14d3b60634b539e26132abcf654de1ae13c40e47dc44a482cde7f5ce669618b1","ssdeep":"","tlshash":"ee71f51d1f60132463367406b7d927a0fefcb9525623e59db74aa44bcd03db9c288e17","first_seen":"2023-04-13T23:00:03Z","last_seen":"2026-04-11T09:23:27.724428Z","times_seen":343,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/logo.svg","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/logo.svg HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5xb3ouYiHk2lEpFCRgrqJWOjBQuCbRMOo8eQfIuvgENAAzpMmyD%2Bbz6DM3SF2vCeOt0%2FBwYTnMvd8faJOBU0HDII807Vj6OM8q4B7Kb\"}]}\r\netag: W/\"691f1e96-1a4c\"\r\ncontent-encoding: br\r\ncf-ray: 9c4836380e8cb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6732,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf63d8eae2582209809fe9308d040fa9","sha1":"85112e3b83949b65695a5b20bc4521498dad1067","sha256":"c868713b267c654801e1844ef5691860cd725f1305ad2489fbdfd438b4f9caa5","sha512":"2d4227442ee65da7bc0ae438c90e9636a9c4dd26bc847930139083f317be672f995f7374bbcc9014ead65c9bcc81e5ae95d5055ba4a23a16b0aae528d54064d7","ssdeep":"192:lXTbDkK/HDfL+KhLGtYveEJi3ecaX3kDKiKNiZsDyM:l3P/jfL+KhLGtYVyaX0+LNi2GM","tlshash":"c7d1a7ce7b6587e0869953f7eb1524ea7d3b80d197891611c3942f0a68c7d3aed08ce4","first_seen":"2025-07-28T08:05:35.946053Z","last_seen":"2026-02-02T20:32:32.056424Z","times_seen":25,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/fontawesome-all.min.css?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/fontawesome-all.min.css?v=02 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=2,i=?0\r\netag: W/\"691f1e96-e623\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D%2B41zY7INY9L6nO76HrHGyn8YwsC4Ynhlm3W0tMEYlV3KxVVr9yVxZ8LRucSGOgGnu41DtfWS1fZWA9Xp%2BoruaWmySAHtPmQEVmZuk%2Fw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c483637de4eb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58915,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (58729)","md5":"2ed06abe99636f10ec07281481edcd06","sha1":"5d235508002e8890fa1f6b23a0ba170479506c29","sha256":"0e49ae5cb7f64aa213d69029ec30ecfeb2606119e80997b316e47f9b01e509bb","sha512":"a92cf092d0ab22127cbc50730ceca1cc91887a8c958b0fa6f85217ab1a69e10c777fd20588ca155468ea7ccddf0d08d3aa890f3d0cbf5bf54d141a9198c1a951","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSz+:PE0PxXE4YXJgndFTfy9lQS","tlshash":"b743fbb8e54c01c9b732c44bef81b2bc61b6f73de5914d95f00e591c2ad26a811c5fba","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-04-08T04:11:09.112292Z","times_seen":31,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/css/intlTelInput.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/css/intlTelInput.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"4f9c-YW++h4sxifKlsVyMHgLARnQAuWE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\nage: 1125800\r\nx-served-by: cache-fra-eddf8230088-FRA, cache-hel1410027-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3384\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20380,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (830)","md5":"b46140e6a10359c79822e7b801f0391b","sha1":"616fbe878b3189f2a5b15c8c1e02c0467400b961","sha256":"def1a0f6d2bd2a01f1f842475b7e7da7f2596f2783fd8872c37624ae406425af","sha512":"3a44a85b26a849c8d784e9bced73b9843cf51396eebe6d9a024abee73266698a72940d0e289e67a39a9ce1946b980a686971205dcde7d22c954b5ab91608898e","ssdeep":"192:WTxfNDsX5uVsAPkkk8ii/yE9y6czvZzorr8/zJHVyT1bK0VN12o7tHPVEVtVaVb2:IVsXk1kdCqE9y6mporr8LJj0H12o7U5","tlshash":"c5929e2346b00d3e965dc1fa38a2c1b5773f0c8a35eecc96eed9504a5887b90e5ebc54","first_seen":"2024-06-08T15:25:15Z","last_seen":"2026-04-12T18:15:38.064266Z","times_seen":808,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":21,"dns":1,"connect":26,"send":0,"wait":30,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/banner_shape01.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/banner_shape01.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 16814\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-41ae\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eGzMaHDHsf5EkbEnRhndsN7VY7dnemKVYVb7p3wHEH%2B4AGduuGMW8iKZ4NTYTYe1DWnMDhSVhGA3TKAr2Kq1U99ltPcH5kTduxJX5gbt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836380e8fb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16814,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 169 x 169, 8-bit/color RGBA, non-interlaced","md5":"d7e82c92ea478560aef283f023562333","sha1":"0d271d55f750ca14cfdf9044d317e6ea6b21e2bd","sha256":"2443012f82b0ba607d62fa7588d045ef689bb657e8e9bacef9b7162cf33c27da","sha512":"d3fb9a40e976247b9c505833426c85f69862407692c73fe58387c822ba1535488dfb8789174b0a3cfb2c062036d6d58dd6ff22b4c527a8d5607b7becd71cf389","ssdeep":"384:DVozdPM7tD9Cuqn2/RaL2rT7u63OOElMm338NuMSLdzMH9otU:RoRPM7on2/RaarT7dnBm335oEU","tlshash":"1072c05fbb57521024038fb924d6c9b697ddb6ba79c0dd001c606eaaa4ce7813c25cdf","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-04-10T22:15:49.677953Z","times_seen":63,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/fire.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/fire.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 4253\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-109d\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aTG%2FM4Bey0h2r6%2F9dPJtxUsIQWWkAizJgoUe7g4R4myq5lY6NtSj%2BfQN6hg%2F4kqzSHXxQ7ECa3odwQsWtwA8dIMTniT00AQRDHAkr%2FJ0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836380e94b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4253,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced","md5":"7c334312fe2bfb835806a1b50c1f4c22","sha1":"378b48dd407e4ae3945e18a7c3391ade8bbed3f3","sha256":"c8622f39fdd2309e038fcc06df8b59b00ca288820162efe40e48afd390f09d62","sha512":"6fe17943bd6d78cf6e164deb803fcaf5f6d2e585495c2da71480f565d5604e0501c80810aa801b4502bcb028a1acd72c7df80583efecd6dba9e59bbb5b3afd30","ssdeep":"96:ASMxpOWmMFSuCIMwgnYEkX9LnptDw3daAa75nAyRYBjy6DJ+J2KtQB3h:ASshntCWgILnptDwoR5AKsvJ+oKtQBx","tlshash":"b2917e0e84c3a9b1058b21bbcfb371e2146e942a61e1703e2df661eb0b71796b874f14","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-04-08T18:00:06.770893Z","times_seen":44,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/banner_bg.jpg","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/banner_bg.jpg HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/lander/pl-helvionex-v2--yez-/style.css?v=02\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 54936\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-d698\"\r\nexpires: Fri, 06 Feb 2026 12:21:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NtlW8DYWMJuWgdwrDfNDsSCdFSuTuBpr3c2WB7L9%2BtuNMhn0iGscedEJBBv%2FFQquO8mCKg1LCgg176y0KMiNaWNxfIimHR9s64igXRGq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48363ad993b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54936,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x948, components 3","md5":"de1bdf3a932ef1667bdc4c41e73ebf86","sha1":"e2e820de5da5405feb17d71e7d72820f6f0bfe41","sha256":"1c63aed5f9cf06212442373a1ae4aad7128817ab619a68d4d28560d9d4b4124b","sha512":"f3dea34773ccbdeac3f89414c8cb2293862b0a6d27e8afeb41266911b00e805f7d820990bcaa1c309b46c96847cf0cf47e38cd47579222168c8219947008a7fd","ssdeep":"1536:7VJHEx4EmMEMmWNiJu4utq8t2Ob1NzLTB4:7bkxpdmWN216V1lLl4","tlshash":"9433e012ef094117e41c1fb1e4eb2f383b3492be674eba8f8745473661ab251ec4458e","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-04-10T22:15:49.725438Z","times_seen":69,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/QGYvz_MVcBeNP4NJtEtqUYLknw.woff2","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/QGYvz_MVcBeNP4NJtEtqUYLknw.woff2 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/lander/pl-helvionex-v2--yez-/css2.css\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 32344\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-7e58\"\r\nexpires: Fri, 06 Feb 2026 12:21:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5IxRGQvlYyeTex3MkU40Tq2F3WlWxYky9JvuV4Eh0yDTNRxIIy%2BZB2Dt7fKoXK8xP%2FOD5zib8HuKS%2FFhDFPqoAMa9B4fYaj4lwcJoyIQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48363af9b1b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32344, version 1.0","md5":"5e6c7802c5c4cc0423f86c3aad29f60a","sha1":"e597938d6cb61d43f563ab6f8416658e17b4bb9c","sha256":"64180e183ded4fca08e464dd5fc537841c7c11d5051a203e2ebd09d95d7b400e","sha512":"ffc54d9058be10936dda658af2883ada72cf60a4e9a9c1b218861de147d59bc25b0f185e793e5f1af69e5804c49a8112fa8b604328c59ed853a68343a8f15c21","ssdeep":"768:pbbpxrZ4uZKIyi3p7F5oWGnkUwmgbh2WpIHnsd48zWqF64f9xPL:ZjrZ4eKO57FCWjUkTpIMddF64TL","tlshash":"89e2f1e68d35e4297c23c41903e7c060b8df5dbc98061b9fad16331e3b469292ba9e1c","first_seen":"2023-05-17T20:29:46Z","last_seen":"2026-04-12T12:06:51.40614Z","times_seen":289,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/pxiByp8kv8JHgFVrLEj6Z1xlFd2JQEk.woff2","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/pxiByp8kv8JHgFVrLEj6Z1xlFd2JQEk.woff2 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/lander/pl-helvionex-v2--yez-/css2.css\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7992\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-1f38\"\r\nexpires: Fri, 06 Feb 2026 12:21:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SiQpAro3XSlDzTLV79z1skaY5hyMn9GL%2FA7sBdr1rFemwHwjZ9mm39PKXnBSIO7yJU56UtGzPjhgeePKf9gal9OszbP3MCod19HFtuKn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48363af9b8b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7992, version 1.0","md5":"b550bca8934bd86812d1f5e28c9cc1de","sha1":"fffe793f52607740984a931ee7158aa82db94a72","sha256":"872e862918591a9e824dc03ed92f05729435ffbb8ebbb10eff7eda26592b1798","sha512":"a0b84873a17f6ded0d966c0f159718ccbb617ae19416815ea3f706c436becee0671d9cbc01c0fc4572712856bd0c1e5b32e2dda8fbf56d540dee5e36e833c05c","ssdeep":"96:2TVwxWNrKIvPdg1axqKXivj6iCvB0H0P76Oj6rDbeEmcDZsuVGD0RqaHbJiL1BgF:2TixEECQzfUv6BSMGDU5agjhWbq","tlshash":"77f1ad9ab6c85e02c724287b05c14727593c3313db2cbf56049ec2ad62c7eb14c9b06b","first_seen":"2024-03-26T19:18:23Z","last_seen":"2026-04-12T18:42:50.426445Z","times_seen":11253,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/favicon.