{"report_id":"32ddd0c8-4dbd-499c-b3e7-36fe08081f76","version":0,"status":"done","tags":[],"date":"2026-07-22T10:29:28Z","url":{"schema":"http","addr":"nuthouse.run","fqdn":"nuthouse.run","domain":"nuthouse.run","tld":"run"},"ip":{"addr":"2.24.198.130","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"nuthouse.run/","fqdn":"nuthouse.run","domain":"nuthouse.run","tld":"run"},"title":"NUT HOUSE — $NUTHOUSE","dom":{"size":21209,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (460)","md5":"8eaada9ff566b2393bed12fe6fc75c23","sha1":"a3eb637b57bbe288be4e85d67c6e37948b96ee98","sha256":"d60935f542166735d0780ac464eb0b8231c6020e4d020e2ca30d8911fba821bb","sha512":"bd52a9af25116bfcb429efac3615eef98fe7c283402a2e1be59eeed45bd5d73eb87bd512b9604c91465aa4d09d29b87ed34973fd7c6353605b4a673a57e147ab","ssdeep":"384:5B0PHpaMky46KvuJ/QoYqhJZn3xGT1SsbenzuvwJaf1uhFPzdf6x6P4Qti3IT4b:5Wf/lRsb4vfb4QeIT4b","tlshash":"d792d831c2e1103a7c63d285fb9a178eb2519507c8174ac67afd8394cfc7afb85a6149","dom_hash":"domhashe14a1a501b90f9355a1ea68945f73cf0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nuthouse.run","fqdn":"nuthouse.run","domain":"nuthouse.run","tld":"run"},"ip":{"addr":"2.24.198.130","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T10:29:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"nuthouse.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":6,"received_data":302730,"sent_data":3435,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nuthouse.run","ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-22T10:19:07.427897Z","last_seen":"2026-07-22T10:19:07.427897Z","alert_count":4,"request_count":4,"received_data":622728,"sent_data":1983,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":1,"received_data":9886,"sent_data":609,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nuthouse.run/","fqdn":"nuthouse.run","domain":"nuthouse.run","tld":"run"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d86067ced48dbf3478c4ee311faba109","sha1":"cff3e1834a351b9456d0c8d50fece5ce6859c71a","sha256":"b3e7afa75ceee45f46b1fa2638074e7db44074cff2a8eb1a6190d186f650e7d3","sha512":"088eed22c0cc38d00fc03010d4d6d4317180e7f2585d8bfabe6d452d00631d403a2baf16e9c57852d83948f6dd4bd1b964914825532344db7b5eeed49541a14d","ssdeep":"","tlshash":"e4312272e0b105b04ea64ebb9107917c65124d1cb983ec931cfea42d0fd7a55d8776c9","size":1628,"data":"","first_seen":"2026-07-22T10:19:11.256767Z","last_seen":"2026-07-22T10:29:29.334538Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nuthouse.run/","fqdn":"nuthouse.run","domain":"nuthouse.run","tld":"run"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T10:28:10.982Z","timestamp":1784716090982,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nuthouse.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 14:48:58 GMT","end":"Tue, 06 Oct 2026 14:48:57 GMT"},"fingerprint":{"sha1":"1B:5B:A4:F3:E9:9D:ED:28:00:5A:89:74:76:90:E0:2C:D1:69:A0:F6","sha256":"3C:33:69:E7:F0:65:64:B7:D0:73:AF:0A:EE:CE:15:B6:49:EC:D2:0D:09:B6:8A:FA:77:50:67:88:BE:E4:38:D8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nuthouse.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:28:11 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nCache-Control: public, max-age=3600\r\nLast-Modified: Mon, 13 Jul 2026 16:28:25 GMT\r\nETag: W/\"5342-19f5c4ef394\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":21314,"size_decoded":7947,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (456)","md5":"96d32ec00b38b9c2a9d68dc4823696be","sha1":"666c7c9ed40f9807fc10a03596b7d93e9c131b5f","sha256":"83af5c3235352600f79c43519c554c68bea9b39b1dc434313b7140fc925e0cda","sha512":"d8d21d177382291679ef29389f291d2c4f2b868d9842becb0bb13e8d866651f09633e1fdd1ac372e122f0ab6291ec468b7d9f92390e4632f3195687181da2dc5","ssdeep":"384:+PHpaMky46KvuJ/QoYqhJZn3xGT1Ss78TzuvwJaf1uhFFEda6x6s4Qti3IT4f:Gf/lRs7qgaw4QeIT4f","tlshash":"71a2d831c2e1103a7c63d285f79a178eb2519507c8174ac67afd8394cfc7afb85a6289","first_seen":"2026-07-22T10:19:11.251087Z","last_seen":"2026-07-22T10:29:29.32602Z","times_seen":2,"resource_available":true,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":90,"connect":99,"send":0,"wait":101,"receive":0,"ssl":209},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"nuthouse.