{"report_id":"8cd027d4-f10a-44f1-b4fa-4c6970f0b833","version":0,"status":"done","tags":[],"date":"2026-10-11T05:37:29Z","url":{"schema":"http","addr":"dhidedesigns.com/","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"172.67.169.27","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dhidedesigns.com/","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"title":"Biggest Winnings","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T07:43:34.782978Z","times_seen":19020931,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dhidedesigns.com/","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"172.67.169.27","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-15T05:37:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"dhidedesigns.com","ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-11-16","domain_rank":0,"first_seen":"2019-06-08T10:51:45Z","last_seen":"2026-09-10T23:47:09.298166Z","alert_count":100,"request_count":50,"received_data":2487561,"sent_data":28364,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"All in One SEO:4.8.2","description":"All in One SEO optimizes a WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"PHP:8.3.0","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Image Placeholders:1.2.0","description":"Performance plugin from the WordPress Performance Team, which determines and stores the dominant color for newly uploaded images in the media library, then uses that as a placeholder background during front end image loads.","website":"https://wordpress.org/plugins/dominant-color-images/","common_platform_enumeration":"","icon":"dominant-color-images.svg","categories":["WordPress plugins","Performance"]},{"name":"Modern Image Formats:2.5.1","description":"Performance plugin from the WordPress Performance Team, which adds support for outputting images in WebP or AVIF format and supports the `picture` element to enable format fallbacks.","website":"https://wordpress.org/plugins/webp-uploads/","common_platform_enumeration":"","icon":"modern-image-formats.svg","categories":["WordPress plugins","Performance"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Performance Lab:3.9.0","description":"Performance plugin from the WordPress Performance Team, which is a collection of standalone performance modules.","website":"https://wordpress.org/plugins/performance-lab/","common_platform_enumeration":"","icon":"Performance Lab.svg","categories":["WordPress plugins","Performance"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"All in One SEO Pack:4.8.2","description":"All in One SEO plugin optimizes WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.8.11","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dhidedesigns.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-11T07:42:12.053066Z","times_seen":1099774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-11T07:42:11.972916Z","times_seen":1004027,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8fef952724f7036b4b6bbd19257a770d","sha1":"463d9d18a7b272a35253201635fa46769316ef1b","sha256":"967a1108e37e7daddf0848326c1a3246b71c1031fff7177a63794f659e187da4","sha512":"1e8c2a7b66d33c755c9f38eee0de74e0e760e4f1c7b4f3aa253fbb36c1c3af8bc14e263c66de7c755d415707022746bc6bb01c10fc1d91f691f3327d0f4cd738","ssdeep":"","tlshash":"2561a99e3775358b32b604d16a2f0e07eb72483616c8d034cab5e7141cb1463d37ae4a","size":3386,"data":"","first_seen":"2026-10-11T05:37:33.65354Z","last_seen":"2026-10-11T05:37:33.65354Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"28544e09548e831f6b024cb435106d0b","sha1":"d3db212d2d482289a78e6fe38881e2aa02982047","sha256":"3cb669bc82b1489a5abc2ac0ef16560ae8056517adc022383013f180ccfe3bf1","sha512":"4ef30b25c1bdbcc0dace935827d12f9add88ced22c53af8dc39ed8e6087e8c1879717ba567c9a4a7c7bf88a78d5edaf28dca3842c101da7a8c22dcc4ffb41d70","ssdeep":"","tlshash":"86112b5a7165187a80fb1c99b3cb52d83e2454cb6505a467357d8f490f21dc08ae2dfd","size":971,"data":"","first_seen":"2026-07-11T05:49:34.655728Z","last_seen":"2026-10-11T05:37:33.654501Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.11","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-10-11T07:34:14.780347Z","times_seen":215367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://dhidedesigns.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/plugins/wp-multilang/flags/de.png","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.353Z","timestamp":1791697012353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/plugins/wp-multilang/flags/de.png HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 16 May 2025 06:24:21 GMT\r\npriority: u=5,i\r\netag: \"6826da15-7e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pFDMsJRKqwkJ4s6vKHahccSmOm1P6zGgB1yITpcx39qYR1q0QVamiQpUtdSzYWD2G8BLejyV7rEmVsks3SmSumtmIItd%2B8mAPYZc7RYYNqdPRy1%2BkgRmAMiTamQw6zYjLbkS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82773bbc75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 126\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126,"size_decoded":807,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced","md5":"f352b99440063710baa4cf062ac7d674","sha1":"6fe828f5286e2fc09c6b3d841a90313e17d65e84","sha256":"bd40f381fc03e81b9a9d857cbcc5df175334904674477cff34582fd083219f0c","sha512":"8747667383eb8d2339d68044bec85f38c3406c3cc1bbb275f55e83ffe5832964952f966bab329d36d9834eff7df0ef778928168a014e8645408e8858fe7f4329","ssdeep":"","tlshash":"92b02ba363b09f74c3d93cb241e44120c426441044711ec446094c23185a0c950d0301","first_seen":"2023-06-11T10:26:07Z","last_seen":"2026-10-11T05:37:33.592137Z","times_seen":67,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/plugins/wp-multilang/flags/fr.png","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.356Z","timestamp":1791697012356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/plugins/wp-multilang/flags/fr.png HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 16 May 2025 06:24:21 GMT\r\npriority: u=5,i\r\netag: \"6826da15-92\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NyvLKraWr5J7XayXdy%2F01kha2xkWbyZ38G7IBt%2F2YwqvW46Uu1BFT3P%2BCPHpol1RvH2CqDH6tDl9xuD90vcuLCF4sWqx7a8sCGj0VjA9faASkMqMNrIpraGjGVxNANr3HHdZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82773bbe75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 146\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":829,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced","md5":"6ca1ed21c574a93ca6a787113e20c41e","sha1":"dc0467dbac940475f138b700c5143cb4e2109f1e","sha256":"ca22f4fa9e2b1fc5fa4a2dd5a9c2c7d4b1cbcba516ffc13c4dfc8d2300eb9227","sha512":"77301d1501e9cb730b504773fd85e0a8b0fd82b51451d823f64c12479e9d54992f948123de4b704afa25509e5df469978445a90d7351fe866691fe9cca44533e","ssdeep":"","tlshash":"59c08ce325249da7c4a4a26ba58c2cf8a91286200e620b45078a05281885029428dbd7","first_seen":"2023-08-25T12:13:20Z","last_seen":"2026-10-11T05:37:33.592789Z","times_seen":83,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2026/01/1Jackpot-verification-checklist.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.380Z","timestamp":1791697012380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/1Jackpot-verification-checklist.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 21 Jan 2026 11:52:19 GMT\r\npriority: u=5,i\r\netag: \"6970bdf3-c22c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SUYuX%2BuUSFRjZojv1OAVcT8v8Ez%2Brm%2Bl7CQhRLNdqmDwIZpYoW07T5cDCpzMjkM5lfME9%2Bt7vx1pw7fEuK6h2WXvEdl8sVt4oBfLSvul1z9L4dg27l%2FyhDEoXslRGVyLXQwQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82775bcf75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49708\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49708,"size_decoded":50400,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8146f8e59775d1507e78176b065406ac","sha1":"8febcb7d82b94bb52101a09156eb68dff98d6b1b","sha256":"5cfd35f9c05e2e1f5e280946d7e7b19563caede285c183015f92d9a56edc7249","sha512":"a182a2bc2fd6ead25c6781888f3578aa3814949ae6bec780efe846d04005175ff97b60f2beec5ec3a87827fc4c7ab38f51abe810c34b9a974a13aa06a6cee92c","ssdeep":"768:qQXSl/sGo2jHxBV0RW5UDHODiaGg2oC0JJorJq3TkNjta+91929:NSlEGpjRBaRWIuDnGMCSKlqILvDQ","tlshash":"c32302fb9e087d89596c523c5f8a10fbde1479b544f8a90afc509a44eabd61af503088","first_seen":"2026-09-10T23:47:10.913597Z","last_seen":"2026-10-11T05:37:33.593916Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2023/06/truffe-del-casino.jpg","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.404Z","timestamp":1791697012404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/truffe-del-casino.jpg HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 05 Jun 2023 06:42:08 GMT\r\npriority: u=5,i\r\netag: \"647d83c0-21427\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K5UjNH2CKBL2lyjAMAaT06mRZ1iIOUhopgvpJWwhfh4P0lUABB6FLncb6yL5o5ZbGnZv78ejcvuUvfLDrvFiHgZlm%2FR8SxUTIXA9DO8dPAQ5LdhNKZ7P7nowa3tf%2Bd022We7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82778be175ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 136231\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136231,"size_decoded":136919,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=1], baseline, precision 8, 1280x640, components 