{"report_id":"f49fe525-7fbd-4ed0-a60a-f81bcd53fe5e","version":0,"status":"done","tags":[],"date":"2026-07-20T12:49:14Z","url":{"schema":"http","addr":"cgprohelmets.com/themes","fqdn":"cgprohelmets.com","domain":"cgprohelmets.com","tld":"com"},"ip":{"addr":"104.237.57.18","port":0,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"cgprohelmets.com/themes/","fqdn":"cgprohelmets.com","domain":"cgprohelmets.com","tld":"com"},"title":"Cloud Share","dom":{"size":8151,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (345)","md5":"b42dc2d0bc415991f6298f58dc80fa2d","sha1":"4f91e07b2f50a41eb25fb41c705d309f94804510","sha256":"cbbabf751b5d535f54eeda75183062e974e6ec5c8441068bb80d85af09052d96","sha512":"cd6754127b444365f55b770012d6562a79fbca68820b760c17b80c911b672350170dd1ed9a3347e4a6514b622b0dfe2dade92732468fe907f77ae1ae2b99d8fc","ssdeep":"96:nj5efG5pc8TE7KZrEkdKkmMpR7eXyhgb2LJh19N8licHiKUiAni+ioUiT:jYfG5WmEK84Ixa1+iiiKUiUi+ioUiT","tlshash":"1bf1e969d35e54121163418539b5ab4a3039c107a7078e8afabf2438efc0d8e4977bd9","dom_hash":"domhash825d4fce1ae8b2091e1f5a02317d3293","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cgprohelmets.com/themes","fqdn":"cgprohelmets.com","domain":"cgprohelmets.com","tld":"com"},"ip":{"addr":"104.237.57.18","port":0,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-24T12:49:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"cgprohelmets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"code.jquery.com","ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-07-20T00:04:33.448739Z","alert_count":0,"request_count":1,"received_data":87349,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2026-07-20T08:08:06.683709Z","alert_count":0,"request_count":1,"received_data":145795,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cgprohelmets.com","ip":{"addr":"104.237.57.18","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"domain_registered":"2017-11-07","domain_rank":0,"first_seen":"2025-11-20T06:50:31.801795Z","last_seen":"2025-11-20T06:50:31.801795Z","alert_count":7,"request_count":7,"received_data":255719,"sent_data":3576,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Bootstrap:4.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-07-20T08:29:09.21945Z","alert_count":0,"request_count":1,"received_data":86562,"sent_data":502,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cgprohelmets.com/themes/","fqdn":"cgprohelmets.com","domain":"cgprohelmets.com","tld":"com"},"ip":{"addr":"104.237.57.18","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcbf217377306d89b49e06bf1fe6a35a","sha1":"7f3fe7b86357154f766ce794160a792febd5954e","sha256":"9ff2bbb68edab4ed7a9cba29fe652cfc8014bdbcd3eea64a38627d89c86ef2f9","sha512":"77002f79c502075ef7c14aa699e784d221aa2a0665947e6d75b98216d1793d4882e0823b1256b066976d4267f32ff1800c2d6ed61a2cff8f90e4df379e04cc28","ssdeep":"","tlshash":"be3142eff3df202102ad214b1ab593ca3438d41968075ac5bc5c146870b4def5276df1","size":1700,"data":"","first_seen":"2026-07-20T08:34:49.843072Z","last_seen":"2026-07-21T06:58:21.648963Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","size":85578,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-21T16:23:13.835468Z","times_seen":291982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.1.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","size":86709,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-07-21T14:17:01.871402Z","times_seen":145028,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cgprohelmets.com/themes","fqdn":"cgprohelmets.com","domain":"cgprohelmets.com","tld":"com"},"ip":{"addr":"104.237.57.18","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-20T12:48:45.113Z","timestamp":1784551725113,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cgprohelmets.com","organization":""},"issuer":{"commonName":"XinNet RSA DV","organization":"Xin Net Technology Corp."