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Baloo+2:wght@600;700;800\u0026family=Fraunces:opsz,wght@9..144,400;9..144,500;9..144,600\u0026family=Permanent+Marker\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nuthouse.run/","date":"2026-07-22T10:28:11.952Z","timestamp":1784716091952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Baloo+2:wght@600;700;800\u0026family=Fraunces:opsz,wght@9..144,400;9..144,500;9..144,600\u0026family=Permanent+Marker\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nuthouse.run/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Jul 2026 10:28:12 GMT\r\ndate: Wed, 22 Jul 2026 10:28:12 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9202,"size_decoded":1460,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dea055c5b35e35a64a448d99d86ac4d4","sha1":"3267b1ace95fceb98d2800ae230987f8e4ae4e41","sha256":"5a586b14adcd67dd518d719da45fc25ec0778608321ea9175bad20983f6def80","sha512":"07cae516b0e56682fa6e33f36fe4d0477c8725c7fb1089ff4d6fd6b1574998b89803cc8509d55e8709053d54c19531cc074863d42a6289ea932540489c518041","ssdeep":"192:rp9tsq/p+usZupP/s85pMpMEUMw6M6ME7MwXMXMEeMkD:NjT5NE5","tlshash":"1e120491086be604eb871cc263ce3d32de5e62546051c679affd0cd5ecdac26236871e","first_seen":"2026-07-22T10:19:11.255333Z","last_seen":"2026-07-22T10:29:29.32672Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":37,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/baloo2/v23/wXKrE3kTposypRyd51jcAA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nuthouse.run/","date":"2026-07-22T10:28:12.164Z","timestamp":1784716092164,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/baloo2/v23/wXKrE3kTposypRyd51jcAA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nuthouse.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33188\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 06:00:02 GMT\r\nexpires: Fri, 16 Jul 2027 06:00:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 534490\r\nlast-modified: Tue, 16 Sep 2025 13:29:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":33188,"size_decoded":34001,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33188, version 1.0","md5":"a70aa8d7a22a2de72d6ce5cc8255db6a","sha1":"ae196042c8b3b608c8e188b1d9fd2826f37d4956","sha256":"26fb4610d4bc976d2584ca15e66c11465dbc1f267a10dca668fcb3080dfe59c1","sha512":"4b9f457275e3bbe617ab8848b0c36d1108af41edb1cff05a1fcdfa120229576b63e1f60fb5245e57e318c1cb926d09f65f90a45a831c197b5eb76c717d375459","ssdeep":"768:AhWDoMF8Pqa3PngkLzOo6l8tAUvh98/hMzDCMUq3vZG7GwTO:AhWEMwqa3hziK94MyM1fkGwTO","tlshash":"b0e2f1678cb159c2d03dc6752b479ab8875c824842a1db1632cb42a37cdd9bf1a1ad61","first_seen":"2025-06-04T03:29:54.790491Z","last_seen":"2026-07-23T00:28:22.323422Z","times_seen":1068,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":79,"send":0,"wait":27,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nuthouse.run/mascot.png","fqdn":"nuthouse.run","domain":"nuthouse.run","tld":"run"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nuthouse.run/","date":"2026-07-22T10:28:11.958Z","timestamp":1784716091958,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nuthouse.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 14:48:58 GMT","end":"Tue, 06 Oct 2026 14:48:57 GMT"},"fingerprint":{"sha1":"1B:5B:A4:F3:E9:9D:ED:28:00:5A:89:74:76:90:E0:2C:D1:69:A0:F6","sha256":"3C:33:69:E7:F0:65:64:B7:D0:73:AF:0A:EE:CE:15:B6:49:EC:D2:0D:09:B6:8A:FA:77:50:67:88:BE:E4:38:D8"}}},"request":{"raw":"GET /mascot.png HTTP/1.1\r\nHost: nuthouse.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nuthouse.