3","md5":"98349c29aa2efff2ea167aeba8b9e775","sha1":"10c5e19510a55fb817058fc82beb007b24a34fe4","sha256":"054f6fc26ebecf1c31a27a7892f6a5b40d6f23d9dc849ab5038b42a4c54158d5","sha512":"546c9cc0c5fcf424c2373d13ff3bb969cc56807b7edb6ef41251122248493082687fe64d90f0bdead48fd2433a20e7d8125033475bec7546b8491248232cff33","ssdeep":"3072:IWeB773jkZ9iXKgGunLVjldmDyE0+qA1BHVnLrU/Ux:uBH3wbyKgGAfqqA1B1ssx","tlshash":"e3d312a75217c9b242fc84297c6bda0446368be7f95f12a33b6b5d03788d7c3562c398","first_seen":"2024-08-19T22:09:07.091262Z","last_seen":"2026-10-11T05:37:33.595387Z","times_seen":4,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/themes/248479_payday/style.css?ver=1730978321","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.324Z","timestamp":1791697012324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/themes/248479_payday/style.css?ver=1730978321 HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CYKC9BmdneblJrQOHgukmcEI4hHTPrjsxJYbImSurPqvx%2BzSmMs7OGIOS7srR%2BP4qLfwA6n7Qbz5NitPwQzw9yVdpc56vh0Xvd5a%2BKEq1pPi2lQ3pG4LIYVZFydih971WLQO\"}]}\r\nlast-modified: Thu, 30 Dec 2021 15:30:56 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"61cdd0b0-4ab6\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a48b82770bb575ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19126,"size_decoded":5447,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"4db4bfa04656ba8bcd1d2215cb74499d","sha1":"5322b20e75dd91f7cd9b452353bf7f2bd113fc96","sha256":"9b8d317e3a86bb43358d28c482cb000dc8efc00813fdc11eafd350f51855f9cd","sha512":"20a23397cdd9949e3a0787f45706f51fd6aa6c9c9ea20821f26bc84999c2eef43210fa21cfe271e9a16fe3106f174998691cf7235139cd4a3f85a24ce715d67c","ssdeep":"192:jZjwpO04/oCN81woH4M+bE5/6li+RWQMFrNmeks0aKExAzwcjVCSSFsIDUo5MrMy:HdgCE+Y7VFgIO4GzFBjnFd","tlshash":"8e82e3868ae31d15b40bd09c6fee9311732d8043970ecd197f9db298cf4a29495f2bad","first_seen":"2025-12-20T08:55:00.828909Z","last_seen":"2026-10-11T05:37:33.59646Z","times_seen":10,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2025/08/Las-Vegas-record-payout1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.394Z","timestamp":1791697012394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/Las-Vegas-record-payout1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 01 Aug 2025 12:49:03 GMT\r\npriority: u=5,i\r\netag: \"688cb7bf-8e2c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FibN6pc1fXp1sVus%2BV5%2Fae%2Ftv79l2ftvcAN0jn%2BPTOVkmx1rKEtrjMGtFSnu%2BqKxG%2FI4CO8xt3dxGbGY2JJkns6OPMqhT0bd4rFlsM912r8N9EqxSEO1NHI%2FJTN9WoPvNAoT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82777bda75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36396,"size_decoded":37092,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b9d6e7d77c99ec6f8b881d913600233c","sha1":"37e53bb881755370aa1fc36e47070c9040d74cff","sha256":"72c9630123bab015de6ab149eadd5fe219d7228628a33aac1b40a5affbdb0099","sha512":"7a2c977426ef9d6c60fc7a7accf3ac03fd51189b7df17fc1e47a824cb208153caaef32ce599ce6d984ae0aeda9e518ad38a7c2cac5c7fc75d12b551b2b336604","ssdeep":"768:wLYApEjf0mZCkgt39dTQQTYmVrSS2YN28KFxOEUd4:6YB0mZKtNd0QTY4STw28Kz8d4","tlshash":"7bf2f1d3b37403d39660c9e7ac6a32f7af6debe4735206a741719ba540096eb2172b40","first_seen":"2025-12-20T08:55:00.85262Z","last_seen":"2026-10-11T05:37:33.597639Z","times_seen":3,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/themes/248479_payday/fonts/Roboto-Black.ttf","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.635Z","timestamp":1791697012635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/themes/248479_payday/fonts/Roboto-Black.ttf HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/wp-content/themes/248479_payday/style.css?ver=1730978321\r\nCookie: language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 28 Dec 2021 15:13:45 GMT\r\npriority: u=3,i=?0\r\netag: \"61cb29a9-2907c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qGkxDRUghR4%2F6Ptphl5ywXzIFoVi6DWBKF1b1Rmfa4YSNavTd2uHQnBIsH%2F3iKBoZK6iuP4pHyIZIS8Ol9KGqX0nQAVIyu3GSZgyxxF%2F7UF7jMY8uZ2UTFYhddHWJnAdzsaQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b8278fbf275ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 168060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168060,"size_decoded":168767,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 15 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto BlackRegularVersion 2.137; 2017Roboto-Blac","md5":"301fe70f8f0f41c236317504ec05f820","sha1":"e28654c12713143bfdd72f8c559c48a19c1cbf18","sha256":"2e33768362fd357e781d01670db1d226dfb484c6f2b769f3b798469ee1f82ad6","sha512":"56460743ccb439dc9d3cdf66f57591377c224b29e98008ee55f97eb9677f05a31fba27d4fc7ab352ca5f71492396583b4408d8bcbaf094a7718e12e00d6e3460","ssdeep":"3072:ID1zjYz01Og87sw7Comqu/xccsqkobOi33XNFRS3eCk1XqmSMOoDRuQKSgPTPgSL:ID1zjYz01Yh7yqu/mcsFobOi33nGk16r","tlshash":"b1f3c301e2469619c987b678bc7d93be4d74e41abc4a711735e4ef310ac8844eca9bfc","first_seen":"2023-05-08T18:17:37Z","last_seen":"2026-10-11T05:37:33.59929Z","times_seen":167,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2026/02/Slot-volatility-chart1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.377Z","timestamp":1791697012377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2026/02/Slot-volatility-chart1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 11 Feb 2026 13:00:59 GMT\r\npriority: u=5,i\r\netag: \"698c7d8b-c8a4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WGO%2BBJoeR38rE5V3KSfklheWeTONIYQ%2Blkr604%2Boz%2FogmyCOFJ141kW3IwOjwWwbaiW7heHwWmBi%2FvZfFR%2FgsXpq4KWwFyDbGPMEeuJqfBqSlDgnB%2Bf%2Bj7IukN0BLX4fnzaM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82775bce75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 51364\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51364,"size_decoded":52062,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ce794335e86de8074bd037e0373512d0","sha1":"df566f2e1cbbc4f0187f5e21e45811133b142cc8","sha256":"62ca873e5a7ffa2475f04f1bf5ca4c6a7e055ecd75e5b1373dc414ae51d30ee8","sha512":"0c4da8b9c8c7bc8d16db0f96d6cbf01dc756dcafbad96510c0ad79f222ee0dbe36b166e3e91bdbe8ef62445cfe8c5160bbbdbf847fe1d6ed2897b930df3e214e","ssdeep":"1536:Lkc1WaedhSDVnUedqK29qmR4B9Hfc97IJdPJD6T5R4:HAaKkDFUOM9qmR8Hfi7Y76q","tlshash":"bc33f2114aa79d7f8a9cfd797500cc951430da8df989a04ef4f396f9e170c4aba4403b","first_seen":"2026-09-10T23:47:10.875605Z","last_seen":"2026-10-11T05:37:33.600792Z","times_seen":2,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2025/10/Human-gambling-behaviour1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.387Z","timestamp":1791697012387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/Human-gambling-behaviour1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 24 Oct 2025 12:03:40 GMT\r\npriority: u=5,i\r\netag: \"68fb6b1c-68b6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=URo0LWXBg%2BvoObPegwaOn6%2FYMEHNHguPNxM5%2FC2Ux%2Bt%2BMU7qCrOS0rmt49v4hJWXnElQwXrtGW4SHD%2BKxEcrBGjH5k9DBFC08TOZCavUldbpJ8oy9QZlIMmrQbhuQyTUDG%2Fm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82776bd575ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26806\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26806,"size_decoded":27502,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8772d3b2c8ea775ada29f35a5f667dd4","sha1":"6d255c13864e4fce08ea3ce3f52eee9b996eeb94","sha256":"f30b72fe671489188a5277f53f2f945bafb1e8288f6469f67e180457ffaf55a0","sha512":"aae2a5ab6ed7e0cc25ba82bb4620273790a2ecf749c5048d529ddb1a0804ee21d9cca15fc324f5332a03def6e49d41a4fe18bb7e1ddc6450c45b9d7610b8c6ed","ssdeep":"768:DOkDmpuJpKbhFrxW59DtviBnlj1kOG2a0aXazH1:DdmUJpghyTDtIlj1kOG8aXazH1","tlshash":"81c2e0661d726122b0a8cf35278385459ffa29ce8f7b82781004b98fc1119eac676f77","first_seen":"2025-12-20T08:55:00.835251Z","last_seen":"2026-10-11T05:37:33.601876Z","times_seen":3,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/themes/248479_payday/image/img-bg.png","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.626Z","timestamp":1791697012626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/themes/248479_payday/image/img-bg.png HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/wp-content/themes/248479_payday/style.css?ver=1730978321\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 28 Dec 2021 15:13:45 GMT\r\npriority: u=4,i\r\netag: \"61cb29a9-7958\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SVluy0y1tbjlyZGqbI6ul40V4dqWFQEqRqtjs%2BpLmQCknp59DoraU2yRshNwo1pK1QPhYHJqRyMXYaIx0stxnMZ30TQqIPsI%2FFiGjMxQDwJ8GmoUqIjEmu24wGABpXgrZlLm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b8278ebee75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31064\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31064,"size_decoded":31749,"mime_type":"image/png","magic":"PNG image data, 243 x 251, 8-bit/color RGBA, non-interlaced","md5":"4021e3adb061b80a7845aeb4883af81c","sha1":"c8ad888c17caba8fee377ac4e5637cfbfb8a148e","sha256":"61b0d4de40978cd90b9acd9262d059ca9a54987726bf4352936e35d6328ee464","sha512":"7304702ce9886aedf4eaebbb2753ce32e5ba7032454ae3879bdc57867d97f7f9474eb2b2a857d55d37c2ad85b1a199806fa38d3391926364664b5d3997183140","ssdeep":"768:icAwG6CvR/knXgIB1JTUUhYFpiaDaohR5:Bg62/IXgYhYFlJR5","tlshash":"a1d2f1777f2b1be79da192846134c7863f317d07ba768a992b05cb0264843c4f936f89","first_seen":"2024-08-19T22:09:07.098343Z","last_seen":"2026-10-11T05:37:33.603087Z","times_seen":4,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.332Z","timestamp":1791697012332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=frAejjLdUolena8z1tzgXOdgSylKFe%2BWzVwlnLdg%2FvemDWwtvCuAN66TBFeqUg%2BrP99pU9Y%2FBjMSy3gp%2BTHgMCy3wWcLY2w%2Bc726ThYo%2BI%2BpXI0sqpVsKYFHYpB%2FXbG51Zv9\"}]}\r\nlast-modified: Fri, 01 Sep 2023 07:22:07 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"64f1911f-3509\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a48b82771bb975ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":5877,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-10-11T07:42:11.972916Z","times_seen":1004027,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/plugins/wp-multilang/flags/es.png","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.354Z","timestamp":1791697012354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/plugins/wp-multilang/flags/es.png HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 16 May 2025 06:24:21 GMT\r\npriority: u=5,i\r\netag: \"6826da15-bc\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LO4BuEu7JZk4Jj6FobgbO8Q%2BEXZN7%2BHXXap29hIInE6lpN8OD%2BR5trIZ6MN52gDddP7Z5eVj6byrlR9RPg3cdXcjjBSqwxrF8yqDFpip7tAo%2BHC4WMnF17qZ%2B%2BkAv7qa74nA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82773bbd75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 188\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188,"size_decoded":877,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced","md5":"479a1d39b9b66c72aa30dd78c88715a7","sha1":"829b0cbcec8c493e73d84c54767335b9831efec4","sha256":"68b9f45b4e615dd0060d1ae96a5f36a8383737e9d8780eed7114b22cf2b2401e","sha512":"5605c5b5aeb6bb43d705f8f7e3a68666eed7665b3c8dee3ce344528b8014e5ea9e52e9c4f395d9be86384fc1c525fcef238aa9097240e1e8840a44562a38205a","ssdeep":"","tlshash":"b5c0229a82e82974c1bc99b667433020d87388292d93122a004a7a192e0a02e25d2b0a","first_seen":"2023-05-23T01:05:46Z","last_seen":"2026-10-11T05:37:33.604682Z","times_seen":330,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2026/09/VGW-New-York-settlement1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.361Z","timestamp":1791697012361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/VGW-New-York-settlement1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 15 Sep 2026 11:13:13 GMT\r\npriority: u=5,i\r\netag: \"6aa92849-11040\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xjHYc%2B1oBp3S%2FjJcO3yYpbHSixR7toezcOPNWESXaUTyuSfmOg9zd%2Fb2JMdvBGtLN0y463PMn%2FGO2bn84iey7DwxwEusZhZInOjVVwJC3CCjI9oyGGojw7VYCjkYJSZuiGQO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82773bc175ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 69696\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69696,"size_decoded":70387,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"810f7359be84915b99c3a3e5decf5d8b","sha1":"968a2eaeeb543f77285eb8613d22c0e8c8432dc6","sha256":"d48eaefd6786a27bfc0b0d8b265e620b53942003b906376a5e8c089aec56faa9","sha512":"9d9b8359583097531f0e601dbe4ea931ab6c61a1f6b35ebd477002a8fce6763b8e17eeb27ce0043d33d3d55e5d5f598c82333dfc1354deabeab8cd19294ead37","ssdeep":"1536:s3/Idec0qurwGy9+NuOA0zodx1Jim3nBXGATWBH:sPa+qurrvwvSoTXBkB","tlshash":"00630250564dbb093c0cec6f3718319d14caace9dc90679c0622ff9645e8d986f763e9","first_seen":"2026-10-11T05:37:33.605203Z","last_seen":"2026-10-11T05:37:33.605203Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2026/07/Large-win-evidence1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.366Z","timestamp":1791697012366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/Large-win-evidence1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 17 Jul 2026 12:28:16 GMT\r\npriority: u=5,i\r\netag: \"6a5a1fe0-88e6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VFJDC680OXVSRGs3X2ed%2FirHQy4XBErIqeD4jsmzFB6UJvyfOUqkYBROrmquBFcUmRmyopmiD6s0XJM9wsT4nUBdnPWv%2FqS8yGa0dB06wabi01Fvbd4Oob5OavLpt5Dg5nOJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82774bc475ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35046\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35046,"size_decoded":35732,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cf4abb4d9347ea7aad20bc3ed7d98d07","sha1":"4a74e101f7b91a209bef94fa61e066dee30afa6f","sha256":"025beb4295fdc4043cf77ebcda765b96d6daea634e3febdb00f6742faa001a16","sha512":"04193e174c67ff29ff2d7e97b57d008f312842b76bb7e0616c4a5a990fa8fddeace2e02770828a003b5aec2f0289a78e33cf8c237b7dc5008d563eaf90c33e08","ssdeep":"768:+K5gjYn5NQEFWmJfJ0LPAfBEc3FZaszUKNegrL37Ocj:+Kjj/8ApEc1pUKNfr3j","tlshash":"07f2e15c10500f5af9d5fe5b9685cb4b8a8808f57f779dc3d2b0389a87c61236927a0f","first_seen":"2026-09-10T23:47:10.903367Z","last_seen":"2026-10-11T05:37:33.606347Z","times_seen":2,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2026/05/Lottery-winner-story1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.370Z","timestamp":1791697012370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2026/05/Lottery-winner-story1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 20 May 2026 09:04:32 GMT\r\npriority: u=5,i\r\netag: \"6a0d7920-96be\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FSPtqhBLBquk0VQ5cf%2FZzSvlTjvVyj8pRSfMpz%2F%2F1iCG4Z0MaZEKDjv5dUWg%2FeB7bNTnjkpRyLPE9JobwZYXVVQHvczk0RkiCH3nzUvZ2YWv63zrRd6IpZrV12MlZ2zpqtZo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82774bc875ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38590\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38590,"size_decoded":39280,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1bf00eeb1a2f385e2ce6cc63c1fa745f","sha1":"a4e48f1543925e1b7d83ca605fc5cfda077c906d","sha256":"1b39bbf392965cd2bebaf00b0f253dbb9a355ffb5262634aec6ad32a2e4c4ce4","sha512":"fc03177d5a31078794a24b9da59edbf12a7632724cd54bc1da42a6a73507ce0391a25f590fcb83069ccef63694240438bb46ee748c2bf54b92f36538f07e82f2","ssdeep":"768:ZeHBJW9keh0+f4pkXcm898fsNvnY1sCLba0U49bON49UMgHcMhnDwK:ZejSCW9sYafe/V4fHcMh7","tlshash":"8903f184c0a694dac42f78afc3bdcdc32979f4c25c900a2b16bd549be7ee0a36f01654","first_seen":"2026-09-10T23:47:10.911197Z","last_seen":"2026-10-11T05:37:33.60744Z","times_seen":2,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/plugins/wp-multilang/assets/styles/main.min.css?ver=2.4.19","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.322Z","timestamp":1791697012322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/plugins/wp-multilang/assets/styles/main.min.css?ver=2.4.19 HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XwQ19C2GQHsdo5yehaDTmVYLv1I0lk5fOkRKinWtMWRTwOFHkjpmFurz2UD4zKtMcoeojNyssn4s7v4UIMA1Fu6Zq7EqdOdOCOTrpa6UEVGYs34oAmRb%2Bza71lzEaiOAZO9L\"}]}\r\nlast-modified: Fri, 16 May 2025 06:24:21 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6826da15-403\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a48b82770bb475ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1027,"size_decoded":996,"mime_type":"text/css","magic":"ASCII text, with very long lines (1027), with no line terminators","md5":"cdf8b3fad65aca8f3b121b3fe646c331","sha1":"f2301bc9b8653cc6d1c2e37a574d47cdd4dc8d00","sha256":"660858324bdaf9fb0a934ef80f069553c82f8f6da41a9dcc13d1d31212540f0a","sha512":"7782ef94a9f3a5ca5276e65f2f4111d0e4143bde5b7e829bb0c05948b2f03e283b1b1b66c3209c9394119c212c65c382aa070f4ff390f5764f8dd1a120608d02","ssdeep":"","tlshash":"c1118b2141b60209e466a3733ade19d70515c1708c289aad773e680ff7fea143e32e5a","first_seen":"2025-01-02T11:49:04.480527Z","last_seen":"2026-10-11T05:37:33.608595Z","times_seen":334,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2026/06/Gambling-risk-analysis1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.369Z","timestamp":1791697012369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2026/06/Gambling-risk-analysis1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 10 Jun 2026 08:33:14 GMT\r\npriority: u=5,i\r\netag: \"6a29214a-93c6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kUXJsXH%2BchsJNmoETISb%2FYiiOkHc%2BJx0B8nZkhROh3cRJeRJ54YLFsnxyuOjmPkcl7YoPHvv8vmhDCnvq0tTU07RHp72%2FgnDDNCpU1paaLslNaL6hYa%2Fd8N5775ZlwV2HoWw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82774bc675ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 37830\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37830,"size_decoded":38522,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f4eba0ba9e5a90cf20ab5828f565b0ce","sha1":"60d5fc68408f219e415cd1a12328ebdf9366edcb","sha256":"2e1a334c80c7bcb898f76cbe482c528ed230409ddc17a078cec101955adae072","sha512":"4124e3795e0d1bdaf6e8d380f809ffae55126f3deb424d99e55cf229046ceaa3f0736284f2322481200e274bdad2a3dabcbb40a8b92070ce71c62d840b37fecb","ssdeep":"768:7W5MqWGrxYWZbOGd7fs2gchEIaE4DxECxPQ/STK333hy2+FAk:7WWOrx1Jp/yIaE4msYKmnx8FAk","tlshash":"0003f12a6d4df7d2921967a6036f5f955a323c0d5f1a061c9f00dbee847392a9ac30fc","first_seen":"2026-09-10T23:47:10.837467Z","last_seen":"2026-10-11T05:37:33.609266Z","times_seen":2,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2025/11/Charity-lottery-event1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.385Z","timestamp":1791697012385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Charity-lottery-event1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 18 Nov 2025 09:40:03 GMT\r\npriority: u=5,i\r\netag: \"691c3ef3-6edc\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z6orrfHzOP3qeL8KUKBBaIIPlOPEzyLv8udSB%2B0yI0PGwuRMTcKA5dFMRj8V6bFCMobmvZnWDpmf8l6h0g93udkoLgy45qmRG0u6IB%2FZgvDGo1hAC9NBtwIlZ6bEX%2F%2FdS9sv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82776bd475ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28380\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28380,"size_decoded":29070,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"30b9d415bdae9e7c920a191fd476be2a","sha1":"39a596284ce654e27f9e7de42b0e6dbdb3fbb6f7","sha256":"dc5ecfa9e1a069a6ced5d2e96ec525b99b2f12ec5a5ad7174747c9536b7396bf","sha512":"f46168481053938e8777d508bf4221f0a3927255cafd78b43ade9d0e14714f02532191730cd56ddfeb000b4b3e7d90f4ec0e463b3064f3d9bfbd531559bcc27c","ssdeep":"768:IGIdPJYXHm96mFENfCXlppdD0xTg3W0v/u:6xYXG9ZFz/r2Tg3tvW","tlshash":"2ed2e05d08f9d248366882a0d347622cdf18330278e835557f0b92798abde31f95df63","first_seen":"2025-12-20T08:55:00.84039Z","last_seen":"2026-10-11T05:37:33.610435Z","times_seen":3,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2023/09/Sponsors-in-Esports.jpg","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.365Z","timestamp":1791697012365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/Sponsors-in-Esports.jpg HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 28 Sep 2023 09:12:13 GMT\r\npriority: u=5,i\r\netag: \"6515436d-865e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3kC0tm%2BKqcPpFAEDAgvmmxdaSpTj6wo3uqDH1%2FvbJvlQ%2BWHm6ltovNfhnhIqmKfe8iMSo6SzYcSHnX2ZBjMq5SboKm1tgvRWKBujn5pz%2F54iP1w9aJZcIF4ZfhLwj4Jcsznb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82774bc375ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34398\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34398,"size_decoded":35088,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"5b9045835cd802b4f59f25a9cd88bbdb","sha1":"b553c3a2e9d014c6e414b845a9809a681c7e19f8","sha256":"ef7f216da478039928b182ff0d01ae397711ad12ac5aaffe390b1b0cf720ab79","sha512":"1a788974a35548863d420c05d5daf0251d19a5493adcc0026dda2153c9b469ad01952cb68ff95fdb4b923fcc600c7b6ef050af76c31e4d4f4f0682346661eee3","ssdeep":"768:1mMQnW1OIH5BaJZCXZ6AnyxfLdu5QAReBEZ4m40x+7cAX:IXIHy26zhRUxReKZI0xW","tlshash":"24f2f18fdeb55c02f5f386af93f198267b562f7669cc73833ac84642664a1e10071f06","first_seen":"2024-08-19T22:09:07.085823Z","last_seen":"2026-10-11T05:37:33.611755Z","times_seen":3,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2025/09/Celebrating-lottery-win1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.390Z","timestamp":1791697012390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Celebrating-lottery-win1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 15 Sep 2025 14:23:17 GMT\r\npriority: u=5,i\r\netag: \"68c82155-8a94\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HchyPEAoqObFrlpCDWriqv1Tsn2LbDGQpVq5tvxWImj39jgWpOBrBqnweL80%2FGgDPiCAasRHw5w35xn%2BhaziRJC5QVd2hTpj06yE8ypM3McHYTnlK70YdGu4jsXS1ee4jO3v\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82776bd775ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35476\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35476,"size_decoded":36162,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2456e35925596f6db0a224954c6221c8","sha1":"cd3973e937f3404bf11714abbc5c725d8578f68b","sha256":"63cd95d072d9288127ecff6ba2639ab026a726d9ce571fe3f8d9d59261978998","sha512":"11ed050dc439e0d747269b539dbdeb88b887d222d2479905ec91526acf927427a503658c6eb19ef51eae78e2704c85f2035c49485e72d00862d547ce695b88e0","ssdeep":"768:uKQ6Mw1JxFAVOuhFRw9ZXxWdbDOiF7D6v0wgShxHrl/sUsyC0fefQHZqS/ELoENc:7ZuvRw9maQn6cw/H5sUssgIjuq","tlshash":"2df2f1f4779bec9ffd4a738b5da4a35291917cc024f0156722b6d03b6a381aead20931","first_seen":"2025-12-20T08:55:00.861145Z","last_seen":"2026-10-11T05:37:33.613213Z","times_seen":3,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.327Z","timestamp":1791697012327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ixySVkC0%2FUHNT0DCmNvwTI8SvX%2BKd6Ru9qhFYHYSVpCuFncKcuSICi5RrUYLZxS%2BLib2vrrzzMcASrMbvOkzM14KvCQ9vR%2FtE4EFn3Bjt1IwOrjoTQfwlKis9MceaOJPh8Y\"}]}\r\nlast-modified: Fri, 01 Dec 2023 16:22:49 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"656a0859-15601\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a48b82770bb675ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":33216,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-10-11T07:42:12.053066Z","times_seen":1099774,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2026/01/Multiplier-win-screen1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.381Z","timestamp":1791697012381,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Multiplier-win-screen1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 02 Jan 2026 07:15:45 GMT\r\npriority: u=5,i\r\netag: \"695770a1-117aa\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lw7L0IVp%2Fj54fKz%2BCC08QoF5jhPMY6xWuRuhwExwrnn9RfrW2ml3O%2BNTylNy8y4LWJLkfHCaAu%2BhVhj4tU6UVMTki9HsGfHgSQGH38ClrsnvG77iimNiCkfi3CYGbIeseZqv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82776bd075ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 71594\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71594,"size_decoded":72285,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"305d68cf8f4b4b81a364788a2c629695","sha1":"f90495e140e7e473c751dbb598646d25bc059785","sha256":"1301c8e9b5f55dd41b491b78bc53ee701695448a800bb35711879575438f5dfa","sha512":"1185720a786e2d725fb44b155269ed7be08684de3a9b7292b89c3e3c85c04efcf91ac61c340811202fce41fb597059f59e3faddb439a5cce1718177169a5d655","ssdeep":"1536:90KOzaUfdnRN0Ekd8TGC8pERGyV1qlP0TRFRiCV/rYFGvm2FQki9x+tGyoUr:9X3UVP0Eo8TBG414P6FXVjYFWm5/+F7","tlshash":"9b6313614932f83316fef93d5a718b6013e6578abfca6815b65f5e80240a7321cff901","first_seen":"2026-09-10T23:47:10.877583Z","last_seen":"2026-10-11T05:37:33.615323Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2025/10/5-bet-victory1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.388Z","timestamp":1791697012388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/5-bet-victory1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Oct 2025 07:35:11 GMT\r\npriority: u=5,i\r\netag: \"68de2b2f-7eb2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i0YGNlPK4S%2BjV%2FlOfge%2FeZH3yJEcNk98hlrKeBp9vXq%2FeYdb10srjy19P224lvFbvpvPT46YVMZO%2FNQcyaTWqnUvuexFEXK8N7kaG5pcpsWGWM9DYoJKRktRZyYZY3%2Fy2l%2FI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82776bd675ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32434\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32434,"size_decoded":33130,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3b5f767eb3349cda6561b91279b6a1e7","sha1":"482aa6d02e7c1664237f1547a6954e90e2ba405d","sha256":"0b1d9613957b6e21d375bbe1316f9f605ee376f03f8c1e550ff5c87b3719ae2a","sha512":"57285ae75d3b8289fc60c8b0513ae9210bbb864df9ee04e9fa06e213e4b86a202b03f6f8587f9f3ec36a79f196c27cd6b4e529cf479dca74ad415c8026b8317b","ssdeep":"768:FZw/hqB2xRI5qJqrF24dS03I+59Nf08xElX5p:FZw/hqMPE+0Y+59Nc8ab","tlshash":"56e2f1ea9c908f9cb48afd76084286751eb900132b9d234f1399475bf00e6eead3d5c1","first_seen":"2025-12-20T08:55:00.868809Z","last_seen":"2026-10-11T05:37:33.616535Z","times_seen":3,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T05:36:50.562Z","timestamp":1791697010562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2BYS3DdNb90BVXa44VvdhP0wi1lowGl523XPBcarS7a3B%2BURW9rJeJiJvMQjh%2Fh0tNA%2FIKYjMgncXj99ngWAoNf2zyOjkBwlmuD0qHZ6X%2Fp98Hp8pO8znVTT4xAhXUNq1URh\"}]}\r\npriority: u=0,i\r\nx-powered-by: PHP/8.3.0alpha2\r\nset-cookie: language=en; expires=Mon, 11 Oct 2027 05:36:51 GMT; Max-Age=31536000; path=/\r\nlink: \u003chttps://dhidedesigns.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://dhidedesigns.com/wp-json/wp/v2/pages/494\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://dhidedesigns.com/\u003e; rel=shortlink\r\nserver-timing: wp-before-template;dur=839.2, cfExtPri\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b826cdb3475ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en","quoted":false,"path":"/","expires":"2027-10-11T05:36:51Z","raw_expires":"Mon, 11 Oct 2027 05:36:51 GMT","max_age":31536000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"language=en; expires=Mon, 11 Oct 2027 05:36:51 GMT; Max-Age=31536000; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"All in One SEO:4.8.2","description":"All in One SEO optimizes a WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.0","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Image Placeholders:1.2.0","description":"Performance plugin from the WordPress Performance Team, which determines and stores the dominant color for newly uploaded images in the media library, then uses that as a placeholder background during front end image loads.","website":"https://wordpress.org/plugins/dominant-color-images/","common_platform_enumeration":"","icon":"dominant-color-images.svg","categories":["WordPress plugins","Performance"]},{"name":"Modern Image Formats:2.5.1","description":"Performance plugin from the WordPress Performance Team, which adds support for outputting images in WebP or AVIF format and supports the `picture` element to enable format fallbacks.","website":"https://wordpress.org/plugins/webp-uploads/","common_platform_enumeration":"","icon":"modern-image-formats.svg","categories":["WordPress plugins","Performance"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Performance Lab:3.9.0","description":"Performance plugin from the WordPress Performance Team, which is a collection of standalone performance modules.","website":"https://wordpress.org/plugins/performance-lab/","common_platform_enumeration":"","icon":"Performance Lab.svg","categories":["WordPress plugins","Performance"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"All