{"report_id":"8d693c90-a7d3-4a3e-aa63-8d5ccd30f5aa","version":6,"status":"done","tags":[],"date":"2026-03-22T15:26:17Z","url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"104.21.66.112","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"title":"CORZ","dom":{"size":20855,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7436)","md5":"5cc3b507f91041f61ff3bb6701e11c47","sha1":"3b0825cd7eccba3dda352545235bcb950fdce58a","sha256":"b80d2e39195090bbcec022dd716177b7f18d7b773b041404fbc9a5c5222c4b07","sha512":"87972c3440992ef4c91f8fa9eb300d7028292c1522950114a767b6e7241f416afeda3cba7bef983f1096104023d2deedb16c5d68e3a9da6c0bedd93da2c538d0","ssdeep":"384:ADHU9OWp1YKkBzsju8pk9X+OIjlYAuN4qLepipd0/ZyCOwmS:NxmoXp4+OI+A1qLj2yCQS","tlshash":"1a92432b1c4904272323a5d96cbbe74a30f7960f894ea9007d9c43554fe7d78a9bcf98","dom_hash":"domhash6b20b4c6b79f900bbb4b76e53ac8084a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"104.21.66.112","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-26T15:26:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-03-18T14:30:52.272562Z","alert_count":0,"request_count":1,"received_data":115283,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ddooo.vip","ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-12","domain_rank":0,"first_seen":"2026-03-22T15:26:19.40411Z","last_seen":"2026-03-22T15:26:19.40411Z","alert_count":28,"request_count":28,"received_data":2727944,"sent_data":13897,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.ddooo.vip","ip":{"addr":"104.21.66.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-12","domain_rank":0,"first_seen":"2026-01-20T11:52:50.537802Z","last_seen":"2026-01-20T11:52:50.537802Z","alert_count":12,"request_count":12,"received_data":97720,"sent_data":6918,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-15T22:16:12.279722Z","alert_count":0,"request_count":5,"received_data":132181,"sent_data":2709,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sc-static.net","ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-16","domain_rank":3142,"first_seen":"2017-09-05T18:35:04Z","last_seen":"2026-03-18T21:59:52.006339Z","alert_count":0,"request_count":1,"received_data":59423,"sent_data":410,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4cf557b8eaa6fff38d2654c426b30ffb","sha1":"01d5d56b911ce831cb50e4124479f1dba94864d4","sha256":"144bc88e1dbb8877086ed4e59d812d9178aa5157cb870a81c4c06975115741bc","sha512":"aa69f542429c697e5c3608a1c572d22b3fc3bf5be09628b249f594c219fee196491d020f3f9813c504f5b7f3e9d03f08f6a5556b355a25350366cb87e1e0f355","ssdeep":"","tlshash":"eac012ce60c269005a065916556f26e4d0689416744c2a128c94d8493e221b04133ea8","size":172,"data":"","first_seen":"2025-10-09T12:29:11.780884Z","last_seen":"2026-05-08T16:28:51.781074Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"4c9d2c8a613bb2c333bd3d4fa72a910e","sha1":"2423047f8e6e364a5acb86dcc25111580999be9b","sha256":"af7a3b6b0a051456e1921f597368cd81e40a2f593e0431c34cb80be8fc0a30f7","sha512":"ac26f9667cc281339fd388cebde18f00dd39a86f64e57b8a8751705898c10d92feea09eafa210e22841a0b0ee630d3ceada52aeca142270b228bde9cc6f9122f","ssdeep":"","tlshash":"cbc08cc5b0c37d001602652014af24e4a024506671482b438ca4d8482e620b09233ee8","size":144,"data":"","first_seen":"2024-12-02T01:20:06.77716Z","last_seen":"2026-06-01T19:00:20.467531Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/PhoneSelect-DFHaJ4bv.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9decd3cfb1ae7bdf1e430dd500e06b36","sha1":"c6620c9cebd44fa1c4bae30c599e5726615f25b9","sha256":"8c8b1ae377b596a225e34cf3174f7c101c6d1afa5c4c4ba60920ed3b1114194b","sha512":"72b3f8347eafbba8edc6b115b082134f92b5691353d945b9d07637a3ee7296436f7e3263f1e1ebd1e58446c38870896a5eb893772f3f969fa5da64a0d7333329","ssdeep":"192:Ejxs/hrvvvkR1aCuhPU8mZsdisBTrP2BrhuGQ7w/yYf8/TkqqjNeGQTuOalAtFht:uxj5a28wa8H5tnzxaF","tlshash":"8f62bd6b00b017a6fbf19321f101f8a663c91e862857a5f38dbf136259a00f7b5cb65c","size":15511,"data":"","first_seen":"2026-03-22T15:26:22.52755Z","last_seen":"2026-04-15T06:27:02.250056Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-15T11:44:22.119959Z","times_seen":6274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/index-Bpf1dkiq.