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:28:12 GMT\r\nContent-Type: image/png\r\nContent-Length: 425833\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=3600\r\nLast-Modified: Wed, 08 Jul 2026 15:37:26 GMT\r\nETag: W/\"67f69-19f42607a42\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":425833,"size_decoded":426262,"mime_type":"image/png","magic":"PNG image data, 800 x 560, 8-bit/color RGBA, non-interlaced","md5":"71cf2c6bb64523baea861443d028b934","sha1":"78c1107ebcedad32eecd7e847629c7628515f1eb","sha256":"7d3497a7889e1b222b2637c8a13c1ce208018eb94abda03cb69924e0352b6a9e","sha512":"117c4e854af70cb0cc3f19819b59ca31b3ecf326f6bbb2bfd9fb1e80999b36e443ec7b121cd27582896df73f0e7ba9758755680dd665ae992ba903f593d5bf32","ssdeep":"12288:wPrhOOpyTmxc1NKg0XF/0wA07B+hFvLRySkg1N:IhOOwSxuq/07ishpLRLkqN","tlshash":"b494234e56d533b3400f2570e8fe8d915da335aa01766ebd211a41acbe1af0328e53f9","first_seen":"2026-07-22T10:19:11.247692Z","last_seen":"2026-07-22T10:29:29.329209Z","times_seen":2,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":76,"dns":0,"connect":98,"send":0,"wait":197,"receive":389,"ssl":106},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"nuthouse.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nuthouse.run/vlad.jpg","fqdn":"nuthouse.run","domain":"nuthouse.run","tld":"run"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nuthouse.run/","date":"2026-07-22T10:28:11.961Z","timestamp":1784716091961,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nuthouse.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 14:48:58 GMT","end":"Tue, 06 Oct 2026 14:48:57 GMT"},"fingerprint":{"sha1":"1B:5B:A4:F3:E9:9D:ED:28:00:5A:89:74:76:90:E0:2C:D1:69:A0:F6","sha256":"3C:33:69:E7:F0:65:64:B7:D0:73:AF:0A:EE:CE:15:B6:49:EC:D2:0D:09:B6:8A:FA:77:50:67:88:BE:E4:38:D8"}}},"request":{"raw":"GET /vlad.jpg HTTP/1.1\r\nHost: nuthouse.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nuthouse.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:28:12 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 138460\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=3600\r\nLast-Modified: Wed, 08 Jul 2026 15:37:07 GMT\r\nETag: W/\"21cdc-19f42602dcf\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138460,"size_decoded":138890,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1016x982, components 3","md5":"d9e83f59f792ede346e9d6e639a5613d","sha1":"a5e6be862a9c3b5a206acce0a7c5965955eb608d","sha256":"2e7d1d3139515ea6712b9aa1640089194dfbed946ad7c13f14d82e83f4e2c49a","sha512":"9636eb1a44becd7e486c8cefeb6fb742c02c9ba33ca52026314d51a618b69977955aea7897d38b0e1bb7bd74ac54f22fc22e22596dfc06e8e9cf973e48b4a80d","ssdeep":"3072:RS3S4WlzaeTu4gEAXXcLZ8SUZcRbxX24SG:R6FWlzlgEAXXUZ8xceBG","tlshash":"05d312510c6e0e92ef79c13395fa6a70607a0c81e8cb4b7555f95f5bb34e86ec258cb0","first_seen":"2026-07-22T10:19:11.249039Z","last_seen":"2026-07-22T10:29:29.332225Z","times_seen":2,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":201,"receive":199,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"nuthouse.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/permanentmarker/v16/Fh4uPib9Iyv2ucM6pGQMWimMp004La2Cfw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nuthouse.run/","date":"2026-07-22T10:28:12.167Z","timestamp":1784716092167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/permanentmarker/v16/Fh4uPib9Iyv2ucM6pGQMWimMp004La2Cfw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nuthouse.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29564\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 06:40:47 GMT\r\nexpires: Fri, 16 Jul 2027 06:40:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 532045\r\nlast-modified: Tue, 19 Apr 2022 17:55:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29564,"size_decoded":30377,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29564, version 1.0","md5":"1b66ccb164151a6cf698667c8b570cc6","sha1":"f5617a0f087645703c874453960be6382c8a7427","sha256":"4884fec2c73aa52a2461073c1b87d1ceb80f400520391b43f97ca7d3c39eeb24","sha512":"74628f9ca05f31db6d92ce52f43082952168957687dd72d36172bad207c1448080275e4f3131e22b5e50f5ebfa2ef649be89e605b13a6b7def54e161bba4e7aa","ssdeep":"768:6qij7U1+JTVAg4GQI1XP27R6kpnCIbC79Wu9m1:6qEJ/8ImRpnCIqW","tlshash":"0ad2e10af09d409bcffa897d2c44dd26e1736a3ca6b0a7f052aebc143071a6db4d4695","first_seen":"2023-04-06T07:57:08Z","last_seen":"2026-07-23T05:59:20.394931Z","times_seen":1591,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":18,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/baloo2/v23/wXKrE3kTposypRyd51jcAA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nuthouse.run/","date":"2026-07-22T10:28:12.169Z","timestamp":1784716092169,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/baloo2/v23/wXKrE3kTposypRyd51jcAA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nuthouse.