in One SEO Pack:4.8.2","description":"All in One SEO plugin optimizes WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.8.11","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":84811,"size_decoded":16357,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9089)","md5":"fb3011fbb95a5ed7b99013767b8de817","sha1":"ade1cec80390a0eb804fa8f431fb082222d5f53f","sha256":"3aa988995abb0a813841f0d1aa9a7218e53450ed534b95533e1d65cca0e036c5","sha512":"b3aaa1b218105c97f9b203467fe4dc367ce6027f5529bfba975e0293e470855ae4ef96821a2158c76fe1125b0f8324cfd6841b172e61e1eb816d4aedc2f5ce94","ssdeep":"768:kuOEWf0aZdaphhiaC9qc0+52WaSlUR53TFMe3Wc:n0apPYgWRUb3N33","tlshash":"e883b73390e51577a3b7d2c4a324750dea5aa117cb4a87d0b6bc82cc5fc6ee6467328c","first_seen":"2026-10-11T05:37:33.618116Z","last_seen":"2026-10-11T05:37:33.618116Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1421,"timings":{"blocked":-1,"dns":41,"connect":24,"send":0,"wait":1355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-includes/css/dist/block-library/style.min.css?ver=6.8.11","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.320Z","timestamp":1791697012320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.11 HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QE9BenIoLVNk%2Fd66sGs%2FONiPCYTdYbv96NDtEQ9kw0IXghlBE1GhLP6s7mnxK70BR%2BV7aHNuiZ3OYM5hJlF%2Fig7JNGtWpeRar2lrIqYusLoH6DmDtgCH%2BGWz%2BL1HKGvOz%2BAz\"}]}\r\nlast-modified: Wed, 16 Jul 2025 02:51:00 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68771394-1c679\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a48b82770bb275ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116345,"size_decoded":17833,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-10-11T07:34:14.407877Z","times_seen":180897,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2022/12/poker-players-lives.jpg","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.336Z","timestamp":1791697012336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2022/12/poker-players-lives.jpg HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 21 Dec 2022 15:23:55 GMT\r\npriority: u=3,i\r\netag: \"63a3250b-9007\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PUdLnYESu%2BYncWptPuUzQkGstFliDU4UiC%2B0zBpW1PFTe%2BU8PWyhbqNf%2BXqI602r7cG2hHztPb9dC9poJ98JE2CStAgqFXQdvKellgmo%2BMdFyHNoLm14XEpGhrZyBCmziXDt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82771bba75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36871\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36871,"size_decoded":37563,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"f8e0c206e8ec8804633a5954b9660e8c","sha1":"aaa6a2939e4252e80915e92f9d6a4b78556869bd","sha256":"bb9fd2595ecafb8f201c1c818b488c80715ac8ed9bd9a3df34396e358b0005fd","sha512":"cd53b008d1eebd08b40098fb2e3cd3d8a7e522b1394c74875f5518845de4faa19404cffe969aa18819e9314f61030f23c45734a5463e2b8c346f27f34d0d65fe","ssdeep":"768:5V2Uk6nzAto3q8uMEIOITMO2q1rU0xfAy5R8E98+N/kk8ZaX1:5VgUzAtWqrIOIIl8FxfAiRrbpkkv1","tlshash":"49f2e18edc5920f7ca4f7a7b3c26eb889da6474e177e9d8743ba55a04189bcccc80425","first_seen":"2024-08-19T22:09:07.089758Z","last_seen":"2026-10-11T05:37:33.619828Z","times_seen":2,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/plugins/wp-multilang/flags/gb.png","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.350Z","timestamp":1791697012350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/plugins/wp-multilang/flags/gb.png HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 16 May 2025 06:24:21 GMT\r\npriority: u=5,i\r\netag: \"6826da15-14b\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jsZPQ5vjbExfF3Pr8oUWYUWFaDtWK4BTWRKuNG2lc%2FM3QToO40m5a2m4b9JPaD%2BujW5tdnTt48n8u68xA86l5ePTPaDAivPJKI5Bjao9coX4Gidc3Iao95vmXka2c4oH%2B85F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82772bbb75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 331\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331,"size_decoded":1015,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 8-bit colormap, non-interlaced","md5":"6b5af3fa74254f45002a29848259fa70","sha1":"300872fcfbef37ecb7cd5644264e2306a37b62d8","sha256":"b572bfb254e10dabaf48f6436ff147299d8bcc2ebec93102505638f470ab44a6","sha512":"1efe264faf5ea7d30864b6a69ba5f7f655f1c973b71086c3cfc3d2f0e193d0b8d8c4d3682ee5b41b31ba3d031ce01759f9bcb5038e3a616b4f845d1cf489f321","ssdeep":"","tlshash":"74e07dc56180af99fae6023331e50055592eb225e159e3df7b6182b7cd5226cd38ebc3","first_seen":"2023-07-17T19:28:32Z","last_seen":"2026-10-11T07:07:49.800687Z","times_seen":261,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/plugins/wp-multilang/flags/it.png","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.358Z","timestamp":1791697012358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/plugins/wp-multilang/flags/it.png HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 16 May 2025 06:24:21 GMT\r\npriority: u=5,i\r\netag: \"6826da15-8e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NSfWFkA9yx0w%2BEYJMM7NXRUkoUHfuU9p6W%2BXr0I55sx0mtKKkHAZrurAufkQqxh5RH4ycYNFTcu3TRxdHYo4JR76r%2B4VEiByzdhwzc9iiyfmgZ9EI6pUpXT4nk7HVAlUVmb8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82773bbf75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 142\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142,"size_decoded":825,"mime_type":"image/png","magic":"PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced","md5":"5c72df4901f503800b925e7ae64df865","sha1":"0b6a45650114e9f073dc2304412dcb48eb550236","sha256":"3bed2c77b2bcb0b46500e6bf3edd44f3e48175f356a89a6f1f8778368f105c0f","sha512":"a6f878dbe566213da1965f4fcdb6d66f5e17aabb6d2d9f0c01b283f25040f2e2370723a32781633d026fe870e18a87b8a69caea84ba6ab2fd1060f0d4d01dd81","ssdeep":"","tlshash":"b5c02b91b28fcfb8c0db236730200038d0370730aa9111dd061cc0353682f4b0c9af0a","first_seen":"2023-08-25T12:13:20Z","last_seen":"2026-10-11T05:37:33.622126Z","times_seen":44,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2025/12/casino-jackpot-money1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.383Z","timestamp":1791697012383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/casino-jackpot-money1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 12 Dec 2025 15:09:23 GMT\r\npriority: u=5,i\r\netag: \"693c3023-bd12\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DUiZ%2F2haU2lA9Tdw%2Bo9S1DdIEwE2fbPbREY%2BV0aAqECtBWcq4OouRqk3C5NR0dCNJsqs2QxV7DBe7uIotdMyTdT5Xqh1x%2FzoNUfOKVpiNhmobLfiOWKdPN%2FKrjn%2Bhngc8jFq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82776bd275ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48402\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48402,"size_decoded":49096,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"37173736da3ad679a4bebf0732adf618","sha1":"882b920197232cc515cb657cd6a947f0d4657f7a","sha256":"0df3822e0d90c54caaea5606547cbad32326c196caa3e2660a762a86c33d981d","sha512":"7b13488a6ead846ced2d9aa213bbe81a3804525eaf45fefc7ef1a36e259e3b719fe5b081e4cdc323723d0dce0ba8ed4f3adfba466add4d04c478984da1497ca3","ssdeep":"768:EAHYt7u/UOzJd9x12CBtLVfC4esMKloCSIEd/Vushnqoxeq84KELjnQCVzVQ7naO:EA4t4tu0twsPDSI2d1fs+pQCzVQ7aSdN","tlshash":"ef230255dcce61266b41a2246fa10260f98304fe25b739ceb6ebbc47dd8095dcc1c767","first_seen":"2025-12-20T08:55:00.833651Z","last_seen":"2026-10-11T05:37:33.623255Z","times_seen":3,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2026/08/Jackpot-Drop-error1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.363Z","timestamp":1791697012363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2026/08/Jackpot-Drop-error1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 13 Aug 2026 12:33:18 GMT\r\npriority: u=5,i\r\netag: \"6a7db98e-efea\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nEEZK1tEnmww6qCBbtAwkYAe2oht1of3MDV2Vu%2FgEmmTiIMmHaJtNiMqIgT75y2uX0K9FWpS7t7drixpmGrtixPjrNijT7wmr8C2SWF%2BAeJc%2BZ3Ni8lSiPUXoYNS8f%2Be2pM2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82774bc275ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 61418\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61418,"size_decoded":62108,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fdcd2d1645352da4b97b60fe1d854272","sha1":"b817304ba2c6a140e5f472ab28a53bbe49293950","sha256":"4e414b5578abbc5c3e5a549cf886a327108b1f5a43df2f740b0069da4f6cd9f6","sha512":"f6e1e4f3500fd4cdd59e05bbe48e3b87d87c41c0be464d9ffcda0ece47663986d92bde1eb53a8a80877913f31325ed7425cc966f78eba98bcfa0502a0ecfaa7d","ssdeep":"1536:1pZ9E7y/ZbeIpiChaMJhdxTsJjQJNxvNpxfzhHOFzlW+hUY4:1pZr/Zbeo3JhdKQJNxvNpxfzJONU5","tlshash":"e1530138ea878db050e6a730f03708aa9227dadd30878f078d61d6f24456f7a1571b22","first_seen":"2026-09-10T23:47:10.860128Z","last_seen":"2026-10-11T05:37:33.624806Z","times_seen":2,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2026/04/winning-ticket-moment1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.372Z","timestamp":1791697012372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/winning-ticket-moment1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 24 Apr 2026 13:07:23 GMT\r\npriority: u=5,i\r\netag: \"69eb6b0b-d626\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jPMMx0Sbcg0JaG0FivgWkv%2F7ep6ZBmz82arzgihXrtzaeptBRvEcNPYE9yMHiOZzIbXDRizpp%2F1heHtfFDPiPTCvCt4NerIiPmCUz9H%2FPBICTzB7%2BrZUOKd188AXGcd89AJ7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82775bca75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 