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d8973fbc77720a6cd1afd95f6705d07","sha1":"63a52aad1a0a9f36d36811ed7b430ba91feef288","sha256":"ae719577a135a3fc32a169c1e5a056dcea0bc1c648ad90c7205d9c22f9ae7e38","sha512":"5976fc7f1b220e0cb531282a0235aa12e577cdb7419a53fe844599abaee37e9ecc04510e558305c9dd5a25de359cf8cdd3ca6139213f3ac4441448b4cbc259cc","ssdeep":"12288:UqbvNHlR30T98cw1NMv+3Lt7NhnuuTMgzPpVo2RTU1:xbvNH4aV1Ne+3V3nuzgz9TU1","tlshash":"e555a1281a2bf744e419c0dbf9373c84c59de18aa00764d15fb54bb31ba2797eaacd13","size":1318846,"data":"","first_seen":"2025-12-23T05:10:24.217477Z","last_seen":"2026-04-15T06:27:02.266033Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f325222a758aeaf467ffd9902267b129","sha1":"ebb95b3866ab29d0ee9bb0755384b81ab12e000e","sha256":"cb11ef6823d7949b57e01ab9d6bb5c829be6b14322aa0dd5897a6d2d209d0672","sha512":"aa743a98e2ffb65897bee06760376bb5dbb7c2f10613ca12c8cc462ae79e1d3351855f14b3ea70088d449656bb4167061ab22d99f0eb628b9b63dc2a94131292","ssdeep":"","tlshash":"46c08cc4a0d26d001602641020af34e89024802674481b028c94d8482e220b09233ee8","size":138,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-06-15T09:17:13.859207Z","times_seen":2329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/LangLabel.vue_vue_type_script_setup_true_lang-D7xJmFk2.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c6013540942473798ea35bbd7907c069","sha1":"61d2de408f913770915d0797a4024e6290026f0e","sha256":"120ec7f24e8f04f80f6aa2a175b105f1414ce75333168ff83fddfac70a8fffa6","sha512":"1eb02ab3833035744aad0804c71be6b87174dd750c21b531a5c6b8770d8fa7ebe6b21fd282ca6edbc8cab979c255dac127a94e4511f17812185fe0014266c888","ssdeep":"","tlshash":"e6f08b6f1c218674c1b649183a971810504d5f6f6624ee81e29e5e135ae286db3feb28","size":555,"data":"","first_seen":"2025-12-23T05:10:24.148918Z","last_seen":"2026-04-15T06:27:02.238007Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/BaseInput.vue_vue_type_style_index_0_lang-DWph6OEi.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4e4dc044838b56ff8ad745eb329b8db9","sha1":"8853083083c72306bb87bceb96ef6bd9730db299","sha256":"4d6fa40c93a08ea344f41c12e169ba32cf7429bf9b43428b0d6332d07e230a23","sha512":"cd4947d45826125ddb44016a7c06fe2d4a24f39dd4c63d1fef6e344012c0c9b07a86c6698636b49ab21c9c29c00fd5bd42d299ff1830a15cb345d5667b9ae41d","ssdeep":"","tlshash":"2d515004ec159fa3d6b39b4da5eb58a0a05c2b9f85084f5110fa561c2f5ecf8233af28","size":2490,"data":"","first_seen":"2026-03-22T15:26:22.521031Z","last_seen":"2026-04-15T06:27:02.258444Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5d2708a77893ceb11c8b3f0e91577be9","sha1":"03b99e84959dbe39a70040b995cb89903a4c7bf7","sha256":"09b0d72a54ff43296c4f1fecdd41751dc3adabdff2b2c666ac35bea522b3c7eb","sha512":"4e4cfad51a593abef468c3c285b0da15ea08bd043730a40f39637f0c056c0ec9f6c393dbc91407c3b0b106ce629ba988f8a5956dedb7a767c1dd06625c3c7c85","ssdeep":"","tlshash":"76c08cc5a0c7ad002e526c2010bf25e4a034402ab0485b028d94e8492e230b48233e98","size":147,"data":"","first_seen":"2024-12-08T21:22:12.713431Z","last_seen":"2026-05-12T11:03:22.456725Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"02408d922d2e1998a79d8d6f850a8fa5","sha1":"05881ad7e2edf93b804c00b4998f794b9be830e2","sha256":"2864865ce925856a2bf5886ef5970aa3f3c2c592f2f6963f42fc77308efe5b95","sha512":"d79c14118cc3f703cf56276c6432e4c886ed04c65964fa528d842d1f2efb256ea5cb7f313b5dcf870032fddad8b695ac049c3d0de86f8ceeb0a5932b7586cc2a","ssdeep":"","tlshash":"c9c08cc4a0c26d105602645010af24e490244027b0481b028cd4d8482e220b08233e98","size":137,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-06-15T11:44:22.118451Z","times_seen":988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/reg-CvbjsrDp.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5a35f8a2ef44cd09f057316656bbfa1","sha1":"0915e8990e37fdfbfe77e8b054476f7e3c1d976f","sha256":"950c807781de79a70adf54c01b19f7f197bcdf6056c428c827391c424af2d10e","sha512":"551d9770eb79bdb9deadbed2e5324736266cfc0f0938981f2f390829d25b2ca2d5756d6eab27c3cdb2b24a5a602f12e51dcebd11d6523c9ed962177dac95a800","ssdeep":"1536:sZxWeaK4UQ/0h7LAC8sEbFsXjytspllC8tYcx8t/3jdRyrKf:uWDK3Q8h3A5s6FCj6sXlHtrxW/zdMrY","tlshash":"e193504ce0f9cefb98fb660d79074830b15e6b9fc1005ba6a3bc06555e63cd09a326d9","size":93035,"data":"","first_seen":"2026-03-22T15:26:22.522003Z","last_seen":"2026-03-22T15:26:22.522003Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"10e247b1e2fdabc6df5924c7ba030143","sha1":"5ffb3521af2f1de2346aafc24cd370f96eb2492e","sha256":"eecc77cda212e1b84aa604a30d271abf4f89ef8930c7527adb67f3f4e47bfd6a","sha512":"51902aceeb1ae468f85fba2fb32c97f1cd1b3ac9c0a5920ac0f97a073de2974584878855d9a8258bd080d65ee031f548be5238c84ebf1f5186bbc6b0a9b7117c","ssdeep":"","tlshash":"07c08cc8a0c62d202a06e91010bf38e8a038802770891b028ea4dc483e330f48233ed8","size":150,"data":"","first_seen":"2024-08-20T18:12:14.496137Z","last_seen":"2026-06-10T21:35:42.646638Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"eb11a5046bb7cafe92c775fe17c4baab","sha1":"86aacc0454104493f2bd4b31ea87f57217e2ef5a","sha256":"8636e3e713a2de989bf94ebbeffca1cd1c9cb96c093ee26eaf80678b1d8511aa","sha512":"39afc498d02ecbf73d8f599900ff3d323ddea637777e12e7d486917b596a962879748008ee96320472cb47fe440ed46ecb3f16995