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33188\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 06:00:02 GMT\r\nexpires: Fri, 16 Jul 2027 06:00:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 534490\r\nlast-modified: Tue, 16 Sep 2025 13:29:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":33188,"size_decoded":34001,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33188, version 1.0","md5":"a70aa8d7a22a2de72d6ce5cc8255db6a","sha1":"ae196042c8b3b608c8e188b1d9fd2826f37d4956","sha256":"26fb4610d4bc976d2584ca15e66c11465dbc1f267a10dca668fcb3080dfe59c1","sha512":"4b9f457275e3bbe617ab8848b0c36d1108af41edb1cff05a1fcdfa120229576b63e1f60fb5245e57e318c1cb926d09f65f90a45a831c197b5eb76c717d375459","ssdeep":"768:AhWDoMF8Pqa3PngkLzOo6l8tAUvh98/hMzDCMUq3vZG7GwTO:AhWEMwqa3hziK94MyM1fkGwTO","tlshash":"b0e2f1678cb159c2d03dc6752b479ab8875c824842a1db1632cb42a37cdd9bf1a1ad61","first_seen":"2025-06-04T03:29:54.790491Z","last_seen":"2026-07-23T00:28:22.323422Z","times_seen":1068,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":40,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fraunces/v38/6NU78FyLNQOQZAnv9bYEvDiIdE9Ea92uemAk_WBq8U_9v0c2Wa0KxC9TeA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nuthouse.run/","date":"2026-07-22T10:28:12.171Z","timestamp":1784716092171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/fraunces/v38/6NU78FyLNQOQZAnv9bYEvDiIdE9Ea92uemAk_WBq8U_9v0c2Wa0KxC9TeA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nuthouse.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 67304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 07:14:00 GMT\r\nexpires: Fri, 16 Jul 2027 07:14:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 530052\r\nlast-modified: Tue, 09 Sep 2025 18:43:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":67304,"size_decoded":68117,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 67304, version 1.0","md5":"069cb90e11a337bf264eadfb15ad00f5","sha1":"48642176d960affe01a1a57fc8179e05c618793d","sha256":"7234ed860a9cc83045413c4faee63c960a8f2d1917adcf728119307d56e0d783","sha512":"1c076a1b528a83e283f57d408c8e4f0a629b8daa47e8e10e2607fa26e346b7ea5ad1d237f815be91b553adfe644227877cb4693d1db9568028b6c2c68ed3f1d2","ssdeep":"1536:suAREpsv3Xf8UR8UX2S6teGGD7BhviSVDQ2AV4QnsKBn3Fa9dT1G5w6:GdPXzeUX2S60GGD36uOZFATM","tlshash":"d663020d07b99b3c436f5c9319b2ede92e2ea41b2486f045feb7b891e4405c591bcc97","first_seen":"2025-01-24T12:50:21.10871Z","last_seen":"2026-07-23T10:21:34.409919Z","times_seen":3262,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":48,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fraunces/v38/6NU78FyLNQOQZAnv9bYEvDiIdE9Ea92uemAk_WBq8U_9v0c2Wa0KxC9TeA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nuthouse.run/","date":"2026-07-22T10:28:12.173Z","timestamp":1784716092173,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/fraunces/v38/6NU78FyLNQOQZAnv9bYEvDiIdE9Ea92uemAk_WBq8U_9v0c2Wa0KxC9TeA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nuthouse.