54822\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54822,"size_decoded":55512,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0cf045286cf1a8b61f6d731a1bd84ae6","sha1":"b902dde820a6773d23cad03838bca52a8b3c0c35","sha256":"3af2873c1d10aaa1a1e12ef7d3d1eda2b63e99b65fd276aa9344b86f1ec44b57","sha512":"28c63be3e202c6e895c6dacde33fd42bdbdc48f7b1e63be1fbcdfbd0ce8bf2a2bc0d388a8d5833622a4e193c6a8b169f654adb8611e73a8eba1b86780dc975a1","ssdeep":"768:bYY3Mev2YX2Y3fVXVetJJNOi8R63ae18l3gV2wmPxkjSNtcDOytksxirJN1IITDy:bV3WYB3rkfNbHsdwmPXXca+Fxi1IIBBq","tlshash":"9d3302f48cbca244d63df8d014a57e86936ec5985178c6d68a1df9c026fe2b6cf017ca","first_seen":"2026-09-10T23:47:10.929807Z","last_seen":"2026-10-11T05:37:33.630139Z","times_seen":2,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2026/07/Million-pound-slot-win1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.367Z","timestamp":1791697012367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/Million-pound-slot-win1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 14 Jul 2026 06:28:44 GMT\r\npriority: u=5,i\r\netag: \"6a55d71c-1135c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7C05gp5EVvYlaHQ4f4zZYbo%2BPgujm7utqWgdVtrg1SM90UzHIUheaxI25SUNZj2pe%2BCR2%2FF74oJak%2FC%2FwYNj2dPjGamh6UClDAlcshjquxBbWTIU0ybC7VdM4wcu0phcqPJc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82774bc575ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 70492\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70492,"size_decoded":71185,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x338, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f5f3c1b805ed56488330ed12c6566985","sha1":"5b4a1b23d30dc9be08aea5765be7a24094e1879f","sha256":"acd6762fca17016075a565814362d18f59cef0ecd6789c7728a0af554fa87400","sha512":"6f58c3b961a1c15e86611eb3d20f19aa8ed953a2fe84e035658f758cbf08537c252517e7a30394283fd96df96a83dd11427c3d3d58f11b111afdc5cfd2099ca2","ssdeep":"1536:ZaulLAw5nT0TRbeT9QfhzKNCAQew+rvvcu5lVikMieV/A:ZNT41exQflACH+7hVay","tlshash":"5f63125812eb24e76cbd94ed11aa23fd607f57ca283d4991e120785953dba2f0f3a2c1","first_seen":"2026-09-10T23:47:10.846509Z","last_seen":"2026-10-11T05:37:33.631213Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2025/09/Social-effects-wealth1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.391Z","timestamp":1791697012391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/Social-effects-wealth1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 09 Sep 2025 07:15:05 GMT\r\npriority: u=5,i\r\netag: \"68bfd3f9-95a0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9OY1JaATaiKtJlUnONRBKNRee845gscaV6xXRXU%2B2mNHGP6m8Nv58nvpslear835J4GmcR2gX7dI0qG5Tc47Whd%2BmGVZA36L0eIGXEWQPOnNDznLr7xniEvP1wA3t8TiwP15\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82777bd875ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38304\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38304,"size_decoded":38990,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7662fa231241f4a0fe620d016e664a82","sha1":"d52710017bcccc7ce830dffdbe95d7ad22279659","sha256":"4fd2c239a371ab6e3599108231d248a966757f0a58c0abf0e3f3e27fa138f66b","sha512":"eb625e312ab43b9fcb131b0b61c19f10157d8ec316cbc6a1dbafb2cb01eeef174bbe2d4d72de0d9b833c7e47fbd490c0b66f9cb0142043dff6ddd856fe95e79e","ssdeep":"768:Sm4cvnsBdmufMjPReEKJcffGKsQy225CapQfl8kSQfo8+Lv:SYp5jJFvlyf5Ca6fjwL","tlshash":"d0030167e528f9f70eb34939377190a0aac3e31623eed0690dcaead40f6d7941125347","first_seen":"2025-12-20T08:55:00.841932Z","last_seen":"2026-10-11T05:37:33.632286Z","times_seen":3,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2025/05/Gaming-and-slot-fusion2.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.401Z","timestamp":1791697012401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/Gaming-and-slot-fusion2.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 16 May 2025 12:56:29 GMT\r\npriority: u=5,i\r\netag: \"682735fd-9a36\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3y%2BjNJgXktnTdDssNhfwc4ViXDy91HhPXGjVSJX06F3zwzWbvlHFBBKG6TDdTsDzzK%2BNVdGlUTBQJs9bHrjf1wQ2BeKVgL1dCWpnVgk5DBoiRDGHXAL7cNkGN0B5%2B2EGZwSv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82777bdf75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 39478\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39478,"size_decoded":40166,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cad2b211056bdea51446e9140f1914fb","sha1":"25de8a7f0bd2e54ca266b1b6ed95d95bc201690b","sha256":"9c7fd67ec1fc33dcfd6d1803f2462aa066abe5aec4fe4e8a228052f4290b06d4","sha512":"ec5a55e46d6c16d4f1ab1bce84a75106f59efec84c8edb60958943b3920772fbc96f72d2de9dbb9fb0bfbce73bf4848edde2854bccf59f0094f7ecbe96b6403c","ssdeep":"768:LHjODbpEIUgsuAKcRl5KIROCblNnYdpwx7Pqw/gqs1iCFWcEV:GHQgsuAL3OCbepwx7T23FWJV","tlshash":"1e03f1d6412d83b930961467de83701b90398ff7185c040b9f66abd0e95a358e6fe3ee","first_seen":"2025-12-20T08:55:00.843219Z","last_seen":"2026-10-11T05:37:33.633388Z","times_seen":3,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2021/12/favicon.ico","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.866Z","timestamp":1791697012866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2021/12/favicon.ico HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mIi4SzGv9IjYCkniYvWuNfr6KrcZlmi3jCUjxbpbNNBOnX9AZFHAvxmzGjbI2b8MBfTU8Oj3Op7lLzKF1TDz21iiHjIMCvC%2Bw1Dm5v3w4ti2XaLZa5uFKPlCw9mqRzNTYHTG\"}]}\r\nlast-modified: Thu, 30 Dec 2021 13:22:26 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"61cdb292-25be\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a48b827a6c0b75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9662,"size_decoded":4733,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"aac983bf53d6b2272e2cbc6985fc2684","sha1":"20cfbe035d57828df8b99d7272a4a920ce036291","sha256":"123d76421b963ced666be73e3d59e517f4daa2b3d7cbdc5b11dbd861b8350e88","sha512":"6fbd7d82318f6320ed2a5bdc3c00b0effdbd3255c553ef7d16cfbaa39a74dac1f01f8c4847d89d029e22c37cf2430301374f2da5fdc293ac25d62e8fcba6206b","ssdeep":"192:mR4R4AX4EXmAXAX4AlAAG4IAX4AbAI424AX4uXXmAXXAX4Ay4AA4AX8AX4Aa4AAK:C4R4AX4EXmAXAX4AlAAG4IAX4AbAI42V","tlshash":"0d120bd982d917bac866d0b49e999cc2774b7a9b91321acd6e4fd01fd02707b2037077","first_seen":"2024-08-19T22:09:07.103408Z","last_seen":"2026-10-11T05:37:33.634457Z","times_seen":11,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/themes/248479_payday/fonts/Roboto-Bold.ttf","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.632Z","timestamp":1791697012632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/themes/248479_payday/fonts/Roboto-Bold.ttf HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/wp-content/themes/248479_payday/style.css?ver=1730978321\r\nCookie: language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 28 Dec 2021 15:13:45 GMT\r\npriority: u=3,i=?0\r\netag: \"61cb29a9-28da8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VaqLXymthVwgkHZWj2cypbM6VLDoHjVn9QDBlVwtf0h%2Fa6GjmBrrDA6gb1%2FPs%2BaiBo6zVuI3Rb3OW3mSNjX3yNBjEwDpKktScZvZFjtLcwaingGhiSrkvr%2FAP849tUGCNavY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b8278fbf175ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 167336\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167336,"size_decoded":168045,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoBoldRoboto BoldVersion 2.137; 2017Roboto-Bo","md5":"9ece5b48963bbc96309220952cda38aa","sha1":"013f1bbcbbd80991a5f00fca52a90d0d7ab8b81f","sha256":"baf44ce81636cc927fc27768437e5da853bac699e8aaf832d042f0dfed29b4b4","sha512":"27cd828065c07d4aa4e803b7cdfc26f6b9d0091c3f9e8d705b0c6681953afe03acf730ae444f5f680a5dd0260ea2d9ea01ec529df0e3d5086a764da8ee7cd929","ssdeep":"3072:wBa9dX3CyiSB1/R7O0aXjC1YHeA9bOuPUPT9mYZK9K4N09P14X4HXYXXXXXXLHh3:nX6XiuMPT/eKhcmSTyXI","tlshash":"e9f3f601e2479729cac6b2787c3cd3be1970e029bc6b611735e4af3159c8945ec69bbc","first_seen":"2023-04-05T15:50:05Z","last_seen":"2026-10-11T05:37:33.635571Z","times_seen":1371,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.11","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.646Z","timestamp":1791697012646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.11 HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2B1Uts3ku8axCJLoWhqMN1689CQOoKB3tUTUa4mgc5AkDaU%2FofR0HgMdqYdR%2BNesMpHHhoZDmZA408chbfsjR1TDN3AhMwYsU4MBBAJGRPgD8HHk0I7Vjw1%2FMTRVNFQDMGja\"}]}\r\nlast-modified: Wed, 16 Jul 2025 02:51:00 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"68771394-4b33\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a48b82790bf775ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19251,"size_decoded":6085,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-10-11T07:34:14.780347Z","times_seen":215367,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2021/12/favicon.ico","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.867Z","timestamp":1791697012867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2021/12/favicon.ico HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tTj7g5MA%2BdmzUGCY3T70Y%2Fb0GcAR0CujLauYDz1OICViXsx%2FOD5yGe4qGsBWb7r2J8q0Qx9Hnpd7iNHc1ZM5BTgmcORYulE13vGlN0LXzL11%2Bd1vVZVjmgz5MHalds%2BjCbXk\"}]}\r\nlast-modified: Thu, 30 Dec 2021 13:22:26 