},"validity":{"start":"Sat, 02 Aug 2025 00:00:00 GMT","end":"Sun, 02 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:32:D8:09:1D:5D:46:E0:0A:CA:D8:1B:2C:16:7A:64:DE:0B:91:C9","sha256":"C8:D5:2C:46:8E:2C:2E:7F:E2:8B:88:36:EC:46:30:67:04:BB:69:3B:F0:FE:90:F1:8D:74:81:2C:59:A3:E1:4B"}}},"request":{"raw":"GET /themes HTTP/1.1\r\nHost: cgprohelmets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Mon, 20 Jul 2026 12:48:45 GMT\r\nServer: Apache\r\nLocation: https://cgprohelmets.com/themes/\r\nContent-Length: 280\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-21T16:24:26.768481Z","times_seen":17425813,"resource_available":true,"data":null}},"time_used":931,"timings":{"blocked":-1,"dns":325,"connect":149,"send":0,"wait":152,"receive":0,"ssl":305},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"cgprohelmets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cgprohelmets.com/themes/","date":"2026-07-20T12:48:46.649Z","timestamp":1784551726649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /ajax/libs/jquery/2.2.4/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cgprohelmets.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30028\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 02:20:15 GMT\r\nexpires: Fri, 16 Jul 2027 02:20:15 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 383311\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":85578,"size_decoded":31012,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32065)","md5":"2f6b11a7e914718e0290410e85366fe9","sha1":"69bb69e25ca7d5ef0935317584e6153f3fd9a88c","sha256":"05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e","sha512":"0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db","ssdeep":"1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2","tlshash":"1e83c6d9b2d6706297b734b850bf410bb17a98dab44c8c60f059d4e47eb4a8e507bf2c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-21T16:23:13.835468Z","times_seen":291982,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":17,"receive":16,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.1.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cgprohelmets.com/themes/","date":"2026-07-20T12:48:46.652Z","timestamp":1784551726652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.1.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cgprohelmets.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-152b5\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 20 Jul 2026 12:48:46 GMT\r\nage: 1922731\r\nx-served-by: cache-lga21947-LGA, cache-bma-essb1270062-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 6807, 32826\r\nx-timer: S1784551727.686860,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30070\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":86709,"size_decoded":30710,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32030)","md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-07-21T14:17:01.871402Z","times_seen":145028,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":13,"receive":2,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cgprohelmets.com/themes/css/hover.css","fqdn":"cgprohelmets.com","domain":"cgprohelmets.com","tld":"com"},"ip":{"addr":"104.237.57.18","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cgprohelmets.com/themes/","date":"2026-07-20T12:48:46.661Z","timestamp":1784551726661,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cgprohelmets.com","organization":""},"issuer":{"commonName":"XinNet RSA DV","organization":"Xin Net Technology Corp."},"validity":{"start":"Sat, 02 Aug 2025 00:00:00 GMT","end":"Sun, 02 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:32:D8:09:1D:5D:46:E0:0A:CA:D8:1B:2C:16:7A:64:DE:0B:91:C9","sha256":"C8:D5:2C:46:8E:2C:2E:7F:E2:8B:88:36:EC:46:30:67:04:BB:69:3B:F0:FE:90:F1:8D:74:81:2C:59:A3:E1:4B"}}},"request":{"raw":"GET /themes/css/hover.css HTTP/1.1\r\nHost: cgprohelmets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cgprohelmets.com/themes/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 20 Jul 2026 12:48:46 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 25 Oct 2023 16:56:12 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 114697\r\nKeep-Alive: timeout=2, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":114697,"size_decoded":114940,"mime_type":"text/css","magic":"ASCII