f43df8dc295ad0ee4cf0e15","ssdeep":"","tlshash":"15c080c5e0c62d0056026411157f35d49034441e70481f868cdcdc583d230f45337d9c","size":158,"data":"","first_seen":"2025-09-05T02:20:56.045012Z","last_seen":"2026-03-25T09:58:52.058759Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0c9ff6322979beda3ef6a855d997e662","sha1":"df89e42503ff2198d598b2dc8e34228b5200deec","sha256":"964fce1a2e5fd8ed07a5a3a201b1da9b6d89bae1e63735fdbd3b16a64e3512d6","sha512":"3d71fd18cc92149d5259380581dbf2f3a90e0ada91daa3ebbff45d75ca3e69516fbafa6ceb19b313ead5b02af4ba779667522239adcb6642762963dd1fd227e0","ssdeep":"","tlshash":"10c08cc4a0c2ad00a602645064af74e8a024402a7088ab029c98dc482ea24f48233e98","size":148,"data":"","first_seen":"2026-03-11T10:54:58.02843Z","last_seen":"2026-03-25T09:58:52.062627Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-15T09:17:13.857659Z","times_seen":7183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb0a2fecf6cd27fba9cd29610fd2ccdc","sha1":"7546ed807d56be081be97fa1e4859381ecccf58e","sha256":"dc67f1e084e069a3fb629f3154765856fe0aa805a4e138bc42c228bc3d656a78","sha512":"5350795e68c371956350f88354aac62900d7fc5974817e93f49f218fa60becda436da0a8bf17d6239e2ef882cee0b18bfe66e181baa6f1ca04b57817c2920166","ssdeep":"1536:pO5TpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:s5TpRdfcKFU7Rx1H","tlshash":"31b33e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","size":114950,"data":"","first_seen":"2026-03-10T21:38:17.367441Z","last_seen":"2026-06-14T13:52:36.655198Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"10568b780a0d314b06f4ae6be4a339f7","sha1":"2c0ba855511dbe4d8ce3bf061282976a34fd375f","sha256":"97611d5571f8e91da4b84e7fed039c19126ed0d05a358286b229ee99b23e61d4","sha512":"f1d5ba897fc7e7481668825a9b1fc036114a015a88759f3df8a3f52521648c16dcf66dd17116a513a7ccbc3f4d62eff48fde1b11b4905917762aec42d1009705","ssdeep":"96:nfkdoq1aBIBOjsXgInhubwM0eb9X+T60YTHs:nfkdoq1aBIBksXZhu8M0k9X+T60YDs","tlshash":"beb1991b69e56468a703b0ba8c3fa406b521042f099cbd407e0cd7769f8953daab4edd","size":5554,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.018709Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fee4b1e586b7632d54147dd3f136e8b4","sha1":"17de2caa754fe6fae6342bd4b1370bcc1bdb6eda","sha256":"a7fb860e2b465b3fd03b62d06f21f815adbaba16da41f57ed691331f42f6f583","sha512":"24a6e096b3f80d7ca0d3bb182ea9854b1e2a35b586fcc3f3039faeac745415b9836caa6b456afc3e2146ce23213ecb4c6d5230aaf9c012b5cc8d1ec548496795","ssdeep":"1536:kQ870ziaawzjPOevVJm0tlsuHrih9HHVZ1GJV51kxx0Kb:78ahTl49dx0G","tlshash":"2043d78cb7e9b02503973472497f541be33bb9646c0bc650c526e5883dbc69e9237eac","size":58763,"data":"","first_seen":"2026-03-17T17:35:04.652559Z","last_seen":"2026-03-25T18:42:07.46855Z","times_seen":911,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/index-DQk8LvRc.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dc00c04225e59e4999b7aa34ce160364","sha1":"ccc54e307f4f651295db73c72bd47a931013538e","sha256":"c18e5acc2185415ebaffec36d76c53913699df033a7c0355774e4d0928b68e67","sha512":"9563b9ca3ccd0be54934101da500aea3291685c2ed5fe7264d90508ced454643084e3f63f535285dbd8b963f8285a4ecd2225b23719d7a146169fe8c9f9f8cc8","ssdeep":"","tlshash":"b161836cbed49534c6fb498854270912aa1f0b19522488f2e4ae5d4c2f3e458f13ff2c","size":3203,"data":"","first_seen":"2026-03-22T15:26:22.518359Z","last_seen":"2026-04-15T06:27:02.234615Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7d4fbff71549398ceffe8189db57c5b","sha1":"9ddc56ef19489e0d21f74eebc29c92b469ae6fd4","sha256":"ca663f53ed1b54e1f40c4b17ba2257f76179690249527bf88d268d9d178995a3","sha512":"bb5e60f5eec27743c6cfb79705632ad071bd6cdfffb44d8f0ce4e2c884c1bb531e06e6aa80bee647986c34bb4bad620495cd48c61e8d30441914687444b03b1b","ssdeep":"","tlshash":"e3f09e1b1886b07e53d760b6593bad5b322a11472c5119077d4c80242fe083d7ef5fde","size":623,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.019407Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"caad72fe48a09f8a060e5dd1477935fa","sha1":"f2b5ddb3021c1d3b5df6a518c7b555a7ffaeba39","sha256":"3097fffe06a687f15fda650f93d6f5303679a4fc78db9645da44a7aa4fa902fb","sha512":"1ad398a20e4693fe3fcd02aa2ffd3fa8f2c7bc1cafdc3778ed28300852491cc74174c17f930f387a3d75c02a35aa21100f56df21ee41f5222850cea0d1edee06","ssdeep":"","tlshash":"b731682918ea1118b2177166e17fe70d2725501b2dd4fc097a0cd2240f9997ee6b8cae","size":1591,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.020035Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/BaseAlarmLogoBtn.vue_vue_type_style_index_0_lang-BPfHipwx.