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"61cdb292-25be\"\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a48b827a6c0c75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9662,"size_decoded":4751,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"aac983bf53d6b2272e2cbc6985fc2684","sha1":"20cfbe035d57828df8b99d7272a4a920ce036291","sha256":"123d76421b963ced666be73e3d59e517f4daa2b3d7cbdc5b11dbd861b8350e88","sha512":"6fbd7d82318f6320ed2a5bdc3c00b0effdbd3255c553ef7d16cfbaa39a74dac1f01f8c4847d89d029e22c37cf2430301374f2da5fdc293ac25d62e8fcba6206b","ssdeep":"192:mR4R4AX4EXmAXAX4AlAAG4IAX4AbAI424AX4uXXmAXXAX4Ay4AA4AX8AX4Aa4AAK:C4R4AX4EXmAXAX4AlAAG4IAX4AbAI42V","tlshash":"0d120bd982d917bac866d0b49e999cc2774b7a9b91321acd6e4fd01fd02707b2037077","first_seen":"2024-08-19T22:09:07.103408Z","last_seen":"2026-10-11T05:37:33.634457Z","times_seen":11,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/themes/248479_payday/image/logo.png","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.359Z","timestamp":1791697012359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/themes/248479_payday/image/logo.png HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 28 Dec 2021 15:13:45 GMT\r\npriority: u=5,i\r\netag: \"61cb29a9-db\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WFxG6P9XJXCWRyaKZa7hH40vqoBkOyhWUD%2BOdRD8u%2BRG70Q9U%2FivBlFyq2zIlf1CSirIEwX6b94NyX%2FC80zwFhB9nO7%2FOtPMToTkimQSWUDThSJE4KOxqMln2qMjIoY3xfvA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82773bc075ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 219\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":906,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"e33f1d2f633bd4a46527d54c860d51d2","sha1":"6c57f3b66a4c09d43ac458ac69686a220e986e7d","sha256":"250b53c16231f27ade469c2181ac5d117e37b85405236d7f6d2663c8b580803b","sha512":"1c9bdc6d1262b484cefcdcb35fe5a34d4ec617402c092ece5d424d938d20a30182c3d682802eef351f90e6fadffb70b96d502c409975826a10e7dfd94fc0cb15","ssdeep":"","tlshash":"ced097b34761eeccc602a2a392330bbae411200ac088a98e924ae4358101100c14a81b","first_seen":"2024-08-19T22:09:07.066674Z","last_seen":"2026-10-11T05:37:33.637166Z","times_seen":11,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2026/04/risk-control-dashboard1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.373Z","timestamp":1791697012373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2026/04/risk-control-dashboard1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 08 Apr 2026 07:57:14 GMT\r\npriority: u=5,i\r\netag: \"69d60a5a-c434\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VMJvKieHYhwUSpmXUSiFq0jNIKrONxPMYgXfmYAb0PpgpNan79BSJ63GO8u3hBVIHG12G2slA0UcGe5XvGjSLl3oMTxAivnnjWc8b%2BAWejjHkSu10Oj9%2FsRIQLBGjfYw4dAy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82775bcb75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50228\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50228,"size_decoded":50914,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9edfa1f70179ac9322aefd95eecc66a1","sha1":"4d41d1d76d4cbb3d5fd3e10b60328d217be700be","sha256":"3e6df658682c866e4eb7e9ac9d3189c6b429c36728f2e41c8e06f129711e5e81","sha512":"9c3f64a21ce001e437fc22395fded69be9dae6b8a7838230b1eff2f5e1b150d4897e45ab41048029e483e90d49ec735d207417e6de95b0df984fce1cb41959c3","ssdeep":"768:go68JFHeQFGofyA2kDNleQZsLopvrGyBD7b6aGPI5QIpyYrYIkYKEFN1fj+6KP:5QwGof17xA7LopvDD67w5hyY7FfKNP","tlshash":"f433024e951afcf3d36a31a52070c7aedb5779ae44a01f3c8d4e4abe1dc405421a0eaf","first_seen":"2026-09-10T23:47:10.912377Z","last_seen":"2026-10-11T05:37:33.638698Z","times_seen":2,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2026/03/controlled-gaming-session1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.374Z","timestamp":1791697012374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/controlled-gaming-session1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 20 Mar 2026 08:41:35 GMT\r\npriority: u=5,i\r\netag: \"69bd083f-ae2e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tCtxs01FVVfZ2fSXzAHYlr%2Fm713h3pBcNg5mNVu1a34IkZjfhIRhs3E0ijy7sOPqOzVaLzW7882DXi9ifToW%2BAWBi8gXLL2HD8fZPqkX%2F4uJneKFVeZrQbahPNlhTmzDXWvC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82775bcc75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44590\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44590,"size_decoded":45278,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3e102b988be485d52c79e4da2fba11c6","sha1":"8c78515c403497239f3700f3406c831bb59ba52a","sha256":"f9e725811eb70585621be2ba2e5a5c7a10dc51875afa68c6f52a9388a802ba11","sha512":"a63fa8eef42ea9d2d959d085055fb086d57af6b12a67a521ed9eb653bbabffd352d3105cc7e782967288a68699b6ef6f8c9bfbd9593c5b5b5656df75b0cb63da","ssdeep":"768:mbv6ZI7rgEWZ/SznKgiTaqm/AxaRGrTq60fI/v80bfpSpxrMxEr+TPUS5qZ0yEXP:EQUWyKgok/QL+wdbhmQU+jyEXPekTLdh","tlshash":"6c13f1d7a0bb6fd588858d80edbaac9d9017d43dac11218ff3c644ba34ed3875a30667","first_seen":"2026-09-10T23:47:10.838744Z","last_seen":"2026-10-11T05:37:33.639853Z","times_seen":2,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2026/03/Casino-prize-document1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.376Z","timestamp":1791697012376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/Casino-prize-document1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 03 Mar 2026 10:04:14 GMT\r\npriority: u=5,i\r\netag: \"69a6b21e-c310\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=srx3E7OUiD22q8c7Oz%2FlEb8SB0Or7YwHatQaPjrtVr9gMWzqPOpIDxBu7EownssUGRggN4XM0k%2BJJZheq5OqArqczPu0sN8GSrm312QsceHTueG9cAUyYYAZOhH3cj35zzIC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82775bcd75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49936\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49936,"size_decoded":50622,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8e5a00286034701ba97b9990d87f1dc9","sha1":"fd63788bc75c6751f7c965e7e0bfc41026246b05","sha256":"41b4d5c8e9af269456242ce6f724f4eef7bbfa9f32e59331e03bd33cfbaca2eb","sha512":"fb8745a9e680d23e19d9bdc747038e330b2cae72bf9159eebbaa1909f7e53a864241b2a5cb64d28339c14b0c9e0d0df160cff3e3a8ae910b229655eec81877b9","ssdeep":"1536:goxsod04E8J+EymctYhhaWJuVMa516oTXMo:gqGvPmcahhaWUVptTn","tlshash":"4e23e1be1576b000b0f5f2caf6682aaec311e25f82e5541bd410fbce9647af1ecd4425","first_seen":"2026-09-10T23:47:10.887672Z","last_seen":"2026-10-11T05:37:33.641094Z","times_seen":2,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2025/08/Casino-jackpot-statistics1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.393Z","timestamp":1791697012393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2025/08/Casino-jackpot-statistics1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 20 Aug 2025 08:12:19 GMT\r\npriority: u=5,i\r\netag: \"68a58363-7702\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3DEnsrGhwHsrD%2B44UhreVjUAMSGYT%2BZOCyCKo%2BclJQyjHCLGroqZyWEd8KsFA4peYYmW2eP1CTpYHL7F5PvOss7jItkwxuvmxtXb2XRbid5fhGz5s7dRvmX5YPKsXmdcx49W\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82777bd975ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30466\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30466,"size_decoded":31154,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c38e2eb37a96a30874d374ff5f1e4c72","sha1":"08c428dee6efcbdb1ef0aa8e3b9dde2891aa40bc","sha256":"620ad09766f8048f9b75d0feb6a5b6e36a9069ba674cbec09c78aea9e7698bc0","sha512":"4e2591ca1226b44d754cc86b30af35517736e2956107875bbbe08ba6f73426073c4e56ad745db853d2bf4cc2a4059fff76324562d6be0aa218e0d373d2220adf","ssdeep":"768:MGQT+zmsVZ+SM5rrH9/MuKXihDJFR4VbZKKJy1d2ig61AW7:/QaVVZ+1pIX2YU1d22l7","tlshash":"13d2f1abe68dd7d19030b242c512b206d8ccbbaf5e125f8991c119791bc9bf7033cac5","first_seen":"2025-12-20T08:55:00.813004Z","last_seen":"2026-10-11T05:37:33.643165Z","times_seen":3,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2025/06/Global-gambling-habits2.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.397Z","timestamp":1791697012397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/Global-gambling-habits2.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 25 Jun 2025 13:09:13 GMT\r\npriority: u=5,i\r\netag: \"685bf4f9-a934\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mYgcebmFg4FvA7BKwgCQUHsJmXw2zlcAbD5rQhc1OiqFCMcMweCtsQMFy6JZFKam9nQz8uRXIawM%2FymW%2BBxr%2BV7mP%2BfryA4%2F5tT51AXTOXQs3nVaK%2FKjHFP6VmITBHEIohF8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82777bdd75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43316,"size_decoded":44010,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8af35bc5907644689c8e7e862bbbab45","sha1":"8ca7746ab9468a9f8215a0039ac0f8b05002b704","sha256":"12bd162906baaf2b0e5621f1241de4ba8991d0c1cbfffd6aa1bf6453700c9ab0","sha512":"17f857ad5aeaf9326011ae4d6b24020143c761d0077f9e72929f6c6f4f1e545d8af0567e906b6e7fda01f4f517a621d4ddacd90ca25c4d43b8f1849ee9a671cf","ssdeep":"768:MC+PP7wrwz7cDZFCmPftrpr1mnlXqIwupe/BQQHRCEWhHaJIgLgfx+q:r2P7WwzIe65puLw5Wy1WhWIgU5+q","tlshash":"e01302821b960d00d76306d8c07a96d220699ed299c8ded1e5ecef5bd791a3e8733c8d","first_seen":"2025-12-20T08:55:00.853948Z","last_seen":"2026-10-11T05:37:33.64456Z","times_seen":3,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2025/06/casino-checklist2.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.399Z","timestamp":1791697012399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2025/06/casino-checklist2.