text","md5":"fac4178c15e5a86139c662dafc809501","sha1":"ef1481841399156a880ec31b07dda9cfaa1ace39","sha256":"bb88454962767eb6f2ddb1aabaaf844d8a57de7e8f848d7f6928f81b54998452","sha512":"0902219b6e236fbf9d8173d1d452c8733c1bf67b0eb906cc9866ea0c27c2d08f6da556d01475e9b54e2c6ce797b230bfbd5f39055ce0c71ea4d3e36872c378d9","ssdeep":"1536:67O7EesvXIPRX4PT8aZv8qoXIoqbTFaFeTxvyAZ+D7M71D:qXIPRX4PT3","tlshash":"bcb38bf56591210432278a0cc3cf5f79a73cd0a3aa61dcb9b746584bcf52a5c63cab27","first_seen":"2023-04-05T06:16:47Z","last_seen":"2026-07-21T15:38:25.152366Z","times_seen":6064,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":453,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"cgprohelmets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cgprohelmets.com/themes/","fqdn":"cgprohelmets.com","domain":"cgprohelmets.com","tld":"com"},"ip":{"addr":"104.237.57.18","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-20T12:48:46.059Z","timestamp":1784551726059,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cgprohelmets.com","organization":""},"issuer":{"commonName":"XinNet RSA DV","organization":"Xin Net Technology Corp."},"validity":{"start":"Sat, 02 Aug 2025 00:00:00 GMT","end":"Sun, 02 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:32:D8:09:1D:5D:46:E0:0A:CA:D8:1B:2C:16:7A:64:DE:0B:91:C9","sha256":"C8:D5:2C:46:8E:2C:2E:7F:E2:8B:88:36:EC:46:30:67:04:BB:69:3B:F0:FE:90:F1:8D:74:81:2C:59:A3:E1:4B"}}},"request":{"raw":"GET /themes/ HTTP/1.1\r\nHost: cgprohelmets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 20 Jul 2026 12:48:46 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 16 Jul 2026 16:03:07 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 8320\r\nKeep-Alive: timeout=2, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:2.2.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap:4.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":8320,"size_decoded":8562,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (312), with CRLF line terminators","md5":"17bd1da4066fd1e6eb89262209d4947e","sha1":"4d4384b20246fc3c77bb5ed3792052442e08eaa3","sha256":"e4ac6dbe7c51b37fe31325a481908d96f1dfecc2a4cada521519f3a3cf743620","sha512":"0fbc2ba151a0e3339db6270c5f4a9bd51993e4a5877a2cc05616ddb2a5ca49bc18890a8dca28b7dd0cfb5043dd6057628656d2e89a373b73675919365ca3c434","ssdeep":"192:s2gIMGGyyvcUIRkK7eDrQibiEUiripiDUiAm:hgv5vK7e3QibifiripioiAm","tlshash":"a5029569f24a9026127342867ab56b0af978c107a303429df5bd2037ebf1d0d4b777da","first_seen":"2026-07-20T08:34:49.834838Z","last_seen":"2026-07-21T06:58:21.642216Z","times_seen":4,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"cgprohelmets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cgprohelmets.com/themes/","date":"2026-07-20T12:48:46.659Z","timestamp":1784551726659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 06:33:56 GMT","end":"Tue, 29 Sep 2026 07:33:46 GMT"},"fingerprint":{"sha1":"95:C5:B1:CC:FD:2D:A2:1D:9E:F8:29:11:70:8F:C2:32:DB:0A:16:D8","sha256":"67:23:C0:55:AC:EE:9D:BF:1F:32:F6:C6:31:3A:5A:3F:85:B5:50:88:71:96:38:D1:BB:37:21:B0:0C:CF:B9:EA"}}},"request":{"raw":"GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://cgprohelmets.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cgprohelmets.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 20 Jul 2026 12:48:46 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"450fc463b8b1a349df717056fbb3e078\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:04 GMT\r\ncdn-cachedat: 07/21/2025 22:36:56\r\ncdn-proxyver: 1.32\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1048\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 0a9d8af9ed89d2afc91c97ce4ba960c0\r\ncdn-cache: HIT\r\nage: 15267\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a1e21503b944569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144877,"size_decoded":22729,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65325)","md5":"450fc463b8b1a349df717056fbb3e078","sha1":"895125a4522a3b10ee7ada06ee6503587cbf95c5","sha256":"2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d","sha512":"93bf1ed5f6d8b34f53413a86efd4a925d578c97abc757ea871f3f46f340745e4126c48219d2e8040713605b64a9ecf7ad986aa8102f5ea5ecf9228801d962f5d","ssdeep":"1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q","tlshash":"f6e37667f591322da097ca1851c0bbfa466f8156d6221ffbf4273b604b8a6c70a73d0d","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-07-21T14:47:17.354655Z","times_seen":58994,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":3,"connect":18,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cgprohelmets.com/themes/images/adobe_logo_1.png","fqdn":"cgprohelmets.com","domain":"cgprohelmets.com","tld":"com"},"ip":{"addr":"104.237.57.18","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cgprohelmets.com/themes/","date":"2026-07-20T12:48:46.668Z","timestamp":1784551726668,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cgprohelmets.com","organization":""},"issuer":{"commonName":"XinNet RSA DV","organization":"Xin Net Technology Corp."