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/favicon.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 4768\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=6,i=?0\r\netag: \"691f1e96-12a0\"\r\nexpires: Fri, 06 Feb 2026 12:21:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2BHgE3XX7hWO1pFRRISCbb7tFLz03q0oiGaOZ%2BU1jMV1NF6tlyOgZy4B1BfX%2FIFqGq8VFW3z%2BjieTGdAYWrf5HBH6FmYG3puENNnCXZj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48363e2cc9b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4768,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 51 x 51, 8-bit/color RGBA, non-interlaced","md5":"d65d08f0adcb806552671171a9a169b5","sha1":"1fa16f7f50533aa86a7e90a3ae6a35829f5ffdcd","sha256":"b8d3642c08285d9649c1b278b255be7f8638a6a0d5245ba6cc9d1b824afda471","sha512":"855c032c9534a1cb9c5f9bfb1e016d9ca3a59c9e4516069fbd7acca46a1398d8e4f1dfb512c442f68b91f1ec598a3c5411cbbeac9a3f8b7caaf0fa5885c3325d","ssdeep":"96:vsSoo7F5wknmWprymQ/5IH0vTmlN3XNSXRfTXEpQEazxC6hTnITf1SqFkm:0S97FSkn3L0XV0pQTVTsdSQkm","tlshash":"2aa14b0e9600ac832676f18126f336da36369ac4d940f0602dd68867a8254fece977da","first_seen":"2023-06-08T12:31:58Z","last_seen":"2026-04-10T22:15:49.590644Z","times_seen":58,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/style.css?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/style.css?v=02 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=2,i=?0\r\netag: W/\"691f1e96-11c66\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NsCF8upSzE2XvHsCD8UpIzS0F3OJuKXV6Ei8i5mLwSe0nV8T7VzcFrmtseCzGFhmWT8mZFb4odAbtS7NUo9EmUp%2B28FDZ7tMKk4xAaCe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c483637ee6fb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72806,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f5e8ae82dcff6f8f995456c295ac40d0","sha1":"097b78c071d42ecce639ae2dbe65dea34fa9dfd1","sha256":"a0dd36dbc934310cc3391bc680bfa6f75b6581702b69911826e2d64553d36c2c","sha512":"75fc7a7f13401b30514781d713c00e4acdebe983b730e5f200a5ce34c7fdd72810afbc827f0227bfc1183f352ae8df56d16f18e483d581b9f4befd388ab212ad","ssdeep":"768:GP6r1DIDXgiEr4CI0rOSJo9QoMiQBGc+ndCWm1Mdhkg8HdJCIiaR5u8p+Do5xufx:G7DHBUV7ylGupn","tlshash":"c86374acda58108d7313baa9bbf45b615e6d50a3de0f06adf191260d83cf66c36336c4","first_seen":"2025-07-28T08:05:35.875262Z","last_seen":"2026-02-02T20:32:32.044007Z","times_seen":25,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/ion.rangeSlider.min.css?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/ion.rangeSlider.min.css?v=02 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=2,i=?0\r\netag: W/\"691f1e96-370a\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OOKJ4uWL3BHgCVVKmkX3J9zJWiuWZsWfdRR14t4UqCwz%2BFC3rkAlnlU1b221uhDTE%2Bpmd8mHg4OeIYjKClM8yFQWz1gxPkbXmfMWE8ne\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c483637fe79b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14090,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"60b1c813954526dba1679754caf09e55","sha1":"6b0eb6596e35755299df6f99c63a68ee4bd5934f","sha256":"91c58280245867777d9891535eb99121fbc1bf2a9b32a98b27de8b11ea98ab3f","sha512":"78ba645a2640fab0c5bf0634cee17118a5e14b1c143622e8db9cd973be7d09c8f1efdab8b0645548cd50eec827d0bd039da7cb522a227d12e9c956d84d9fd1e4","ssdeep":"192:RtcC2JSaHRCob10cnt+fqq/ruBZEuA72FoFxBCd47z2FUVqZdjEp5Svt8+fhRnNJ:RQ+/SBZrQ2FoFxHGFokfhpR++","tlshash":"f4529ce5dab70d86742ac0a42b649f5d33267d8b8407ceadbf9c72580f052d9b4f1ac4","first_seen":"2025-07-28T08:05:35.9104Z","last_seen":"2026-02-02T20:32:32.014822Z","times_seen":25,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/area_bg.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/area_bg.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/lander/pl-helvionex-v2--yez-/style.css?v=02\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 304811\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-4a6ab\"\r\nexpires: Fri, 06 Feb 2026 12:21:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HNmwSeiPjRwxbKbGElPZpsHc5YCOEKVI903t%2FOzKgdr681hyZRnChb5%2FlBh8vAMxe%2F%2BeR2%2B8cT4b0OzAY25Ebl%2B2j8SgLJ5N0wKS1DmG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48363ad99bb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":304811,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1675, 8-bit colormap, non-interlaced","md5":"e7b14e3bc56b0ee5752ee5efcf60f979","sha1":"61110475ad90d3a638e3fdac517b0ec323f3f74e","sha256":"63ee44421c67d8decdc510d2c5549b12b7f1ca910eee28ac7756e36cea969bcb","sha512":"c277011840d033b1e1cfeedc673f45d9fd33ee70a7323a92c375be493c2d707cc2ddf70430523bb57079b6fed3b5714cbe5cff8d0f758a598a62e61333b37d6c","ssdeep":"6144:8dGWn1I9bV5XH1FVGdeux7G2HmDytVNSGAxcaQEaQkBNHH/TdOeUZsiFIUF:8U1BTlFwtGUqMLNE/vFk/HH/TNEF","tlshash":"045423fd9687a357813e19293ff7ee402e79ba7814824af21b58784f0f194ea25f05c4","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-04-10T22:15:49.690099Z","times_seen":53,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/pxiByp8kv8JHgFVrLGT9Z1JlFd2JQEl8qw.woff2","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/pxiByp8kv8JHgFVrLGT9Z1JlFd2JQEl8qw.woff2 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/lander/pl-helvionex-v2--yez-/css2.css\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 5472\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-1560\"\r\nexpires: Fri, 06 Feb 2026 12:21:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0G7dOklimUKYha9fBWb6Flf9UjDI6VfTKPH70cbL3Yz5exEM%2F8U%2F9%2B3rCtFQ6XLs%2FTsnWZqBPmyNApEs126lpwve9bA%2F8M534y2bywvC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48363b19dbb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5472,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5472, version 1.0","md5":"7a1c6501aa2b3327c1cf556362a851cb","sha1":"d8877f60de0e8dd74e615b8a09a1b2f36af4a9c0","sha256":"5d14bc2b8a2ee752d0569a2a9e6b42d44891d4266f592ad40a651b8d03d7c56f","sha512":"6cfa63bbf30e0a677ba58fe27019d5415d0faca070c49a5840aad8e4de11e0a94b54c6fe27e4f48f88ead21ad28a19048a744979f605b807a04b154a2450af97","ssdeep":"96:n7VVBhs+mcrPyYlhRhGRH+NqD3UQHoEPxyDPFGgJDRQd5B:nxdtthGReNqrUQHPxpgVRQ1","tlshash":"dcb17db5f1639e6af001443bc4bfcd2519ef9e3c0c2436e7b89640d259ed2e59a42b0c","first_seen":"2024-06-07T12:50:16Z","last_seen":"2026-03-26T03:58:58.936452Z","times_seen":53,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/fa-solid-900.woff2","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/fa-solid-900.woff2 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/lander/pl-helvionex-v2--yez-/fontawesome-all.min.css?v=02\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 78268\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-131bc\"\r\nexpires: Fri, 06 Feb 2026 12:21:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BEKk0NVC94LICm9Pvd5yKOBk6SFPi69vaySifcZ0TNF8ak5EMx9GTaGkAwrXXCHoVHwCi%2BmKTxWvo5vw9KQBk1Tsv3DtHbyIzvEEPeqR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48363b39efb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78268,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196","md5":"d824df7eb2e268626a2dd9a6a741ac4e","sha1":"0ccb2c814a7e4ca12c4778821633809cb0361eaa","sha256":"9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537","sha512":"a84e13f216ea95146af285af98aef0b464cd962440e161a1c602ca2178a179e04ae4ed2a2f98d5b2eb165480ec6920e0e88de77d5f1eb7f11ed772b092daf865","ssdeep":"1536:AOhrLFyv3lzKb1hkG8l0o4HXWj2uwgcdSJSls7ZahNpUFl8a/KdDe8Y7fN5O:AOhfMv3ILc0Dm3wA4LpKKdO7a","tlshash":"c97312aba6cd77ac88dd14565f0043533afdfb35ab27864349eca2e01a300677b5712b","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-04-12T19:37:45.750552Z","times_seen":40820,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/partner_img10.