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8edce84d2e59a399608d53ee98805e2e","sha1":"d1893249946a484afa3652854f7159ab1327e172","sha256":"719b688c8f90276708468b027a0d680aa74a7fd04ac70d4e8c2ad16c183fbc68","sha512":"72bb32e293ce6fb0ed5cc64e2394018b19ff6cc37ef6e6400be39ef2c3e7682ea3d66a5f7e50777d67e610110e01f605053dfba89a88f3df1bbf7f3d6384043e","ssdeep":"","tlshash":"c4f0c01c5c118af9823701453e5620a204580f7e665cbe81e9db18119fe20bc372b72c","size":531,"data":"","first_seen":"2025-12-23T05:10:24.142022Z","last_seen":"2026-04-15T06:27:02.231112Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/BaseLogo.vue_vue_type_script_setup_true_lang-WeLZ3sgr.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b6001906d50bb482c7ebc845aecb6a0e","sha1":"e1e033fe9b54e6050a3070ec40638b38adcb8357","sha256":"d2f859c8ebaf127b17fd05d4632a28dff9383e02beb021e746a26043e40b1739","sha512":"61267833285fc5e86fcb5a89116f26ad7f25a06f0af3afe4e53013981907aa5c6518249f39d69b55cc157b99d0e2b1099c5c2ad63d01695977ee789aebf2ebd3","ssdeep":"","tlshash":"1cf0e14e5d6e41fa91a344582a4b9081210c4e5ec634af80f2f82735a241c5d741db38","size":585,"data":"","first_seen":"2025-12-23T05:10:24.129986Z","last_seen":"2026-04-15T06:27:02.248487Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"94d71ca3d432c5a150ba0fec148bec8a","sha1":"f149c8d29e80003d26ed2e460cf5890f8bf67978","sha256":"5c8151446c3fb9fb384c25e941b64d83149cba01d5a7905fd2844d6b4679114d","sha512":"9e345046d828729d97f78fe91cdc987f97e0088d6de76d2171141348aec8b658006105e5172bfb5845491d5782b26c57a8c4245f30fab81daf9bd33adbc71ce3","ssdeep":"","tlshash":"24c08cc4a0c62d001602681010af34e49024402670481b428c94ec882e230b08233eac","size":139,"data":"","first_seen":"2023-09-13T19:31:22Z","last_seen":"2026-06-15T09:35:07.616066Z","times_seen":876,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f325222a758aeaf467ffd9902267b129","sha1":"ebb95b3866ab29d0ee9bb0755384b81ab12e000e","sha256":"cb11ef6823d7949b57e01ab9d6bb5c829be6b14322aa0dd5897a6d2d209d0672","sha512":"aa743a98e2ffb65897bee06760376bb5dbb7c2f10613ca12c8cc462ae79e1d3351855f14b3ea70088d449656bb4167061ab22d99f0eb628b9b63dc2a94131292","ssdeep":"","tlshash":"46c08cc4a0d26d001602641020af34e89024802674481b028c94d8482e220b09233ee8","size":138,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-06-15T09:17:13.859207Z","times_seen":2329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5bd6185639b8be9b5d6a79cf5af2a9dd","sha1":"f1cadfb16d24785897f89d1da75adbd0f028de58","sha256":"8974133640d35c1c7fff7a94f677c866910b8e07e2830473c9ef84da0f01fa9e","sha512":"4b9b0252665f704d49cafca04e04d96d8ffe1f2348946d655d3d0d7780342b865e6b8451bb687c6acb4f2690473c13fec9b10a1b036f1d2a028a8e34c6dd35a6","ssdeep":"","tlshash":"7ec08cc4a0c23d001a23646120bf34e49038402770881b428d94d8482e230f08337e9c","size":148,"data":"","first_seen":"2023-07-15T02:55:06Z","last_seen":"2026-06-07T22:53:02.952892Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-15T04:04:20.368003Z","times_seen":4160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c771a56c31bff8ba6299f63241568899","sha1":"3d6509d1f412e744a937e891546180b1093f7ccd","sha256":"c0b3a74335ec3f96e25be399971bafea9e3513f821dd3b4009608de199fd4f2a","sha512":"f859c02090a494b60671d2dea13324fc38d926b315de977edb5889e587917facd9d2e4c1e73e0edb3f0112b5af30b8d05d33a173612c81f4cdbcab5bcf47a03c","ssdeep":"","tlshash":"7b0128e59986483146db31fa2a9e301070318003b908beb0386f15446fdd33ed3f6bd8","size":689,"data":"","first_seen":"2024-11-20T07:54:53.452195Z","last_seen":"2026-06-07T05:03:57.027217Z","times_seen":489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a28e056a6989b49de8bf0c6fe7a9078e","sha1":"166889dc07218cf99767d4179177e393a87c50b5","sha256":"5adba9de6f8cd98bd9f208363a88990f71f45bc7eaa3b277fa7fc86d54f0ecbb","sha512":"5fca1b898fe0243788c1e8403086ea2b8f6374b3575b8c71ff971b969f1e1325eb301221aad3fa4f9447bb8df6c43021297674123c156e4fd1a322d5cd3cdcc9","ssdeep":"","tlshash":"acf0ab0b199008319707b17a2a7fec0a1e42201f29646671be0c95109fce97e4664d5c","size":506,"data":"","first_seen":"2024-07-26T08:05:53Z","last_seen":"2026-06-07T05:03:57.026572Z","times_seen":599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/default-TMlsSTYf.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e007a65547dc1c3dd7e68dafd2b9109","sha1":"4438ee2ea7d8a7e5e783f382991530bf339bc231","sha256":"ca590ae3bea982669a29857217097c800179da5c656206e23432cb3d30eecc87","sha512":"907c4ed981195ec3152f81605eb6d32d1a3a58e185b35ccea8613193acac95d5ab185026c9e8166e808427feb40999a9673ec5ac0dc4f2f12dcd4038ec639e75","ssdeep":"768:b5nOVanOhfyOZ1ykQa5OGnOALaQfyOejO4VOsOJO2af2DidotqmLme3+xG3GJ+k/:DJh/cH+xdPQfk+gG4","tlshash":"f21395815807933fc5729a4e4c466482328c5fdbd00c6fb6f2b4d52b86cac797a3af59","size":42410,"data":"","first_seen":"2025-12-23T05:10:24.11259Z","last_seen":"2026-04-15T06:27:02.244645Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"76811db4a3d5546de19bc