},"validity":{"start":"Sat, 02 Aug 2025 00:00:00 GMT","end":"Sun, 02 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:32:D8:09:1D:5D:46:E0:0A:CA:D8:1B:2C:16:7A:64:DE:0B:91:C9","sha256":"C8:D5:2C:46:8E:2C:2E:7F:E2:8B:88:36:EC:46:30:67:04:BB:69:3B:F0:FE:90:F1:8D:74:81:2C:59:A3:E1:4B"}}},"request":{"raw":"GET /themes/images/adobe_logo_1.png HTTP/1.1\r\nHost: cgprohelmets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cgprohelmets.com/themes/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 20 Jul 2026 12:48:47 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 26 May 2025 16:35:48 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 14600\r\nKeep-Alive: timeout=2, max=97\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":14600,"size_decoded":14843,"mime_type":"image/png","magic":"PNG image data, 599 x 145, 8-bit/color RGBA, non-interlaced","md5":"4a3fe0e4341cd2b19fbf3cad7948a959","sha1":"27de6a1021c9d0d84a4f0470222de6959d6d88e5","sha256":"74d4b37b77b79b6cd9a0d68222ebe53dce232c8fc245bcd794bbdfb98da7d401","sha512":"f58411577aae71ad2463e2aef96c7d5e3dd4bfec01fcedfb6813306cfdcbe84d0ba363e18eafff3cc96c20d95126bc06e3ffeecc399feb3fda2400c0514807ba","ssdeep":"192:uXBYCp0nsAXXSGGfJopySGzNBWXHzvkfkNbzA6QgQZtVoPayt/hR0v8byxvkCddV:mKnFnS/iAET8fgzQUSyhhqvB/zkaEkD","tlshash":"4162c0b323ad0fcd36a2666b5329655e4cc090117d429c16b9fe5e642c23b6dcbcd523","first_seen":"2025-09-11T20:01:15.170079Z","last_seen":"2026-07-21T15:38:25.152878Z","times_seen":266,"resource_available":false,"data":null}},"time_used":750,"timings":{"blocked":592,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"cgprohelmets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cgprohelmets.com/themes/images/adobe.png","fqdn":"cgprohelmets.com","domain":"cgprohelmets.com","tld":"com"},"ip":{"addr":"104.237.57.18","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cgprohelmets.com/themes/","date":"2026-07-20T12:48:46.670Z","timestamp":1784551726670,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cgprohelmets.com","organization":""},"issuer":{"commonName":"XinNet RSA DV","organization":"Xin Net Technology Corp."},"validity":{"start":"Sat, 02 Aug 2025 00:00:00 GMT","end":"Sun, 02 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:32:D8:09:1D:5D:46:E0:0A:CA:D8:1B:2C:16:7A:64:DE:0B:91:C9","sha256":"C8:D5:2C:46:8E:2C:2E:7F:E2:8B:88:36:EC:46:30:67:04:BB:69:3B:F0:FE:90:F1:8D:74:81:2C:59:A3:E1:4B"}}},"request":{"raw":"GET /themes/images/adobe.png HTTP/1.1\r\nHost: cgprohelmets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cgprohelmets.com/themes/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 20 Jul 2026 12:48:47 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 27 May 2025 14:07:18 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 9560\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9560,"size_decoded":9803,"mime_type":"image/png","magic":"PNG image data, 200 x 195, 8-bit/color RGBA, non-interlaced","md5":"47fbfb5d839d538cdfe8aa27b4927f0c","sha1":"b30c90a360bf7c40f1535b4bb0f1ee8279dd6b41","sha256":"2cb539c9440f1a9bcf3d85282e986fba1bd06d54ca487f08f74687a421970590","sha512":"35dfd292acfd5291fa895fe1cf8e6363cf0ed0eba0a06bc6545051fd4c06167017923c5b6faef36e562369093aaba916c668971eb4adc2b8e0f7da34ef4baab8","ssdeep":"192:WG79Yz8wTp6hcjGVrx5g1ZIqp+fgF6rf7FEMxCLgP/rkDft:WygHTpuq2r/w6qpL6fFZVoDft","tlshash":"c612af4015591fe6d4139d3ea49d4230d892f850a3815eb8f272b7f317e6b6a06cb9e8","first_seen":"2025-09-11T20:01:15.163727Z","last_seen":"2026-07-21T15:38:25.154833Z","times_seen":271,"resource_available":false,"data":null}},"time_used":1199,"timings":{"blocked":592,"dns":0,"connect":151,"send":0,"wait":154,"receive":145,"ssl":156},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"cgprohelmets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cgprohelmets.com/themes/images/7.jpg","fqdn":"cgprohelmets.com","domain":"cgprohelmets.com","tld":"com"},"ip":{"addr":"104.237.57.18","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cgprohelmets.com/themes/","date":"2026-07-20T12:48:47.303Z","timestamp":1784551727303,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cgprohelmets.com","organization":""},"issuer":{"commonName":"XinNet RSA DV","organization":"Xin Net Technology Corp."