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/partner_img10.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 1747\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-6d3\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7paaJTYmxZKWjSCt3y25oyAejzGJ2NCFnKt1qhTYGUCj8sw1HL%2FJQ7GMSPj1MinI0uLjhFG5ACPVGQeZtob1xZv%2Bp2ZJfTdNafmE%2F3K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836381eabb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1747,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 142 x 46, 8-bit/color RGBA, non-interlaced","md5":"874e9eb1fba4b6c91e3ec93361656538","sha1":"37c48926c8f12717169ba8c081c431d44619f0f2","sha256":"90a362afa64714cb973be659227036336c24717d6add1ac44480304a2a4c7606","sha512":"e8c2e778f275cc22da0b0188a543fc56b492661aeb82a88460f9b03ca80b2512ed2d8e661ca4871b5afdf50045877a0fa7b7014da97bc591952131b8c4a916cd","ssdeep":"","tlshash":"ae3108c0584b319f182cc5d3a7896e1b1333821b5e25beda7b777f16cc17860958002f","first_seen":"2025-07-28T08:05:35.938545Z","last_seen":"2026-03-11T04:48:20.671788Z","times_seen":31,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/h2_choose_icon02.svg","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/h2_choose_icon02.svg HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSFIt00Fk4qy%2ByscjjtAnAR2qVpFLtbJVNPeQrFVVGVLxW7Uhuxw6xGpi3o00gvc3QWNbYyMy2CqEk1zpfl%2BuOu3Yh2fWYGSlIwVVdUF\"}]}\r\netag: W/\"691f1e96-104d\"\r\ncontent-encoding: br\r\ncf-ray: 9c4836381eb1b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4173,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c187db2c75e7161bda005970a8b1f07e","sha1":"4b7d4ea159246d10302a50998f2a5c74832fa331","sha256":"05bd9b95c1a2475f7ebb769e22c7e55898d70b38ef601999b25198cc3180bcdf","sha512":"bc8b3380c31e507a57a6696689b869f7654c9aeeb0c7e1a35bbeb06714bcfecf58e85c7c1fc2e245baae48e708364563137b10cb8c12af9a39490b58e6037cf1","ssdeep":"48:P84r2ZcPdOghVhaKlWC+03kYU6Nfvenw1ghmIKWfIQVxdldSDz29uHg5tx2++g9w:P8g9Vj/nkWfvsnxb7YmN+gnGNX6DAf","tlshash":"16814168b3e2e2d4f504f3e08765acb5376724bb2e22c9690af72dd0fb0580d55a8cc5","first_seen":"2025-07-28T08:05:35.88583Z","last_seen":"2026-02-02T20:32:32.055261Z","times_seen":25,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/chart_bg.jpg","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/chart_bg.jpg HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 72224\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-11a20\"\r\nexpires: Fri, 06 Feb 2026 12:21:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=39tki8rgiOA%2FOFukvmR3KtA0S07BdFjQmj3mZHcyQt%2FAfbye%2FvQ%2B0HlqafGlB5a7gILjKupZVh29OIRkxSruJEuMrHqUV2vRM%2FYSAtLT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48363ad999b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72224,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x787, components 3","md5":"142452ef9565111ab8d5edcb76e124b6","sha1":"de9f992c9c81622d3d58f80b85077d41187912a1","sha256":"50e5454775388b8d54f6155b1377fac47b7ab6a6b2997e9379bc102b31392422","sha512":"e86f4b5a584121d183558af719fb9e96257f28e8234aa8c1b76a2448968aabbd41297f3c00d4733de9b537f81103026f3f9e49ae3b406abc3eb1ccce720da5b4","ssdeep":"1536:zDBX5fx3zp5ZHUxWFGGoriXw7LaL6CIa1XlOoRZVMkjq:nRJRl5Z0MgmXwiLr1ko+0q","tlshash":"006302190fb85506d0ac6b3929972123bb33d3fea7a72a7e17520a715dc161cbc6c782","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-04-10T22:15:49.774339Z","times_seen":69,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/global_lpn_1_2/validation.js?v=01","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/global_lpn_1_2/validation.js?v=01 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 04 Sep 2024 10:37:59 GMT\r\npriority: u=3,i=?0\r\netag: W/\"66d83887-14be\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tdZYg1GxngQFm%2Bflzo7gW3GugTWUBKxor6zw2RUxk3jyC7R03CP9j4NmLeaJNiKh9NU18OhWQWkIczHM2Qb8ZsZ6tyhkrh30D%2F4QHqCn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836384edbb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5310,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f5ec8fab2fe5f2ea37688e53ac17e107","sha1":"7fd97c718f4c7803166ac1651d08ef44d41baeb1","sha256":"0ebd806817fa3379a90117bded52cd86259e5b8168eeae7b7dcc1ee95bb33ba7","sha512":"a0063ec46538d44fd21bcb65c2f6027f67f129401e5e30b146a986dd16414d578f71490d0cc29be6b52d81e5e36cc367b4e06d9f42126714c496a70357777c03","ssdeep":"96:WOTqLdUpFVkda+pcfQiEnCObOwrSjWDsknMOPOQ0hnu4oGW0s3ALOwu:WOWLdUpFVkda+pmQrnRhrSj0BmQZvGto","tlshash":"90b173e870f10519693356fd26df510669d9710bec45d98e3ecc83800f568e8ee9a3ec","first_seen":"2025-04-18T11:50:01.200675Z","last_seen":"2026-03-21T18:18:01.318425Z","times_seen":233,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/js/jarallax.min.js?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/js/jarallax.min.js?v=02 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=3,i=?0\r\netag: W/\"691f1e96-4570\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cSvfM8QteWWIJy4a4xeHhwk1%2F%2F2jjMxzzTeaHWIRogFAIZefwAzbSFBNC1Awg1cmOIHfChQGF8UC9J0s5UgLwMBpmlvny7o%2F6lYKf8XD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836383ecdb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17776,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17623)","md5":"56292bc8bec5cf213681fa33eab00234","sha1":"e489de853846fa1c8f686bedcb20cb50dc42e6b1","sha256":"31159e40a07249ad9836f2b3283328979bb23a11a0c973ae1ebd482bf6c88567","sha512":"0daa4722ca8861f28dfd5b53990980aaf50e51440061a3d8a3282ca41d2b72d8905941d5cead8dab7955ce4d80c13eb51107d7bc570f847df38aa62e7f50f0e4","ssdeep":"384:sNOFAgK3XCdWCwHGJp8Au2gjx2alX7GUqyDjwpoUkij224tNA1qxiqw:sNOFo3y0CwHQmAu2gjx2alXnqwjwpoUJ","tlshash":"9382d95933a0333185aff1dda84fda4cf63495785396881a220cc5fdad25d3c82bae9d","first_seen":"2025-07-28T08:05:35.843547Z","last_seen":"2026-02-02T20:32:32.044786Z","times_seen":25,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/partner_img06.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/partner_img06.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 2179\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-883\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vSJJZOm%2Byy6UDpy5f621m5LwP2nEj6kiUblShyq2ef6YIk4QSQRHGFAAel%2F5WLmneNYIKsD3P%2FDEVSl5X%2FxoJwVkUwugbhXuCogxgPNa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836380ea2b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2179,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 145 x 46, 8-bit/color RGBA, non-interlaced","md5":"6a9fce7fcd880ed46962635c54ec04d7","sha1":"3ef89107f5f5311f8ef5ea2af981ab7b43fbe961","sha256":"40b5f6f79c113b7b6eb7d53d3d368edcb507604d3bc1e443f3203ef0ef85d171","sha512":"f1a4cd69b1c40f99e7cd181b5c6112ea247334cdb42744871a60796d88466b42a567f798d06b79ab59ab5bb6a3fe67f2e8f54e17b8b8cb6f23842fcbaa1b5078","ssdeep":"","tlshash":"d3410bdafa8415c44b92502c749ed7407cb3c4dec5d035c3a594e8839aa998bca2b992","first_seen":"2025-05-06T10:40:35.066552Z","last_seen":"2026-03-11T04:48:20.630808Z","times_seen":33,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/choose_icon03.svg","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/choose_icon03.svg HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aR2QXMNjxLxvNbZwQ%2BjlSC6egiGVAj1OJGySHdHdn4nUj7TLC5ELCXAnun4%2BHH7bLgHGYSoDYVFyeGTNPIN1VAifnGTFGyBCQYJUsCre\"}]}\r\netag: W/\"691f1e96-dff\"\r\ncontent-encoding: br\r\ncf-ray: 9c4836381eb2b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3583,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"83d2adb580ae5fba5677f134193899ca","sha1":"1a21e395ef0ddc348b7292fe2e8b6823b01ef420","sha256":"a5cdeb5b14b8cfd9fd6c8e2d1108eccb666ffa5cd24b2e7a7fe4926d2e6478b3","sha512":"c0892f60e644c1f0737f64a8be0e1a58943f5ea90319576fdbfb7bb4d279c3a97a58c09a2f766503e8816e9b8174b139cc9fc672cbd8c854ec4f6d72f08bbc8f","ssdeep":"","tlshash":"8271b6f5a3aef2d4e108d3f5c6157839a6373cf47e91cd94e0ca8c81a8a086e195cc93","first_seen":"2023-09-24T21:42:29Z","last_seen":"2026-04-10T22:15:49.668104Z","times_seen":38,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/chart.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/chart.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 19806\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-4d5e\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JxMnslZmLbStIWRB7cHfQ442on52qOAdXTEz1DOY4hX1WsO9SnwG66IswVi1GMgpPPDkEdL3thtsaMecuQJDSjzWam2bWNw%2BKKkKfv0s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836382eb8b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19806,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 238 x 238, 8-bit/color RGBA, non-interlaced","md5":"44024b9a462131e6ff78ef0a9ee1576a","sha1":"02464b72ede2f36701938a3249339e2e9c61de44","sha256":"b41b8d84e3c0dbde71c1ad13559202302fd4b1e8017ad7abdf33e8d2273c3444","sha512":"d44c01e811e4481d2cbd82f9c50d05b0063c39d64b6bf4cb47ba1d8980588c0518314fc4aeaf75ad6c0bbd5dbae992d7e3392a813b2aeeb890d830cdc8d28868","ssdeep":"384:9apEP2P8OjOdwU+lClJbkEpPagYhmF+/d37b3eRyLxjYkXWq5SblU:8SP2P8r0gD9XFsd33uRyLx8kTyU","tlshash":"ae92d048bfdd9c98ea84e109ee9f34ca4cf15d42684bf8b122b15e860b6e0710617f5e","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-03-23T02:17:51.248698Z","times_seen":46,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/js/jquery.easing.js?