46f245652b4","sha1":"065ddba5bf95b5d1f278bb4a908a53fc4f0a41b2","sha256":"237e40d42319f90c108ee79382b7200ea26929d92fe7799cf0bd33efc343ebfa","sha512":"f7d218cf377027fbcbadd061e0a97768fe6955ff69385e531406117b74cd36e368441724eabbcca6f4424131d73e6f50baf10591dde8509fefd6f7cfa727dcf6","ssdeep":"","tlshash":"efc08cc8a0c22d002602a61020af39e4b038802b70485b128da4de483e630f58233e9c","size":147,"data":"","first_seen":"2023-10-29T04:01:47Z","last_seen":"2026-06-12T15:27:34.427917Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1d4700e7818854aec11dc4d0591f9626","sha1":"33b2ac2baa38752d6f1edf04c37521182691204a","sha256":"1d5965d8f785900972e887d8981bd26afd51aab614536dce2510a27167b51ff0","sha512":"dfb9f4efd73dc16da30a73a6b0e794e4eb49d92babe6f730363281d2c54dff1e8efb16873a9c361b8531368e7efc4cf6eba61d56628671e7a996ed795a17eebb","ssdeep":"","tlshash":"89c08cc4a0c22e005606641011af24e49028402670481b028ca9d8582e220b08233e98","size":136,"data":"","first_seen":"2023-06-28T20:43:13Z","last_seen":"2026-06-15T07:45:34.601869Z","times_seen":12935,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7144169280a69b1c180a70c7fb7c5047","sha1":"286b077ac1ddc843cb5a34c0310fec82d7628167","sha256":"0860f78a352e55f64ab8fa11ce266c6b60f40f4ee95040204fc70884babac6e9","sha512":"2cca64caa2a5ff4fdc390e7127fd89645a0e80135214f066e068f14d9726fdc0965fa5a9e79d7222283d8e0e12c90fd504367f81ae5fb580e3c1bc4c84a12f68","ssdeep":"","tlshash":"edc02bc5b0c33d101602641010bf38e490344027704c1b43ccd4dc583e230f08233edc","size":135,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-06-15T11:44:22.125251Z","times_seen":503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d2b2b050757ba3d24426c42c3e4676f","sha1":"6a3359c5389d7d41f4b9647878b29cf654f5fc63","sha256":"da3abe33f5dd2abd814eb50229fb90d0ab61f7553b0154dae0cf129be7e7980f","sha512":"1c678470e263ef5bc0a5f8b44714ccd7cac330e2a61742d4735579da012208167e3b6672534f5ed217b285ff49c4204cc060936cf2f2d7e1625e10df79bed04e","ssdeep":"","tlshash":"b0f0eb130cd900af6f2710bd2b3faa1236a41113044ac020fc0e8720af20e7c1724acc","size":656,"data":"","first_seen":"2025-09-10T03:49:42.458429Z","last_seen":"2026-06-07T05:03:57.031683Z","times_seen":357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/BaseUserTab.vue_vue_type_style_index_0_lang-CDbasudD.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f10c49c4754aac60c43812e51009ffa6","sha1":"7989a1e777accc45a907a3431dbc25c4e3a94186","sha256":"1088c71654c0574d2362594d20a2720cf37bc15486588dc2385dcb97b2d26da2","sha512":"1900a29dd2664e8a6ed04789ccf6736a2b14d302c6b578f1ba5c24558f51c908199c76594282b1cd3f9669211a7d0c799fc794d24c2394752cbe12221d4f08d7","ssdeep":"","tlshash":"d811489daca9cfb604f205a82ea71079e094bb4e9614cd26d05e5431325fdf9e68d32c","size":948,"data":"","first_seen":"2025-12-23T05:10:24.158079Z","last_seen":"2026-04-15T06:27:02.249273Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ddooo.vip/assets/BaseUserTab-DVdcH4fp.css","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/BaseUserTab-DVdcH4fp.css HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vHhti5C1kwocZpSUWQLEfVDq%2BnQaAUkBgadxqzHMABSwS9Gc4tybXVVEdZCe8QvYrbRcwP0Z%2B4eQg2HrRCM5GInxMuDeb4EitA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d220730bd5c0a69dcefb0e619cfae803\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363d8f3c6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2571e9c1678f7890b2944076ddacb4af","sha1":"d36697fae0e1aecd7f151e50ea3808c9f155e5f0","sha256":"d27ee7a4a4e398c3fd2bb36d227fa8d1a2c0d648ababbf68b900c279709230b2","sha512":"6c1a50c9b8cc632500a99e5ed2e7b6b4f1ef621db803b52a9c4a59fbcf03bd6fce5ae57bda4b07f1b4bef632dde82ace2b87e26ebbf6a3aeaa64b620a5147500","ssdeep":"","tlshash":"37d0a91c0894f0be28c9b2a81fa852dc08aa2205fe035fa83024bd2101d6af5213bc6f","first_seen":"2025-09-11T15:59:47.603631Z","last_seen":"2026-06-15T11:44:22.029598Z","times_seen":95,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/BaseAlarmLogoBtn.vue_vue_type_style_index_0_lang-BPfHipwx.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/BaseAlarmLogoBtn.vue_vue_type_style_index_0_lang-BPfHipwx.js HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gmzMCMEuQjCESq6MKJFdsGSVAgFHOoODwtGnkw%2BIMP5hLP1VVDLLbldynVl42YdOjU8VRcPfPYbor36CK9bTp6hHzqfk0anrkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"99acfe3d79c95c9bf9997825285f7675\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363d8f3e6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":531,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (530)","md5":"8edce84d2e59a399608d53ee98805e2e","sha1":"d1893249946a484afa3652854f7159ab1327e172","sha256":"719b688c8f90276708468b027a0d680aa74a7fd04ac70d4e8c2ad16c183fbc68","sha512":"72bb32e293ce6fb0ed5cc64e2394018b19ff6cc37ef6e6400be39ef2c3e7682ea3d66a5f7e50777d67e610110e01f605053dfba89a88f3df1bbf7f3d6384043e","ssdeep":"","tlshash":"c4f0c01c5c118af9823701453e5620a204580f7e665cbe81e9db18119fe20bc372b72c","first_seen":"2025-12-23T05:10:24.142022Z","last_seen":"2026-04-15T06:27:02.231112Z","times_seen":11,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/index-DQk8LvRc.