},"validity":{"start":"Sat, 02 Aug 2025 00:00:00 GMT","end":"Sun, 02 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:32:D8:09:1D:5D:46:E0:0A:CA:D8:1B:2C:16:7A:64:DE:0B:91:C9","sha256":"C8:D5:2C:46:8E:2C:2E:7F:E2:8B:88:36:EC:46:30:67:04:BB:69:3B:F0:FE:90:F1:8D:74:81:2C:59:A3:E1:4B"}}},"request":{"raw":"GET /themes/images/7.jpg HTTP/1.1\r\nHost: cgprohelmets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cgprohelmets.com/themes/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 20 Jul 2026 12:48:47 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 12 Dec 2023 11:32:50 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 103696\r\nKeep-Alive: timeout=2, max=96\r\nConnection: Keep-Alive\r\nContent-Type: image/jpeg\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":103696,"size_decoded":103941,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 800x571, components 3","md5":"1fe21fb7d7f74d8c113debac7ec3a68b","sha1":"dc8d51acc8c31ea7c1c1510fbcfa5b1217eab798","sha256":"3b90d0e8ac409fc6bb13eae21873c3c2f3e47c705d7d0d742abed1fe5ab64fe3","sha512":"53a4c78ced6da404894f481a9421f9a001e7199af8bd851e6b1ef5f1da34cc9f5dfd053aa289c4edb49d153cb8365e87585eeefbb97ad7e04f902957732272b7","ssdeep":"1536:9SUXjtPdrDQWLVw3oIoU19/u9Y1KGW5wmqIQDm3sokVncsSFkcASyDr9OE5BhOkM:9RXpPeqmfWuKGWPqxfNcXaJPvBgy0","tlshash":"99a31233a8ee4917eeac533cb89e2d24d9c665b477133b6bf1bc481870e119ab429407","first_seen":"2025-09-11T20:01:15.173475Z","last_seen":"2026-07-21T15:38:25.15541Z","times_seen":259,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":155,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"cgprohelmets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cgprohelmets.com/themes/images/a_fav.png","fqdn":"cgprohelmets.com","domain":"cgprohelmets.com","tld":"com"},"ip":{"addr":"104.237.57.18","port":443,"asn":18450,"as":"WEBNX","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cgprohelmets.com/themes/","date":"2026-07-20T12:48:47.631Z","timestamp":1784551727631,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cgprohelmets.com","organization":""},"issuer":{"commonName":"XinNet RSA DV","organization":"Xin Net Technology Corp."},"validity":{"start":"Sat, 02 Aug 2025 00:00:00 GMT","end":"Sun, 02 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A7:32:D8:09:1D:5D:46:E0:0A:CA:D8:1B:2C:16:7A:64:DE:0B:91:C9","sha256":"C8:D5:2C:46:8E:2C:2E:7F:E2:8B:88:36:EC:46:30:67:04:BB:69:3B:F0:FE:90:F1:8D:74:81:2C:59:A3:E1:4B"}}},"request":{"raw":"GET /themes/images/a_fav.png HTTP/1.1\r\nHost: cgprohelmets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cgprohelmets.com/themes/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 20 Jul 2026 12:48:47 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 27 May 2025 14:04:48 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3134\r\nKeep-Alive: timeout=2, max=100\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3134,"size_decoded":3377,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"1f45fc9ea9bcc7788fdf81cbae5bc20a","sha1":"4b9e7614064e662826020a1af8a9518efdb2cf14","sha256":"224a5a2167c4a99589eafb08702d83bfcd25073996f5c8f638ef409c5f70f03b","sha512":"3ecf95c48c4b7d28ea21b512471adb4b375fedd82118b6100f4b74e8d49e892c6285c4a0675660defe3f569da6cafc5cdf1704c38b8c5a78310d7c54e80df857","ssdeep":"","tlshash":"01514d46b2850efed0136e37d4071263c652e25053a305bde5ade1b779a9fa44ac3c81","first_seen":"2025-11-03T17:53:29.873318Z","last_seen":"2026-07-21T13:58:24.204491Z","times_seen":20,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"cgprohelmets.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}