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/js/jquery.easing.js?v=02 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=3,i=?0\r\netag: W/\"691f1e96-11e5\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NsvPRb7ilbYTvUtxRHeWFOlAuJ1GT27QHYHIRBkRSEImcRcvCIxX1rnS%2FP%2FJAEDLu8Mk0pIs%2BlMRM5ZMxlc%2BOGLv1x8WgdQasGBruCqy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836383ed1b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4581,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"4addf6be3bb7c0bd79873715f146a38d","sha1":"fa9c1a22c52ee5119c80e62aed9f499c6dd88b2a","sha256":"fa900c43a7a64e4bde901005073ca0e2e48589d424e1a28ccb126e026e23f9f8","sha512":"4ef79c60406e030fad8f174419763d099bef733896fd4e051cd153033d71d81e881eec7e91c66ca5182181172c6dc173eb1d07282f14287c7958561fd61c0df0","ssdeep":"96:Jg/rrbuDImRN2+jTFkx2kZoZpPau9ugPlZ3s7WsyCtYqvPIJkO3ETqF+gZpd3ZOW:JWvCImFMLePBDtybbnTOUWMgLfOrj/V4","tlshash":"8691374868fe70208317f5b4461b9005627aba574c5cbe25fc4c4ea02f5893a8bf6bfc","first_seen":"2025-07-28T08:05:35.91751Z","last_seen":"2026-02-02T20:32:32.050819Z","times_seen":25,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/QGYvz_MVcBeNP4NJuktqUYLkn8BJ.woff2","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/QGYvz_MVcBeNP4NJuktqUYLkn8BJ.woff2 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/lander/pl-helvionex-v2--yez-/css2.css\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14328\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-37f8\"\r\nexpires: Fri, 06 Feb 2026 12:21:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PR3%2FtUwzP0ox%2BW3WQg2R8yN6i3yaDQdOzeNJcGJEb508giMIZeBaJTJNdvU8ljhuNwhAenTnJsZbJctOQmRgUgMgIjd6kgozcjkj%2F%2FGb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48363af9b3b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14328,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14328, version 1.0","md5":"6f4cf2d9f078b52024414970b7b7f704","sha1":"183cda6b3c0e01efaf654a6cd91264a20b98057f","sha256":"84fafaf5eb349d7a267a79404dc59a6c7930c8a106325540c46f652852f335f9","sha512":"c0189bba50a36a96f29f0f0ef0d0bd5190844068b193dc046aeb07d3bbc1a6d3cd48286b340eab933dbac3d744752ca88b6c5cdd9ed3f0c9b1bf2d5bba8832da","ssdeep":"384:fzwi5bgpw09CRIA9zfPlI1a04hCKMOgUwqv9:fp2CRIGzVIWhh/v9","tlshash":"3952d00536e42a6fc8e53eb3160e36636d68db47d0275b62f62de132b1d2a40f534cb5","first_seen":"2023-07-25T15:37:39Z","last_seen":"2026-02-02T20:32:32.022152Z","times_seen":66,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/fa-brands-400.woff2","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/fa-brands-400.woff2 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/lander/pl-helvionex-v2--yez-/fontawesome-all.min.css?v=02\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 76736\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-12bc0\"\r\nexpires: Fri, 06 Feb 2026 12:21:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dwyQAomBLmRIZYJSmnH2omawwpByr51rCflLwOCqqYqXJM77i2wbYHoNfKqObAuK4nZN%2BXhO2pSW9zPKyzNBaOexfcAmqnvTEyCzZRRT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48363b39f7b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76736,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76736, version 331.-31196","md5":"ed311c7a0ade9a75bb3ebf5a7670f31d","sha1":"0613c7ebba55ee47ef302c0f7766324692f899a7","sha256":"8ea8791754915a898a3100e63e32978a6d1763be6df8e73a39d3a90d691cdeef","sha512":"6048e7ab94134b7200f0d5ed7fb8d577298d4831a2b3a4e0e5baa5c67468f77d4409314d63d34436ba6ba038c86faf87e46dacf98d311a74291b976fa39a9674","ssdeep":"1536:yVIKSdIKO0RtQIJwjZKd4jkC8Voun7L5XpeVQ+OEmdEu:SItm0RtQpAdofaluV99u","tlshash":"4d730196c3ca08de6994937ce960efdd1b0d4dc7aa72c7525e63c9a451c8ec83834b78","first_seen":"2023-04-05T17:41:32Z","last_seen":"2026-04-12T19:07:50.309501Z","times_seen":19621,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/line.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/line.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/lander/pl-helvionex-v2--yez-/style.css?v=02\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 664\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-298\"\r\nexpires: Fri, 06 Feb 2026 12:21:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kD30Glwas4byHbnCLJlQ%2BTen0Pw9tPk9fgLTtpWDLgPPi%2FbHpBv%2F1O9uWbAbQckfbXWVQbbc00ExPHS17Z4egJ9Xpa3j%2BOx6C%2FozLSpW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48363ae99db4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":664,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 122 x 9, 8-bit/color RGBA, non-interlaced","md5":"67f78867a310eaddf28af0fcc363daec","sha1":"293040a164293a5493a8b569bd4cef8524de316a","sha256":"fc5637690ad53f5e138c452339237beeb9db5d4f157a609cebd884dcf471ba86","sha512":"512a9644f48a24e8ac0b603eb5d5b427366fb80d08be1840c9ef1ba1d20e6a6069ffa421debe1868653f0646e36bfe2363c2a20bc9d068fb7c44e0d390afaf56","ssdeep":"","tlshash":"430144ec01c0c2e655e82416c1f876142c6d3dee975208657f11042151339c4b26ee06","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-03-11T04:48:20.678569Z","times_seen":45,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/animate.min.css?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/animate.min.css?v=02 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=2,i=?0\r\netag: W/\"691f1e96-10bfc\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zMnks7W7lIOQO5kQjdJS4eNTqj42PU9TKfaSJUUaht%2BpcEgUvmTyYweMy6mhrB0Bbmrs3GsEtrBNzmCRVzIMhNwctvJi82p%2BIrxvXYMA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c483637de49b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68604,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"8ea67bf7d4ccacd55a30e2046f9241b2","sha1":"9e7eadfdcdf03a5664aaef256c76248ee786dd3b","sha256":"5d825a730b53e73c1ebf5e26ad9b5fc8e67ba28324ac6a55d5c966f4df4aa7b6","sha512":"1336cc299baba59cdcd3af3d2a9968a721ecc3ee2fbf15f62d295c761de8e88488caaaf27a8002f044ee3084e6306d6bde9a680c61bb5de71ef8056244c7f14a","ssdeep":"192:LIQHnIwf2T/awfDZUiduG+MONjnbimZbHMxymDSVbyPiVEzfukrWL7XU+qLmfRvw:LIW/yffHf7SpS/fjf7","tlshash":"9063096929e1114466370a15c7df9f78263ce5a31826ecfab3d2588bcf41fac23c9617","first_seen":"2023-04-13T23:00:03Z","last_seen":"2026-04-12T17:29:39.512355Z","times_seen":632,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/tr.txt","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/tr.txt HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SL3TZPXKtn55Pp2YEJYtAvnuVWS%2FSTKIPHNVcXycpxsmyn%2FswY5sJYHs23aBcKnTTqisE%2BNzr3WxwBM6AhEH%2FKbvBS7BryBn0Ba9zlJY\"}]}\r\netag: W/\"691f1e96-0\"\r\ncontent-encoding: br\r\ncf-ray: 9c4836380e8ab4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T18:55:58.746745Z","times_seen":13673560,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/partner_img08.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/partner_img08.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 1973\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-7b5\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7B2TC4LUkX4uYjuhOhXChNkXMCcb3m%2F1Idt3kFG%2BD9iRpVxgL6Rs%2BMKrTGXB2A5fDtHETmnhvqjE9HRlmTmGckic%2FVd6wCQSeCPdLG9E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836380ea6b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1973,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 176 x 44, 8-bit/color RGBA, non-interlaced","md5":"57e5cf6f1d4d0690f1fd462f695c9ab5","sha1":"fa669a1ed2f0f49f476a4a6742d4465e08eab88e","sha256":"5f253a2d1911d92ef860e525bfdf03bd527905428be0ddac1a4da363a1c875d4","sha512":"5b036cb07520afa215b724e1c2ccd451b136d75bd7063170c1eb1cc1bb290dfe4a4bb4c684d825c7385cfc573e0cf5a967202c8c9bbe7abcb17c1ba53e251c62","ssdeep":"","tlshash":"1c4108cf1831d063bd4b92b7911d8652ecb5688f0883200d2a7fb22c4a2aa7737b6153","first_seen":"2025-07-28T08:05:35.841451Z","last_seen":"2026-03-11T04:48:20.70022Z","times_seen":31,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/js/jquery.ba-throttle-debounce.min.js?