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/index-DQk8LvRc.js HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/assets/reg-CvbjsrDp.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y8fMlFzCUleWnCTce0ce%2B9IVZVfLvcHMk6PTTikkSL7bsc8X0hZgZ5sY%2Fj7UpDrmoU%2ByR9ER6FKYoXbk%2BWPurdFxCeSGMyY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c1f62966640061a5464f8ef11edc7dcd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363e4f646e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3203,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3202)","md5":"dc00c04225e59e4999b7aa34ce160364","sha1":"ccc54e307f4f651295db73c72bd47a931013538e","sha256":"c18e5acc2185415ebaffec36d76c53913699df033a7c0355774e4d0928b68e67","sha512":"9563b9ca3ccd0be54934101da500aea3291685c2ed5fe7264d90508ced454643084e3f63f535285dbd8b963f8285a4ecd2225b23719d7a146169fe8c9f9f8cc8","ssdeep":"","tlshash":"b161836cbed49534c6fb498854270912aa1f0b19522488f2e4ae5d4c2f3e458f13ff2c","first_seen":"2026-03-22T15:26:22.518359Z","last_seen":"2026-04-15T06:27:02.234615Z","times_seen":3,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ddooo.vip/upload/img/693c02101690.webp","fqdn":"api.ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"104.21.66.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 14:58:23 GMT","end":"Sun, 10 May 2026 15:56:03 GMT"},"fingerprint":{"sha1":"55:31:AB:97:A1:13:CC:64:6B:38:8D:D2:C7:B8:D7:AB:F3:71:69:8C","sha256":"BC:90:04:F3:3A:B6:08:29:E3:12:96:4C:A1:E2:3D:F3:47:66:48:E2:9D:47:E8:ED:98:1E:4D:5D:A2:4B:BC:B3"}}},"request":{"raw":"GET /upload/img/693c02101690.webp HTTP/1.1\r\nHost: api.ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10162\r\nlast-modified: Fri, 12 Dec 2025 11:52:48 GMT\r\netag: \"693c0210-27b2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s4xfx1W6%2BFEXFBps%2Fo%2F2AOwx9%2BVEu4MGVaCQWXbZhWO5zeDzgcwLMMuIGgD74rsuawJiVLho%2BDCWNdhOEmChM%2FU0Oeiq%2B5uCKzLDZFc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e06363a9b09b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10162,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 225x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5b82a51ea18ac252483daab990013756","sha1":"7b9192b01e8936b0e1756154cdf8988250658b1d","sha256":"d34b09ad413dc0d2bd85679d6a6716a7c900fef528f13b6e820c9d6ba64dd577","sha512":"37559ba3c1aebb5f4c0d6321cef9bce364170166fedb9d9f77d65107d806b2edd1144585f58ee34299b0fb3c89246090b97ae904ab30a2a53614c1814a5e6013","ssdeep":"192:ucZQBWvJx7fdak1pMlzP2SsQuAzIB5IaFmU5CVEGR/Y/6:ufUtFa7kSszuIPljUEGlM6","tlshash":"cb22d065d98abcb66cadac50778da0a46e01f06ec5eeb98fc3b735511a40244b982e0c","first_seen":"2025-12-27T07:38:36.88443Z","last_seen":"2026-03-22T15:27:12.674112Z","times_seen":6,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":379,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://ddooo.vip/\r\nOrigin: https://ddooo.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 18:54:17 GMT\r\nexpires: Thu, 18 Mar 2027 18:54:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nage: 333099\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-06-15T14:22:20.188131Z","times_seen":18796,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":58,"dns":1,"connect":10,"send":0,"wait":9,"receive":8,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/LangLabel.vue_vue_type_script_setup_true_lang-D7xJmFk2.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/LangLabel.vue_vue_type_script_setup_true_lang-D7xJmFk2.js HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GcVwwxXcLCJ8vGmo%2FjsyXSjnrfpoZ%2BdO2uzgmIYo0iWArn8%2BVOvyvUJ2K430yXUlxNkAnL5n1mSQ2m2FkRaDWUYrguTWNTT7fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"27b427c167dd88bc18280af1cf9fb0eb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363d8f3f6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":555,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (554)","md5":"c6013540942473798ea35bbd7907c069","sha1":"61d2de408f913770915d0797a4024e6290026f0e","sha256":"120ec7f24e8f04f80f6aa2a175b105f1414ce75333168ff83fddfac70a8fffa6","sha512":"1eb02ab3833035744aad0804c71be6b87174dd750c21b531a5c6b8770d8fa7ebe6b21fd282ca6edbc8cab979c255dac127a94e4511f17812185fe0014266c888","ssdeep":"","tlshash":"e6f08b6f1c218674c1b649183a971810504d5f6f6624ee81e29e5e135ae286db3feb28","first_seen":"2025-12-23T05:10:24.148918Z","last_seen":"2026-04-15T06:27:02.238007Z","times_seen":11,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/index-DQk8LvRc.