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 09 Jun 2025 09:41:20 GMT\r\npriority: u=5,i\r\netag: \"6846ac40-7378\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7T5Bsd%2FP9lMDOl5fvs%2FUG3oieJFJnz3C1UxbZE4vVZnEK0l5leCqHqkG64uCiKy32K4lHKKaeq59wF5YQ8fXd53kQS2omdryBS%2B252FwnTvzNWpoy8%2BIzqmPpkQRVG09WftS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82777bde75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29560\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29560,"size_decoded":30250,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2f68be52233339a57067e1f319a7ff3c","sha1":"14bf3e69c9ea636249c2f08a8eb91cdac94dd850","sha256":"a662b3975aa5d2df6d16e76271a4c169743efbc653fdde488c65ff1df42e6f3e","sha512":"16b1b3e9d5cfa9f647632545649b4d604eef5097fc334ce4234f43386c3e5bd3b9aafc2c3a98ab48f5e614af73d9843d1e20942281b59943325d44bca7cf0d96","ssdeep":"768:VDSurU51rzE8kh6UWVXCgZ8ft/FZ3b+N62jwM8u7M1Sag2TEo:VDSurUbfEJUTZ8ft/FZ3aN1SuQ13T","tlshash":"0ad2e1fad52c6723cd8d48184567fe881c9345df3e852a06d3cdfc621416c0aaabfb5a","first_seen":"2025-12-20T08:55:00.826328Z","last_seen":"2026-10-11T05:37:33.645815Z","times_seen":3,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/themes/248479_payday/fonts/Roboto-Regular.ttf","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.631Z","timestamp":1791697012631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/themes/248479_payday/fonts/Roboto-Regular.ttf HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/wp-content/themes/248479_payday/style.css?ver=1730978321\r\nCookie: language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 28 Dec 2021 15:13:45 GMT\r\npriority: u=3,i=?0\r\netag: \"61cb29a9-29144\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YNdVDt2Kmrxrdv1yt6DtvV9g0yJqjgua8EnIeILui%2F3K022ZvWprkgryzdZvesxfDdNX7Qpp9N5QPbCSVNO0wO7izdEzcWwAps%2B6hMweL8hSrlCWLXcNlyvZ9V%2FifhyXIE6O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b8278ebf075ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 168260\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168260,"size_decoded":168967,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob","md5":"f36638c2135b71e5a623dca52b611173","sha1":"84d102488738b0ebbc7a5087973effbd54c95bd5","sha256":"319cff6e7a31f0f2a41c475dca42890aa5d19fe16017e2290f8c1d4e14f76481","sha512":"e9d55580eddde182cd9ab96057e129039154f54efb0384613aa9513ed0d2d16eaccb5f6d77a299de601addf0150dcdde1fe98e31d047bbf85a66ac319c3280b5","ssdeep":"3072:Jy2goL/sAQRuzzlPrvRwhRFUzMWlYfxJVBxV+aYT3qPXI0eH4OuNOIOU7og2FnI:BOmCeu+bqPaHkWUMxFnI","tlshash":"b0f3c501d642aa19c6d6b2787c7ca3be4c75e82dfd4a602734e5af2115c8c05ec69bbc","first_seen":"2023-04-05T15:50:05Z","last_seen":"2026-10-11T08:14:46.839855Z","times_seen":2582,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2025/12/High-volatility-slot1.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.384Z","timestamp":1791697012384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/High-volatility-slot1.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Dec 2025 09:08:13 GMT\r\npriority: u=5,i\r\netag: \"69314f7d-a998\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3iuBrmZh8zoEnbOAXGrSHEYaDd%2F7eS73VrMemMluEWk5SR2Fhe4Jr4QE3zeZriu9cUbjF2jYDtvDhp7ZYpK03lGnFhPmZc%2B7tCG%2BP6XFQmQsRyZwP94KQxg6IjRS2cP%2FWziT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82776bd375ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43416\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43416,"size_decoded":44106,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cdab9ce75797aa0cf46a79d10d90529e","sha1":"922de2bcd968ecf7d1dbed1eee521e9da3c58bf0","sha256":"0751b675ee1290110a0135ca464e212b193cce8c9d0f0be52b8ec63477ff0eca","sha512":"2545848cdaf4184b98e556c3901a02536f957b199b9da638f1e5212edbe960b31a87f12cf4209fbdcea20d6a9d47d5be8091b02a855156d3f8c30ba368814cdd","ssdeep":"768:B2HLnDR3jgTLoYruK3EF26/pOPNnMXkf7o+DuJhIgSfKgJwGbfStOMboumouhN70:ql3SLpCN26/pImkf7oAChITfKgusfOOO","tlshash":"5a13f1e5037d8d2680d867420af3fe4ed647565582de03276cc4b8fe64298fc13e9a9e","first_seen":"2025-12-20T08:55:00.824707Z","last_seen":"2026-10-11T05:37:33.647759Z","times_seen":3,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2025/07/Real-crypto-case2.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.396Z","timestamp":1791697012396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/Real-crypto-case2.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 11 Jul 2025 14:38:58 GMT\r\npriority: u=5,i\r\netag: \"68712202-80ca\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t7j4d8%2Bu0A%2Far1phSiivz4uP%2Ba61PbjBlEkDXGxYog9Y5o4i4UH5ARXckzzqnxDq2zRCtJ4b%2Fd8zQP4A0PlTUkZOlhPWKBkrxoDc09VoqaXhcQh6qWcxYpTdADDAzfimeMte\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82777bdc75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 32970\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32970,"size_decoded":33660,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7ec631eb467cb02ca5410437f356cd38","sha1":"9ca17ca0dc1dc96791a618a3ee808740c5c62939","sha256":"6cbdd1cd5254a1f9652c40ef11c79d6090f265c00c72180931690a6d6e86b5db","sha512":"36f728e0401bb62e2f97dae3c2f6bacbffead884b8f6dbdb3ded68e029759f0e53b5d7f284db0d7a2f3c94d8d2df93ad2d9a52b69b9c9f3368111a1a95f485a6","ssdeep":"768:eo+s1tTn2tsm9bH0F6af/svFbuhx0UoEFCzWZa0N8:evqtThmB0FRMvFbuREdz","tlshash":"a8e2f11c1a09a25ec3dd6f11b4432be9e00a90bbc9cecd55d21f67ba42a2e183df5b04","first_seen":"2025-12-20T08:55:00.80616Z","last_seen":"2026-10-11T05:37:33.648925Z","times_seen":3,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/uploads/2025/05/Bitcoin-gambling-success2.webp","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.402Z","timestamp":1791697012402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/Bitcoin-gambling-success2.webp HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/\r\nCookie: language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 16 May 2025 08:14:39 GMT\r\npriority: u=5,i\r\netag: \"6826f3ef-6cc8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Yjrea3II7YFdbwYaqmoPgDzL%2FJKCOSoL%2FPG1bpnjW%2FiVFLlcuKvBeBvn0U9WcqiVU1k9h6pxE%2BOyGqI9izmSC9UTgOkN5Bu58A5jYrkVKjqisWSDNR6XDwtNhWjGCIOPx29\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b82778be075ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27848\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27848,"size_decoded":28538,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"95e7c2db31409a5fda9b166946e1467b","sha1":"c709157a43620b14db98f1b3648022766e52f833","sha256":"1278f5d98b4fabd04898450bc135e9c627d7f0c6dd2bd64709be01fd12512684","sha512":"ce75a14f29291fb184eae430b633fa4fb9c92731ae07b7246439ee9c516c4cf3d9b707d4e53306160d319d5361f4dd85a25267063403ffd7da94ae01395b0a59","ssdeep":"384:UyzdcXMSYMWABPkPBcLA8p2Dma57pC7wN59NUVee/ZRW4aqPuw84cTHa6FcAA0Hh:3zdvMpy80Sa544P+7QcPZnEcaI7c","tlshash":"c2c2e139296436f24a67067466e40fab875388c7667060cf74de3c523e5bf6c913e253","first_seen":"2025-12-20T08:55:00.815626Z","last_seen":"2026-10-11T05:37:33.650219Z","times_seen":3,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhidedesigns.com/wp-content/themes/248479_payday/fonts/RobotoCondensed-Regular.ttf","fqdn":"dhidedesigns.com","domain":"dhidedesigns.com","tld":"com"},"ip":{"addr":"104.21.27.97","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhidedesigns.com/","date":"2026-10-11T05:36:52.637Z","timestamp":1791697012637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhidedesigns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Oct 2026 17:17:42 GMT","end":"Tue, 05 Jan 2027 18:15:11 GMT"},"fingerprint":{"sha1":"14:E2:3B:7B:21:1C:D4:D6:E6:D6:8E:BE:FE:6A:55:8F:FB:95:DC:82","sha256":"DC:79:75:EC:DF:6C:CF:77:84:3D:E0:6D:43:26:5D:5A:EF:B2:17:EC:72:F0:38:55:A9:0B:18:BB:97:61:00:95"}}},"request":{"raw":"GET /wp-content/themes/248479_payday/fonts/RobotoCondensed-Regular.ttf HTTP/1.1\r\nHost: dhidedesigns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dhidedesigns.com/wp-content/themes/248479_payday/style.css?ver=1730978321\r\nCookie: language=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"language","value":"en"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 11 Oct 2026 05:36:52 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 28 Dec 2021 15:13:45 GMT\r\npriority: u=3,i=?0\r\netag: \"61cb29a9-29778\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H9ahGwDsuISF1yIJkAywSzyGdtQFQH7skTYJUBm2xHMMqIuOV7HxIY7XG94ARY1ovzjMRsEqspwR1I7JdneuMpn3zmzugkejh9wGP3qFZ%2BAwn%2FYFkDPqX0yDwvEyS%2BFjCbIk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48b8278fbf375ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 169848\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":169848,"size_decoded":170555,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.Roboto CondensedRegularVersion 2.137; 2017RobotoC","md5":"52ee8b598488b1ffbaa93e50cbd6a2f4","sha1":"8e3b1c2ac207f652b67855020cf731cd600942f5","sha256":"f05ab6c1eade444bbf4e3e00710756e95c2a1d09a10425967149802219c0c0cb","sha512":"b4476c6fb8c39bacd6024029738cab95f1df434a75119bd69284ef7b65fc1e8e0bcdb34d2e0c1ed73ac7ef78651e39d65576af1be529b63edcd52bd7e92b21e9","ssdeep":"3072:q4fUhaSQEjGUoixkzf8ESt41/3OXMsD431/kkTRCRjV8e5JeUyzquuNOIOU7og2i:qCPIG9D8ES9U2kF0WjyWUMxFnI","tlshash":"fcf3e801d249ae25c6c6f1787c3ca37e5d74e03ebc4ba02734d9ab2115c8959ec69bbc","first_seen":"2023-04-13T08:26:55Z","last_seen":"2026-10-11T05:37:33.651325Z","times_seen":251,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"dhidedesigns.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}