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/js/jquery.ba-throttle-debounce.min.js?v=02 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=3,i=?0\r\netag: W/\"691f1e96-3104\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i9AzoXdfh3cRtRX%2F6j83uR6QoFBPXdrGwwVxVDH5792MxE2Q41nBllpBYfXMJSRinMf4taSmM3AutDzHQYqA%2F9av1MECpnMUbG6PA3iW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836383ec7b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12548,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12548), with no line terminators","md5":"f7898c1fecf8c840965f9db729e9c3b2","sha1":"69058603b500892a87aa8d2810396433087ec64a","sha256":"c9dc35c0297af802a4277beb28cc2d946ccf6f64aad791087d338f74085a5eb5","sha512":"e1dfc0810f935926769112f86ac00a56fa5f81af21541773f298f4c54d712da82d9145675f80f0dffa7b51c0800776d26d2bff5f6b9ba90139e9461fa8bd5bcd","ssdeep":"384:03ucPNUEHePWh4WHHzOxhWP594zza2H89aMgGwVXFwtst7H9tCptp52Drs:b7DiyMua2H89aMgGw0ut7H9Mptp40","tlshash":"f442001f239d2237da07719a4d4f82897a36e91d2343491db62cd4d16d748386b3eebc","first_seen":"2025-07-28T08:05:35.864927Z","last_seen":"2026-02-02T20:32:32.061115Z","times_seen":25,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/js/jquery.mCustomScrollbar.min.js?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/js/jquery.mCustomScrollbar.min.js?v=02 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=3,i=?0\r\netag: W/\"691f1e96-b9a7\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SwGRq0ugoHmR48ruHsHkycmm2kjQeRHxT4OEv3GjB4m1lUlK4zGHrhNoptWCcWQ7IZN3mA2j8vbAsHOGDgYz2%2FAXI3xHvBnDRC3cf%2F4u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836383ec9b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47527,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36076)","md5":"f92743621e37123252069aa24e4ffb68","sha1":"975d1ea13fc673d77836777ba1290049f7b5d254","sha256":"b279b8f43e0dfb8006547b663f00f9cf4a30b30d8349dad4f7c600e0ce2e318e","sha512":"0d3f6bd487f1eb5dac9f96d9602f4664cf0f11e3bfbb6f98380a0f7341c4342cc38ebe6806859720e944aaed2a28891cc477d5d28b12fee208aac74307c02225","ssdeep":"768:BAL23pCa2ZKvS1yQc/kAROc/QO8NQjcR22f3p9cZR0z6kpC6K+y:425Y1ycqj0z6kA6M","tlshash":"5323c6a53291383bd1cff359dd0bc54c7336ab62a78a485c1b2c84749d609741bbaebc","first_seen":"2025-07-28T08:05:35.915418Z","last_seen":"2026-02-02T20:32:32.018884Z","times_seen":25,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1046\r\ncf-ray: 9c48363beacd56a2-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec2-ad3\"\r\nlast-modified: Mon, 04 May 2020 16:11:46 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 965817\r\nexpires: Sun, 17 Jan 2027 12:21:47 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=m%2FSd4COMlW%2F4h3t8fUy9hnvV1vj6SSrlHJcjiW33xXJzPWscFNLTtDCE84%2FUdWssyMhTLleOqCMJ39hgi4TawMGO8J6GHE7de358uvJIzgLbB6zOHoCt6LWRBMZ6pBZ37UDIBZ2E\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2771,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2609)","md5":"d5843dbdc71ff8014a5eafd346a262da","sha1":"127e1d971efab9341db8079f10663dc28e8e0a2f","sha256":"8e73a30d35c83ea6a597c3343324d2b7df097ad26e67b62efb5266ee12d317b5","sha512":"ac28dfa1a6fd09528e1ffc3f4fa19b0719c01f9033872e3eab51175b95c451179f1db22445b43ef9947e1810a5a37fdddeae7cdd7fe03b814a98e16e8642ab74","ssdeep":"","tlshash":"7e514241671662f381f60f36b12fb642713ad015140328b2b9bd9d90aba6deb5363d1e","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-04-12T18:40:00.483991Z","times_seen":13140,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":24,"dns":0,"connect":1,"send":0,"wait":14,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/QGYvz_MVcBeNP4NJtEtqUYLknw.woff2","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/QGYvz_MVcBeNP4NJtEtqUYLknw.woff2 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/lander/pl-helvionex-v2--yez-/css2.css\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 32344\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-7e58\"\r\nexpires: Fri, 06 Feb 2026 12:21:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cbd0F7VeZ7ROvqm7hTJLU0pDwmOdy0sLdI7aclpSpeJSBqm3jhAwluvuJeJQ2ScO12U6U%2B%2FTHvj6mGE0Kc%2BBUMMsogH54299KL0G%2BjBA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48363af9adb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32344, version 1.0","md5":"5e6c7802c5c4cc0423f86c3aad29f60a","sha1":"e597938d6cb61d43f563ab6f8416658e17b4bb9c","sha256":"64180e183ded4fca08e464dd5fc537841c7c11d5051a203e2ebd09d95d7b400e","sha512":"ffc54d9058be10936dda658af2883ada72cf60a4e9a9c1b218861de147d59bc25b0f185e793e5f1af69e5804c49a8112fa8b604328c59ed853a68343a8f15c21","ssdeep":"768:pbbpxrZ4uZKIyi3p7F5oWGnkUwmgbh2WpIHnsd48zWqF64f9xPL:ZjrZ4eKO57FCWjUkTpIMddF64TL","tlshash":"89e2f1e68d35e4297c23c41903e7c060b8df5dbc98061b9fad16331e3b469292ba9e1c","first_seen":"2023-05-17T20:29:46Z","last_seen":"2026-04-12T12:06:51.40614Z","times_seen":289,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-27T12:21:46.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X1iWMNTZAeUHfACvgs%2BVOYUSPhmWCsg9%2BXEFnRa042easNMzn3%2FR1RHVrMS3WjPN4p%2F3EV6HQPGp0XZHG67ykYyjgN0sf0%2BdMCtiacbs\"}]}\r\nexpires: Tue, 27 Jan 2026 12:21:46 GMT\r\nset-cookie: _subid=1sjos4f1vi6qd; expires=Fri, 27 Feb 2026 12:21:46 GMT; path=/\n9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; expires=Wed, 28 Jan 2026 12:21:46 GMT; path=/\n_token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006; expires=Fri, 27 Feb 2026 12:21:46 GMT; path=/\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.4.33\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c4836352e4eb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61003,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (419)","md5":"0a2f2320ffac195ee87086f15fecc06c","sha1":"3a3ca53c487242dc90f17b2d15452732b1c6e863","sha256":"02e63e990f8fc0e3b3b5c295491b8984b18d3a4c3fc1663cdbfcf1f3623b83d0","sha512":"b71798d820f742319c69dc6568b96a33c3721148c5289bdfe3f7e436bde5543d7dbdd5e26592f6180274685fb1450cad194efc6f48ff2818c758060f61bd2507","ssdeep":"768:wCMFPRFW5bEq7Qiavj1gb1CNSaK01Z1zVRDMk0vzV1YCIROBo:xMbOQiKj1gRCNSMpDmXYC5Bo","tlshash":"a253636194f70473019381e16eba9f1b6fa2e20bc60b8a4876fc47d85fc7d41dd63a98","first_seen":"2026-01-27T12:22:15.54329Z","last_seen":"2026-01-27T12:22:15.54329Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":49,"dns":30,"connect":1,"send":0,"wait":112,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/banner_shape03.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/banner_shape03.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 13496\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-34b8\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hg68cV8YSIJ0v6T6ELFR1yJ%2BF0srt%2FS2JsPR7VHJ69KGfEuKMcgOt5WWuayDs9hSU9AkzSGe3xLqwQXIo4xK%2F36IDoHCNoAOd8OzxDQJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836380e93b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13496,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 146 x 146, 8-bit/color RGBA, non-interlaced","md5":"0458bf5b6c99d761cb9621e7262bdeb2","sha1":"c48da2cc44b7e05a3fe8deb38fcf7c043ae2d0a8","sha256":"294b4a93fb471c518c2cadfe533499ab6acc761fc9dc0121b28d4c9c39d0f352","sha512":"499ee39d2bc0cc9635dd23998b24b5863806fbbfaed2b862dc14071a532da95f6c639918bdb65ae1e94e5c676ec0a0dc7bb5fad8b3553dce90ecc9c62bcaab9c","ssdeep":"384:ifLNGy2oXQ9NW6Btelmqn2DISryn5h9UFM4mr1:q80H6BtelsX253zr1","tlshash":"7a52cf399c99736f4542aa7682e9d7c818210f46d053b0e06bbca85def7d20d1fa5c1b","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-04-10T22:15:49.662063Z","times_seen":63,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/partner_img01.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/partner_img01.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 6829\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-1aad\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aie9Qk%2BS7KQzm9bmCTX4jFdd9nI9fB0bWBmb%2F1IvrVU0F6UuLN8FO2F%2Buny%2B4d3Df71d0V6ZbCVs5nEkoroqpuB6AMdYmS0IKCHFcjqG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836380e98b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6829,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 47, 8-bit/color RGBA, non-interlaced","md5":"d5f31bd1c8908a8575a7f64b6e3ebd03","sha1":"84116b529bb593051df7012897090084c8e4d244","sha256":"2a469bceecc142ab6daca68a973748c479704a99d293fc122e8b6fc8a4671dd1","sha512":"b43613d003cbe5f59b804dcd52e1a5dc20a395905059fc543b31ab21682cc154cf0c5885c7afa4857784a4cbf7e4fe4694b8998b00fa15396eba5b841cfb258e","ssdeep":"192:bScyFCGwaqJcIuSUHo134YUQcF/LZjmxjeu8oIIY:OcyFC0P9+34YUQU/MjVDvY","tlshash":"d4e18e9c4637ce633108cc77111969db7fd7d34395b83823eb8a00095ada8325ea2ae8","first_seen":"2025-05-06T10:40:35.049282Z","last_seen":"2026-03-11T04:48:20.715713Z","times_seen":33,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/partner_img03.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/partner_img03.