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 67304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 07:14:00 GMT\r\nexpires: Fri, 16 Jul 2027 07:14:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 530052\r\nlast-modified: Tue, 09 Sep 2025 18:43:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":67304,"size_decoded":68117,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 67304, version 1.0","md5":"069cb90e11a337bf264eadfb15ad00f5","sha1":"48642176d960affe01a1a57fc8179e05c618793d","sha256":"7234ed860a9cc83045413c4faee63c960a8f2d1917adcf728119307d56e0d783","sha512":"1c076a1b528a83e283f57d408c8e4f0a629b8daa47e8e10e2607fa26e346b7ea5ad1d237f815be91b553adfe644227877cb4693d1db9568028b6c2c68ed3f1d2","ssdeep":"1536:suAREpsv3Xf8UR8UX2S6teGGD7BhviSVDQ2AV4QnsKBn3Fa9dT1G5w6:GdPXzeUX2S60GGD36uOZFATM","tlshash":"d663020d07b99b3c436f5c9319b2ede92e2ea41b2486f045feb7b891e4405c591bcc97","first_seen":"2025-01-24T12:50:21.10871Z","last_seen":"2026-07-23T10:21:34.409919Z","times_seen":3262,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":46,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fraunces/v38/6NU78FyLNQOQZAnv9bYEvDiIdE9Ea92uemAk_WBq8U_9v0c2Wa0KxC9TeA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nuthouse.run/","date":"2026-07-22T10:28:12.174Z","timestamp":1784716092174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/fraunces/v38/6NU78FyLNQOQZAnv9bYEvDiIdE9Ea92uemAk_WBq8U_9v0c2Wa0KxC9TeA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://nuthouse.run\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 67304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 07:14:00 GMT\r\nexpires: Fri, 16 Jul 2027 07:14:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 530052\r\nlast-modified: Tue, 09 Sep 2025 18:43:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":67304,"size_decoded":68117,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 67304, version 1.0","md5":"069cb90e11a337bf264eadfb15ad00f5","sha1":"48642176d960affe01a1a57fc8179e05c618793d","sha256":"7234ed860a9cc83045413c4faee63c960a8f2d1917adcf728119307d56e0d783","sha512":"1c076a1b528a83e283f57d408c8e4f0a629b8daa47e8e10e2607fa26e346b7ea5ad1d237f815be91b553adfe644227877cb4693d1db9568028b6c2c68ed3f1d2","ssdeep":"1536:suAREpsv3Xf8UR8UX2S6teGGD7BhviSVDQ2AV4QnsKBn3Fa9dT1G5w6:GdPXzeUX2S60GGD36uOZFATM","tlshash":"d663020d07b99b3c436f5c9319b2ede92e2ea41b2486f045feb7b891e4405c591bcc97","first_seen":"2025-01-24T12:50:21.10871Z","last_seen":"2026-07-23T10:21:34.409919Z","times_seen":3262,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":33,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nuthouse.run/favicon.png","fqdn":"nuthouse.run","domain":"nuthouse.run","tld":"run"},"ip":{"addr":"2.24.198.130","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nuthouse.run/","date":"2026-07-22T10:28:12.541Z","timestamp":1784716092541,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nuthouse.run","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 14:48:58 GMT","end":"Tue, 06 Oct 2026 14:48:57 GMT"},"fingerprint":{"sha1":"1B:5B:A4:F3:E9:9D:ED:28:00:5A:89:74:76:90:E0:2C:D1:69:A0:F6","sha256":"3C:33:69:E7:F0:65:64:B7:D0:73:AF:0A:EE:CE:15:B6:49:EC:D2:0D:09:B6:8A:FA:77:50:67:88:BE:E4:38:D8"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: nuthouse.run\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://nuthouse.run/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Wed, 22 Jul 2026 10:28:12 GMT\r\nContent-Type: image/png\r\nContent-Length: 35386\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=3600\r\nLast-Modified: Wed, 08 Jul 2026 15:38:29 GMT\r\nETag: W/\"8a3a-19f42616d87\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":35386,"size_decoded":35813,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGB, non-interlaced","md5":"cdec2c504655f21354ecef89ad9e2541","sha1":"9c9a6199631fd9708897daab0ce457de2183d94b","sha256":"2c92a65db7b60b19da0d2641fd3d079916c26f1f299c48b805d8a0eeb8696f7e","sha512":"52aa5391626e6fa4fb868799073caf9f3cad0a34ba8a71e70f4be6410b98d4f56c67292cb8c3586464c73a021b15bbe3e988788627578bd4b419a3803a6ce1ac","ssdeep":"768:u+SbKJevlYbygvwGy+Y3W233wUIwTfQlX6:uDxvaljY3W3wTQlK","tlshash":"39f201dc74c286ece0ccfd6cd5a59a31b6f1312df295a1e3c019cb4a4a8a3e1bd25493","first_seen":"2026-07-22T10:19:11.253859Z","last_seen":"2026-07-22T10:29:29.333956Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"nuthouse.run","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}