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 2179\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-883\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bh%2F6u6MX4t9b4fsllSMLMtf1mPvyc1W3MJKkEXUBzvVkTQ9MJztOqe%2FlJze1W2%2FfoJm%2BAx%2BkKKy3cFf7zrxUhw3Ha9Te%2FqKH65Gas6WA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836380e9cb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2179,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 171 x 48, 8-bit/color RGBA, non-interlaced","md5":"48d873f2c241112d4a2e7d75573051bd","sha1":"80558063a21dbcff2f886fbd05cc1ae4e8b76fb1","sha256":"c14e3da90680ff293b266fe21408f6c213590b15a5f4386678d460bc20cbdff0","sha512":"d2b77a998dd1b7e8bc8507a677b890dea62d1c4f0e9ade8b7fa825003c4e3bc7d6ebf3ba34f2362f3ba75d169ccf70b698b4df28fe411fadd530fc7ce1753e52","ssdeep":"","tlshash":"254129cad2e24abc4a4f91ab864994d0293216df6e1f0a4d98003d863700c7603f76a3","first_seen":"2025-05-06T10:40:35.052577Z","last_seen":"2026-03-11T04:48:20.671086Z","times_seen":33,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/choose_icon01.svg","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/choose_icon01.svg HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x3nXb4ehCh0AeEzS8IjnnUDQzO7zDWLAedk75Z6ykQTBJxllQoMYwlZ3RFOmDaNMEpoFuOwblwMsqon33mZHM6BJcSf%2BNu4ySVfTQ1SI\"}]}\r\netag: W/\"691f1e96-2fe\"\r\ncontent-encoding: br\r\ncf-ray: 9c4836381eacb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":766,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7a6af37068e5fe59517ca2fba1183c2e","sha1":"0e3def9b2521b0f3038eca9f1fb481916da00aae","sha256":"2634e608ad078ce608b4f7d623eb15a5348ae609d79b42a696270703ce7c1cfa","sha512":"272d6a2b52b059fdc19f652e4241bbd3a72ebe57fa4c9958712728a5ad4a577af7935dec01cbbb9c43063b3b6afc139f9a3827379595fbf3d2c7a7cee038aaca","ssdeep":"","tlshash":"3301d0a9f36c0d35f3409340e9cc7532613159e5a985cce1e681be2a3c70ade6c2d6c0","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-04-10T22:15:49.605465Z","times_seen":40,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/document_img.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/document_img.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 141174\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-22776\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0VA%2B%2B2Ytl9ROK2b3j9WXh90SanXzaOd2rh%2F4p5kMrRaUI5CqXeLqNGUz%2F%2BWI0VGEX8iS5w3kTEbSURc7CJ%2F5is%2BUKDjj8M3%2B36oEZ7UR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836382eb9b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141174,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 456 x 612, 8-bit/color RGBA, non-interlaced","md5":"81205c03506086b04079cfbaf79164f6","sha1":"3fc24aecbb4f2aca0451caf62948be0fed191d3b","sha256":"d11af6db1de1015b81ff081285becf08ff0fdedd5304355c357dfde3d97481e8","sha512":"37999e71ca82a3be5cd2bf0da80b3b2a688084c76694462aef27587dffb1462cc4ac4830ec514613d224f6d1a9e8d8e7ea225df82ab124e659ed2d57b0c5b4f5","ssdeep":"3072:/Zp49+Qj/g6/pniKQVN0IfQQzcQDdKlXHTbq9mJgT5qTipilbuU9:/ZHSg8KVJfQyca0zbq9ZwTHZ","tlshash":"2ad3123283f7277239e929b46f7bed57bd3a0e0178c94087029c50ee94f51b5a1681af","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-03-11T04:48:20.648417Z","times_seen":38,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/QGYvz_MVcBeNP4NJuktqUYLkn8BJ.woff2","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/QGYvz_MVcBeNP4NJuktqUYLkn8BJ.woff2 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/lander/pl-helvionex-v2--yez-/css2.css\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14328\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-37f8\"\r\nexpires: Fri, 06 Feb 2026 12:21:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PLrDfLxJviDV7Jobzos2zJwTCgCbJqR7H2qbgwm2mGrwJ%2BQrQdu%2FJtuS0VG7qLX9Zbji0SIGBh4%2FNAeo8PmgsjYMCpuil%2FeWR6Yhb8w5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48363af9bab4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14328,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14328, version 1.0","md5":"6f4cf2d9f078b52024414970b7b7f704","sha1":"183cda6b3c0e01efaf654a6cd91264a20b98057f","sha256":"84fafaf5eb349d7a267a79404dc59a6c7930c8a106325540c46f652852f335f9","sha512":"c0189bba50a36a96f29f0f0ef0d0bd5190844068b193dc046aeb07d3bbc1a6d3cd48286b340eab933dbac3d744752ca88b6c5cdd9ed3f0c9b1bf2d5bba8832da","ssdeep":"384:fzwi5bgpw09CRIA9zfPlI1a04hCKMOgUwqv9:fp2CRIGzVIWhh/v9","tlshash":"3952d00536e42a6fc8e53eb3160e36636d68db47d0275b62f62de132b1d2a40f534cb5","first_seen":"2023-07-25T15:37:39Z","last_seen":"2026-02-02T20:32:32.022152Z","times_seen":66,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/about_img02.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/about_img02.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 4180\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-1054\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1IGQK8G90XdfHDexVO3c9ZgV7KWc4lXiYkyrOz5Ge6PJC3aG4cg%2FLSXtAGownGDjT8VpiK%2FRbb9XdmlZqIfUNRUeRYk9%2BLaX79Bsp8vD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836380e97b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"51451ebfad16ab2a8369b281d9594b42","sha1":"0137bccfbf97f77883c0ac37d7a8683ec301758a","sha256":"04e73d96a166e13688c26a3e553bfe13e84969e6900191717dc3142485a54fdd","sha512":"3f3ee8985b06a9a778fabea33c1abadddde6790ff35726a32d07310969269db57710bafad2f53655bbc5a52c00f0ec7cb7e9f5fef42ab26b306b38359445b4d7","ssdeep":"96:DSVkWW2elToSaStiHY7PaMXZ/WujSfNJ5SPOmGsRO:DSaP2ioQi4baMXZ/njwSv9RO","tlshash":"f2817d9d923f8d6e46990298d3b585fe259ffeac42d24057bfd7100880cb47c01ae316","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-03-24T20:04:53.355038Z","times_seen":64,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/choose_icon04.svg","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/choose_icon04.svg HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H8rrengrQwvcGafwa4RlFTpEpcQozwitzYE9pHBkfuL652go0mf6IuhyOXUb8sZtIU2yfFep534yLB6I0JIyps7W2tu9FYEloRwPGKNW\"}]}\r\netag: W/\"691f1e96-be6\"\r\ncontent-encoding: br\r\ncf-ray: 9c4836381eb4b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3046,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a8580abafd29fa64322d07873db8443","sha1":"b570401c57c84bd0d7ad086cd95113fceb0652c4","sha256":"15a377096d77ff52725c55031fa40c52f0213e8bbbda5365a28984111dc464e8","sha512":"858e5629cf8d64bc2a5c1e604835c95a2ba1ae9998cf35e2afbc1c74d4d68a2aeb413f3abd9a0cd38fe1efe3fb8a715a3203c191167461b0a0c6de67574fd052","ssdeep":"","tlshash":"c9517375f3ac51a4e001a3b46728f536a5632ef93d10cdc983e4bf0278528ae888c9c3","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-04-10T22:15:49.680915Z","times_seen":37,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@23.0.12/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/intl-tel-input@23.0.12/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cecrreha.digital\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 61923\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 23.0.12\r\nx-jsd-version-type: version\r\netag: W/\"3f362-QgRuJQx/Lu/0YZqJsL57g+AeXt8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1649580\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\nx-served-by: cache-fra-eddf8230139-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":258914,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-04-12T13:49:54.211301Z","times_seen":1514,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":28,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/app.css?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/app.css?v=02 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=2,i=?0\r\netag: W/\"691f1e96-5c2c\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=32P5ZCiuY2588nsYyTm9cxaGesZtbrcXga4sRlX9cAfZ29HDcfovgiFYfQEf0qSDLKJV%2Byclf17I%2FumyyXmQlpypwq75Kylv%2FTlHG3DC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c483637fe7fb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23596,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"de6807ba72f13b3e9f0ce125be284790","sha1":"78adcc5ceba7bb3c0d4df7fb4b672248198fc029","sha256":"8197695ff4b4ddb5832692f0a7e3c84fa20e07e9e8472882ef33f1c71ede1a4e","sha512":"1c83e8206663e77aaf67d992c4f1474baa44ea59dc9ae97cc2a745bbf418512c3ca689a951c74a32fae81247239577bb95a841485ea6b5324c25b0f191cc64a5","ssdeep":"192:8BPbIASB02XyD89XyASo1WycyeSPyuzjpvzjpURQRZGQRZrT+BQB+BQBobN6bgN0:fJm2blk4jRqMia","tlshash":"ceb2c2761d931044e767861457ee0f286639a0630d06aca977cf651dcf8afbc91c8b8b","first_seen":"2025-07-28T08:05:35.957125Z","last_seen":"2026-02-02T20:32:32.017199Z","times_seen":25,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/pxiByp8kv8JHgFVrLGT9Z1xlFd2JQEk.woff2","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/pxiByp8kv8JHgFVrLGT9Z1xlFd2JQEk.woff2 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/lander/pl-helvionex-v2--yez-/css2.css\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7740\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-1e3c\"\r\nexpires: Fri, 06 Feb 2026 12:21:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pl6RxrIDcKCI6SoV%2BVgvY3kwFjMYn39bcWpbZTD%2FnsUIU%2FIv8d11Jl5iUH8fANSgBwDMX6GyELjZ78qHBAya7nvSMaO0q6DHSJg2cE%2Bq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48363b19d6b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7740,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7740, version 1.0","md5":"792477d09826b11d1e5a611162c9797a","sha1":"bba020c0fd0426079872fdd7929a260b414845cd","sha256":"289e0afc8be731a86822349e54557296f145926496bd2138db1bac0db77f77a2","sha512":"20256b7428ae94d47202827e0d655e298034108cc927fca3a43eda383b02fd42f0c9e7551eaffa0ab4fc2e80528d17166aae09226bbf3ad21f666f08aeacc4ef","ssdeep":"192:dxQxGIAcBZH2KRme6/xXOTTsncYsl62qMXApY:LQcovWK6YlYsfL","tlshash":"88f1bf724a9790cac6e1592b83507e1ea877abdc3a4bcc1fd5d270ccd4a299123cc85c","first_seen":"2024-03-26T19:18:23Z","last_seen":"2026-04-12T18:45:25.44335Z","times_seen":7244,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/default.css?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/default.css?v=02 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=2,i=?0\r\netag: W/\"691f1e96-21bc\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wn4gIw3gi6HdOV%2FNdXW%2BbVknGqmVIuYR0A%2BcbEUinHJQ7uLBDzotGYYK2D6ju1d9vjlz%2Fjl9Wy%2FEpnQK773vZmsElY63UY59g%2BWs3qXi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c483637ee60b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8636,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e3547138fb21a6708e8731cfed5d3be4","sha1":"395366968470bf6e8a545ddeb3a2a69c856ae140","sha256":"79fca8b9e341cec8be3997631300e4a50857c7a4e5d00c6796811df5825169f1","sha512":"09351bde403f0341eff0d4e8fe9c2ff64a30dbcd9f33ce5d912647198b4e0458e6bd390cd29bd421e792e771d9b554f1acfe18813fc20c6356279d179a1dd357","ssdeep":"96:8Vdlp2Lc6NCJWF8tyBEZu98FixkkqkuV2ziV+1nKVW7KF+XaPCkmjd/syqviq6XK:CcsIKDk1BauK","tlshash":"a70276c9aed314cd831a6fe2cbb6a060ef4d21f34a4d65dfb450254aec87a9d21624cd","first_seen":"2023-04-13T23:00:03Z","last_seen":"2026-04-12T16:59:39.715136Z","times_seen":392,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/calc.css?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/calc.css?v=02 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sFjb5lj9uHrrWuLi6hwQHaV4VSo2QTo6G1HrGpmpv0tbauFS1a6QtEKFxvJTagTghnrLNLxnAyb2AMVObiEegANbFT%2BfrGIz6NTSivXn\"}]}\r\netag: W/\"691f1e96-1a1\"\r\ncontent-encoding: br\r\ncf-ray: 9c483637fe7bb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":417,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9c8af055d7285cbb0fedd2aa3d6d6b6c","sha1":"5ad38380527c65ca734df9658e25a56fb3e0ec3e","sha256":"affa921ac5b05f4a5d27a8665063d12fc6b18a4e823b6bebd16d09144dde41b7","sha512":"35024838d5832faef4d11fc7cb18f26e81b326bb89afe7f71f75f69a547585dd695f18f5163222d72be18f9abc12e50093d61c818f46b5184b1786ae891d79ff","ssdeep":"","tlshash":"30e02b29d628d1417135d9b97f112f86c2487003430042b9bfd0a3845fb841965307cd","first_seen":"2025-07-28T08:05:35.925255Z","last_seen":"2026-02-02T20:32:32.031874Z","times_seen":25,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/global_lpn_1_2/default-integration.css","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/global_lpn_1_2/default-integration.css HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 03 Sep 2024 07:22:34 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 06 Feb 2026 11:24:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\nage: 3434\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1KJa3cfPrhN8irwP6unLVbcBTnWLyCyFja3xk6RtUTjPY14GUK%2BR%2BIRgLRoijUNC7y5hQPqpIgC86RwEqanCHgrsEuBDLcrpJXS0GdE4\"}]}\r\netag: W/\"66d6b93a-3db\"\r\ncontent-encoding: br\r\ncf-ray: 9c483637fe82b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":987,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"241d8b07cc198e58411536bc5db6f958","sha1":"5455523aa41adb2e115d789756c59cde2bf84c76","sha256":"32469ef50810a6569bdf5e0407f68787312b5dc86beb0302827b46e00fedaa15","sha512":"6ee3112bb2d0199f4c52375a1fe98ea7607ae1ddfd8bc30ad848cdb1a549af626e5e504fca8ddaebe9602272ffc2cdf48acf41cacc18e72dc7b45ad2c29b6741","ssdeep":"","tlshash":"1411eb160a660a35a41bd2b46a653a2573191843770fec3b26a728284fc619e127fbe8","first_seen":"2025-04-18T11:50:01.196685Z","last_seen":"2026-04-02T05:38:09.365454Z","times_seen":348,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/partner_img02.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/partner_img02.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 2851\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-b23\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7b4mGpRBxj2%2BajaczOtf284vjQ0mJ8J0zkyVbY8PZnLLPp4OJRvQVLrm6A4F05Rany4vbbkdZ90IUqO7Z8KFZAG77bA4ue71oHlhnyiQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836380e9bb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2851,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 140 x 44, 8-bit/color RGBA, non-interlaced","md5":"93676f666adfd45b5a61a7397b11b721","sha1":"b05cf94d0d20a871869b2ce954fbc90683dc122f","sha256":"8b3e5e92d06431da1e528680ba58252c3cff1871e2fd235aee8229b206371c22","sha512":"c897c8fefce161c9dfca846205405fdb66434972f40874769fdfd837a7cb4f9e331fecc1a5b0559bfe6deaab1c9fff95082d563e44fffce0afebaa7296bdd362","ssdeep":"","tlshash":"ee512ad92d0e506985c8c6e6910a9d3a5bef871731a12813bda0259f089561b94c4e81","first_seen":"2025-05-06T10:40:35.196115Z","last_seen":"2026-03-11T04:48:20.734044Z","times_seen":33,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/partner_img04.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/partner_img04.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 1765\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-6e5\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HV6oyZcneZ4ROFsLBccaP6ML8giwX8ahl3V2i0rSd3ElmSKYyej0d9DkDJCxf%2BV5tQjudPpKTxmHVU%2FiX9THLuVwYCfsyip%2Bppeeg9Ea\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836380e9eb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1765,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 125 x 44, 8-bit/color RGBA, non-interlaced","md5":"2ac44edfea3fddccd50cde85d54c00e9","sha1":"034b51f3a7573f21540a28dce0525178e6191c7a","sha256":"0a05be9a2dd7be7ec91dd38a99446f6c6ca771892877671c6d822516ad7c09fe","sha512":"5c6a5ea307e8cd5f6ee930412863099421e06b022058b7e404266b4c539522c7cc4f43c174c15c262ca9bf1396aebc871020251e187e956673122a7af3344cae","ssdeep":"","tlshash":"55311acb41c7deb98ae0249e23d60fd01811e07520c082ab8c417f275e275d2b297dea","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-03-11T04:48:20.654536Z","times_seen":32,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/banner_shape02.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/banner_shape02.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 3836\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-efc\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OYNRZqSo4PcnF%2FNUHjv%2FnzZU4beTd%2BstD399YeQpX9t1gOj%2Fh2SCNITzj9n4viA6%2BVhnkMueA9n7RGXY1ZODIKfntMKzcxCHb8LEojnd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836380e92b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3836,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced","md5":"6eac0fc242ab4d5ed148297f253ac590","sha1":"4a4a137a6b04909bc2f75c30300a490ebe26c831","sha256":"8e8efc129d8af45977aba3cc65ad8ae9e34747f81915f2246cff8443d47893da","sha512":"52fde0c4bc3b2bf89717b7104fe436a570237e58e5a218b4ea75e7172889ae782ceb7cf359c1cf5498453367617d7bec5290f702edf0f38123c7785f7b9d2dd5","ssdeep":"","tlshash":"0a817df38bd5d6cee080d2de90c57c23d3bf1458fda3742ba42569b8e3368d48562256","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-04-10T22:15:49.588172Z","times_seen":63,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/QGYvz_MVcBeNP4NJtEtqUYLknw.woff2","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/QGYvz_MVcBeNP4NJtEtqUYLknw.woff2 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/lander/pl-helvionex-v2--yez-/css2.css\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 32344\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-7e58\"\r\nexpires: Fri, 06 Feb 2026 12:21:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FjJb6Y4i%2FZgRbqEeD%2B9irjf41OutX6wLNU2lNRjuzBElpxWYld93NyGmPnLV2PJ9AzW6D0zmBGp4pc91MFYdxCj6b2c6ZfGF2NSDztju\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48363b09c6b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32344, version 1.0","md5":"5e6c7802c5c4cc0423f86c3aad29f60a","sha1":"e597938d6cb61d43f563ab6f8416658e17b4bb9c","sha256":"64180e183ded4fca08e464dd5fc537841c7c11d5051a203e2ebd09d95d7b400e","sha512":"ffc54d9058be10936dda658af2883ada72cf60a4e9a9c1b218861de147d59bc25b0f185e793e5f1af69e5804c49a8112fa8b604328c59ed853a68343a8f15c21","ssdeep":"768:pbbpxrZ4uZKIyi3p7F5oWGnkUwmgbh2WpIHnsd48zWqF64f9xPL:ZjrZ4eKO57FCWjUkTpIMddF64TL","tlshash":"89e2f1e68d35e4297c23c41903e7c060b8df5dbc98061b9fad16331e3b469292ba9e1c","first_seen":"2023-05-17T20:29:46Z","last_seen":"2026-04-12T12:06:51.40614Z","times_seen":289,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/QGYvz_MVcBeNP4NJuktqUYLkn8BJ.woff2","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/QGYvz_MVcBeNP4NJuktqUYLkn8BJ.woff2 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/lander/pl-helvionex-v2--yez-/css2.css\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14328\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-37f8\"\r\nexpires: Fri, 06 Feb 2026 12:21:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qmgj6AsB2P%2B%2FoPnk3ZUO4fxLmSihMJjI6sYQ2ZlohQ7HlmePy6qD7cPK%2FL3LBHojSblrX1tFCPSHiTzzgZM7wEWjANdRwpg8kfmYwi8k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c48363b29e4b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14328,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14328, version 1.0","md5":"6f4cf2d9f078b52024414970b7b7f704","sha1":"183cda6b3c0e01efaf654a6cd91264a20b98057f","sha256":"84fafaf5eb349d7a267a79404dc59a6c7930c8a106325540c46f652852f335f9","sha512":"c0189bba50a36a96f29f0f0ef0d0bd5190844068b193dc046aeb07d3bbc1a6d3cd48286b340eab933dbac3d744752ca88b6c5cdd9ed3f0c9b1bf2d5bba8832da","ssdeep":"384:fzwi5bgpw09CRIA9zfPlI1a04hCKMOgUwqv9:fp2CRIGzVIWhh/v9","tlshash":"3952d00536e42a6fc8e53eb3160e36636d68db47d0275b62f62de132b1d2a40f534cb5","first_seen":"2023-07-25T15:37:39Z","last_seen":"2026-02-02T20:32:32.022152Z","times_seen":66,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/partner_img07.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/partner_img07.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 1895\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-767\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wel4HTAM0Bi3CHMHSL2XP3vMps1B5DYOy2vTIbtgljesnd1Ux3ZwUCaLK5yYY5Q3OCIIK6kMNuSoAMHtaeaQJj%2FcuZrj18zCNKuRFDHC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836380ea5b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 44, 8-bit/color RGBA, non-interlaced","md5":"c81b9d992a195b159b60255018f82cac","sha1":"6375d82c05b97de3a0b35d9a42ed811ebe8c2bea","sha256":"e7ba763d74fce4731c38b16192603eb3bbcf18cf2a185fc7b2c68dccc6cd68c6","sha512":"a9852ad394bb4167ab6a311d52e8862ac5a51ee20e853dfd04d631fdf059b5088d839a059aa55a25913526bf21fa2b830aebe76fa8fe31fdce26f1cb9fbff3ba","ssdeep":"","tlshash":"b741ea7dfb95fb1d04449f108ba6c252917da001c3622145bb76e02a2a348fc5380161","first_seen":"2025-05-06T10:40:35.098433Z","last_seen":"2026-03-11T04:48:20.665375Z","times_seen":33,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/partner_img09.png","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/partner_img09.png HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 2184\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=4,i=?0\r\netag: \"691f1e96-888\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t3oAKJ8FGyFRfbpT7UZBkyWlLxGlDwPjco3BZ%2Fd5JYafuH7QT8yt41FSSHYomwo1chRDz2GaEY7IFne3LTfUwv5kPMpWhS1Ia3EkWk1S\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836381eaab4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2184,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 159 x 46, 8-bit/color RGBA, non-interlaced","md5":"86216cc972cd79052b182c1441a97966","sha1":"8b07c152f1120d6d607a77623eec7cbc91c43766","sha256":"2e1372221b65f85c1b6ce83c8952a02cdee5a1d0a6d821e62512df0464cac037","sha512":"9ce2b50eaf5541295aabacf340cf64e686c335269c167ba90c1f1d2339fc4ca64a359be6ab26b563c2779c60fb91a11c328252a77d4ec574b4f4432cbcbdbf50","ssdeep":"","tlshash":"b1412ba9afeea37a6132ca3222c115207179028d68031967aa3b142b1bff355d3b1c53","first_seen":"2025-07-28T08:05:35.883526Z","last_seen":"2026-03-11T04:48:20.689228Z","times_seen":31,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/js/bootstrap.min.js?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/js/bootstrap.min.js?v=02 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=3,i=?0\r\netag: W/\"691f1e96-15e38\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KpTgGOywJzMJSE6OxgJvekLQh2dJ3v3%2FZi6kPaUZfqHdiXP5m9IdH0h8WGxaoj1z4egyoGFjClioWCFQwsvpX7cTFrt51BaIvagrXsjw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c4836383ec6b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89656,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"015e1ad2cc95b5c4da149ea6045514f5","sha1":"f2fb82cfac1c8a8e8803d50cdb083b5c1094eaeb","sha256":"3f4c4a2d5c4a7759fa6455acd4aea7314d39864589650d0eda38683d9e9e66e9","sha512":"7b1d5cc6e4576df54f8ceada868394cfefdae9eba98c131194ac92ca1c8a8972b8ddbfb53be0f6aa7bfb4a287971c7dded205c79a5656b692ab2421a037b8dc2","ssdeep":"1536:putXatxRe5Y1fSF0Hyjpjdh4qnedehPiPXOS0yjpOqjfRKQrDZmacbF/vPx5nuFG:eCynnoec1fRKQrDZmacbF/vPqFmsM","tlshash":"8e93a51a33c47a37458ba076ac7aca4ff73565986387500cb65c94ec163cc74a3b6eb8","first_seen":"2025-07-28T08:05:35.859602Z","last_seen":"2026-02-02T20:32:32.028598Z","times_seen":25,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.9.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:47.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 12:14:55 GMT","end":"Thu, 19 Mar 2026 13:14:43 GMT"},"fingerprint":{"sha1":"9F:6D:86:C5:B8:42:73:79:95:D9:AD:A7:9E:37:F2:54:CF:A0:9C:90","sha256":"C1:37:01:B7:C2:DD:54:62:A0:93:A6:F0:05:9D:5A:0C:55:E4:49:78:D8:DD:C8:9D:B1:B8:6B:75:83:70:B2:28"}}},"request":{"raw":"GET /json HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cecrreha.digital/\r\nOrigin: https://cecrreha.digital\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:47 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: GET, POST, HEAD, OPTIONS, OPTIONS\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://cecrreha.digital\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GtNZMCPiMUj%2FVxOEiNXdU%2Bted09dFNsZ2w9Mp0nCnx0uJCg%2Fm9fd%2BGnHsnqBMMOBe4gIML61g90NqYyfuz91mkW4hNtbs3E%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c48363c8efa2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":748,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"460b460d57658b5fd29c5e4934445c33","sha1":"24a724b25ef1401657cafa588835edfb9f7ef1f7","sha256":"93eefe1243dfce9ac06bf199cc9962e610bab6bff4f096662a357d27c9aefa70","sha512":"127d42078b0a87c6d0a70bd359dbcf50844e871ae9e98875a63f2303950b50bcc04fdb72df3f2e157dde3c019355fb67791147d38d6c3c570e1bde1d3b8f31c2","ssdeep":"","tlshash":"a9012428e4680e7b88b80358b4286a07122422075f16354e7fd4878d0f8d8bf20b124e","first_seen":"2025-12-17T10:03:05.72606Z","last_seen":"2026-03-25T09:03:12.863773Z","times_seen":3067,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":38,"dns":21,"connect":1,"send":0,"wait":230,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cecrreha.digital/lander/pl-helvionex-v2--yez-/responsive.css?v=02","fqdn":"cecrreha.digital","domain":"cecrreha.digital","tld":"digital"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cecrreha.digital/","date":"2026-01-27T12:21:46.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cecrreha.digital","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 11:06:04 GMT","end":"Tue, 21 Apr 2026 12:02:52 GMT"},"fingerprint":{"sha1":"77:D3:26:9E:81:BD:F6:E8:F1:FD:46:57:F7:27:BA:42:77:28:4A:E6","sha256":"57:C8:0E:8A:D0:50:FB:76:43:A9:3A:E6:67:B7:BC:C3:8A:3D:54:94:4A:50:95:DF:B0:A7:CE:9C:C9:9F:34:67"}}},"request":{"raw":"GET /lander/pl-helvionex-v2--yez-/responsive.css?v=02 HTTP/1.1\r\nHost: cecrreha.digital\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cecrreha.digital/\r\nCookie: _subid=1sjos4f1vi6qd; 9d4a0=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjEwMTU2XCI6MTc2OTUxNjUwNn0sXCJjYW1wYWlnbnNcIjp7XCIyODI2XCI6MTc2OTUxNjUwNn0sXCJ0aW1lXCI6MTc2OTUxNjUwNn0ifQ.7XM3efWCL17RjyQkIjJ12ztcBr6JHUNiyNgQ1oTCH58; _token=uuid_1sjos4f1vi6qd_1sjos4f1vi6qd6978adda78cc83.62787006\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 27 Jan 2026 12:21:46 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 20 Nov 2025 13:58:46 GMT\r\npriority: u=2,i=?0\r\netag: W/\"691f1e96-4d8a\"\r\nexpires: Fri, 06 Feb 2026 12:21:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dvxe2Z7gVHuEs1e8969MYKEmSlx6eW3KeGNYm0Yyu8QScKIRTZuCmshpSvZAvBcMs8%2F3C83W4LrthF0YTCfvphwJPLGy06lmxyWJOjDW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c483637ee76b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19850,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"104bdba68b64d8660f426bec72b739df","sha1":"baef7a5d02d7c2bc5b5580db3e9338542630fe82","sha256":"7cd6b8db897fe16a3e66f9cceb288e822c2676e58f3dec872147728935b78230","sha512":"8eb3a70ba69ed9805daa6a1cba2ade012ff3fdab14b36ea5e45b9eae3dd142f580c45725ac33b6b389d7be5d608eb4fa81b6b13cae487237522df853a2385766","ssdeep":"192:Zvy0FVrnChzd51MfqM2ICuDwjmJxMxUHMN6R4deLZBAGTmY3CKRr5ZMcEKfvxaZJ:51Tm3142lQuZg5Zn7OORBq","tlshash":"60928eddae84245c5302bf9aaff81b655e5d68f3df8f00ed90a0560d90cfa3d61626c8","first_seen":"2025-07-28T08:05:35.848128Z","last_seen":"2026-02-02T20:32:32.041119Z","times_seen":25,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-27","alert":"Phishing Block","trigger":"cecrreha.digital","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-27","alert":"Sinkholed","trigger":"cecrreha.digital","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}