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/index-DQk8LvRc.js HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y8fMlFzCUleWnCTce0ce%2B9IVZVfLvcHMk6PTTikkSL7bsc8X0hZgZ5sY%2Fj7UpDrmoU%2ByR9ER6FKYoXbk%2BWPurdFxCeSGMyY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c1f62966640061a5464f8ef11edc7dcd\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363d8f426e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3203,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3202)","md5":"dc00c04225e59e4999b7aa34ce160364","sha1":"ccc54e307f4f651295db73c72bd47a931013538e","sha256":"c18e5acc2185415ebaffec36d76c53913699df033a7c0355774e4d0928b68e67","sha512":"9563b9ca3ccd0be54934101da500aea3291685c2ed5fe7264d90508ced454643084e3f63f535285dbd8b963f8285a4ecd2225b23719d7a146169fe8c9f9f8cc8","ssdeep":"","tlshash":"b161836cbed49534c6fb498854270912aa1f0b19522488f2e4ae5d4c2f3e458f13ff2c","first_seen":"2026-03-22T15:26:22.518359Z","last_seen":"2026-04-15T06:27:02.234615Z","times_seen":3,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/BaseInput.vue_vue_type_style_index_0_lang-DWph6OEi.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/BaseInput.vue_vue_type_style_index_0_lang-DWph6OEi.js HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rWQG5CKLtxaWjGdWA467ttWASUvRgsgXW2YWTWXzPARcfwN4UYzfD69eBrsB%2FLpoSaPs4v8nsaMAGvaVxLH0W7aoxaL%2BS3M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f10eae702426ce2768e2d46d41dcdfbb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363d8f446e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2490,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2489)","md5":"4e4dc044838b56ff8ad745eb329b8db9","sha1":"8853083083c72306bb87bceb96ef6bd9730db299","sha256":"4d6fa40c93a08ea344f41c12e169ba32cf7429bf9b43428b0d6332d07e230a23","sha512":"cd4947d45826125ddb44016a7c06fe2d4a24f39dd4c63d1fef6e344012c0c9b07a86c6698636b49ab21c9c29c00fd5bd42d299ff1830a15cb345d5667b9ae41d","ssdeep":"","tlshash":"2d515004ec159fa3d6b39b4da5eb58a0a05c2b9f85084f5110fa561c2f5ecf8233af28","first_seen":"2026-03-22T15:26:22.521031Z","last_seen":"2026-04-15T06:27:02.258444Z","times_seen":3,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/reg-CvbjsrDp.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/reg-CvbjsrDp.js HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/assets/index-Bpf1dkiq.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WEBPmeEc1GD2Mf6idUj20MUFkQrBq8%2BvM%2BGVICBUsQSaPinmx%2B6rhsYR2AScwc%2BLmNlqcxRpRZSAEJMzBFbiBVs8C%2Bn%2BxgDUoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8699b950dbd0033939974bc65e45ee2b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363e1f5d6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93035,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c5a35f8a2ef44cd09f057316656bbfa1","sha1":"0915e8990e37fdfbfe77e8b054476f7e3c1d976f","sha256":"950c807781de79a70adf54c01b19f7f197bcdf6056c428c827391c424af2d10e","sha512":"551d9770eb79bdb9deadbed2e5324736266cfc0f0938981f2f390829d25b2ca2d5756d6eab27c3cdb2b24a5a602f12e51dcebd11d6523c9ed962177dac95a800","ssdeep":"1536:sZxWeaK4UQ/0h7LAC8sEbFsXjytspllC8tYcx8t/3jdRyrKf:uWDK3Q8h3A5s6FCj6sXlHtrxW/zdMrY","tlshash":"e193504ce0f9cefb98fb660d79074830b15e6b9fc1005ba6a3bc06555e63cd09a326d9","first_seen":"2026-03-22T15:26:22.522003Z","last_seen":"2026-03-22T15:26:22.522003Z","times_seen":1,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ddooo.vip/upload/img/693c0191202d.webp","fqdn":"api.ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"104.21.66.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 14:58:23 GMT","end":"Sun, 10 May 2026 15:56:03 GMT"},"fingerprint":{"sha1":"55:31:AB:97:A1:13:CC:64:6B:38:8D:D2:C7:B8:D7:AB:F3:71:69:8C","sha256":"BC:90:04:F3:3A:B6:08:29:E3:12:96:4C:A1:E2:3D:F3:47:66:48:E2:9D:47:E8:ED:98:1E:4D:5D:A2:4B:BC:B3"}}},"request":{"raw":"GET /upload/img/693c0191202d.webp HTTP/1.1\r\nHost: api.ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 15:25:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10162\r\nlast-modified: Fri, 12 Dec 2025 11:50:41 GMT\r\netag: \"693c0191-27b2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mj7GD0eXKSb1UyCeBLt9SH3nUDUvkJeLBloU9ThKGk1JGN%2BvH21AtIf89CNmRSMhw%2BEt8ZyE6gol3augN9CHQU%2FppTZxAn6mvchZVFA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e06363e9beab27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10162,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 225x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5b82a51ea18ac252483daab990013756","sha1":"7b9192b01e8936b0e1756154cdf8988250658b1d","sha256":"d34b09ad413dc0d2bd85679d6a6716a7c900fef528f13b6e820c9d6ba64dd577","sha512":"37559ba3c1aebb5f4c0d6321cef9bce364170166fedb9d9f77d65107d806b2edd1144585f58ee34299b0fb3c89246090b97ae904ab30a2a53614c1814a5e6013","ssdeep":"192:ucZQBWvJx7fdak1pMlzP2SsQuAzIB5IaFmU5CVEGR/Y/6:ufUtFa7kSszuIPljUEGlM6","tlshash":"cb22d065d98abcb66cadac50778da0a46e01f06ec5eeb98fc3b735511a40244b982e0c","first_seen":"2025-12-27T07:38:36.88443Z","last_seen":"2026-03-22T15:27:12.674112Z","times_seen":6,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":326,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ddooo.vip/api/public/visit","fqdn":"api.ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"104.21.66.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 14:58:23 GMT","end":"Sun, 10 May 2026 15:56:03 GMT"},"fingerprint":{"sha1":"55:31:AB:97:A1:13:CC:64:6B:38:8D:D2:C7:B8:D7:AB:F3:71:69:8C","sha256":"BC:90:04:F3:3A:B6:08:29:E3:12:96:4C:A1:E2:3D:F3:47:66:48:E2:9D:47:E8:ED:98:1E:4D:5D:A2:4B:BC:B3"}}},"request":{"raw":"OPTIONS /api/public/visit HTTP/1.1\r\nHost: api.ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,st-ctime,st-lang,st-ttgn\r\nReferer: https://ddooo.vip/\r\nOrigin: https://ddooo.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 15:25:57 GMT\r\ncontent-type: text/html;charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ddooo.vip\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type,st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KdZdz3e%2FJ%2F4l6EmD71VesCUPRHNxoN1bGdF27Ma3dodruAZopXZW1layeciaF2v92W%2Fb9Z7gv5Gs%2FnH4X4jgtKlM6Kq0FWAVJ8D1NWU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e06363efbf3b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T14:37:42.525955Z","times_seen":16445070,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/BaseAlarmLogoBtn-B1F5Xzzt.css","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/BaseAlarmLogoBtn-B1F5Xzzt.css HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMUctEesE01B02Ji%2FU3VdqOvoVfUtdkHeLwhTwEsIHxKff8J4JzkPgyRAj5VpNtqGYxs0GT7eNy%2FvEi5NBh6yfucmxNU3WmBXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b843b98f7d7569052182eead07cb3746\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363d6f376e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":374,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (373)","md5":"a0b95e2ac4d02f765d36b86d50825b05","sha1":"a6c56b78ff5416000ca81c9c385f14c4ad745e90","sha256":"018fe58c9101deb6798cb3463760d1abaf1be712f511ec85e3be65cd5de35d13","sha512":"3a38ceda1e85ec5eab12bfda941daef96627543de051677653a7d45d707214789d8cff522362480ff722358f3b78f51f5bdd95642d1442c22f8f30c2cd116ed2","ssdeep":"","tlshash":"fae0924c0d94111b7aef4e2754da4a7500288f537e330d5ea742325622c6ae4317634a","first_seen":"2025-06-18T05:12:49.455026Z","last_seen":"2026-06-15T11:44:22.061048Z","times_seen":89,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ddooo.vip/api/public/visit","fqdn":"api.ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"104.21.66.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:57.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 14:58:23 GMT","end":"Sun, 10 May 2026 15:56:03 GMT"},"fingerprint":{"sha1":"55:31:AB:97:A1:13:CC:64:6B:38:8D:D2:C7:B8:D7:AB:F3:71:69:8C","sha256":"BC:90:04:F3:3A:B6:08:29:E3:12:96:4C:A1:E2:3D:F3:47:66:48:E2:9D:47:E8:ED:98:1E:4D:5D:A2:4B:BC:B3"}}},"request":{"raw":"POST /api/public/visit HTTP/1.1\r\nHost: api.ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nContent-Type: application/json\r\nst-lang: en\r\nst-ctime: 1774193156929\r\nst-ttgn: 86fc9073175599c80a83927376f76927\r\nContent-Length: 55\r\nOrigin: https://ddooo.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":55,"data":"{\"code\":\"271555\",\"language\":\"en\",\"device\":\"windows pc\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 15:25:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 40\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ddooo.vip\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1V1DXX3dhYy2wk6XQmfKJJ5oQGbgzjJQFw4AtnEHW%2Bz83oX16fc9C9tOQHI8yGkSf7HLIiUs%2FtB7PDoXmeKIBTMtmv69Owc10JUqZnY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e06363fcc11b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dac22ea265ef2b988f6f7e6e88fd6076","sha1":"8eb3ea36343bacab1c48f88e22db10c0883d52e4","sha256":"b7c34be4da9a56e57a6dbb79e887c829a077dac9cbd3d4226d7fc20e5fddbd17","sha512":"5da4520e219e0f158cf84c790a0c0168bd7c1710a2f37e9900cb33e7c9bcab4ffa9e8bdef10cef64656a59ae5ad5a083c3872ee45729428efd78929225f89fea","ssdeep":"","tlshash":"409004111c0454435c403c4d0143475035d13574410503c0405c503cc70d0f5f445c34","first_seen":"2023-06-08T13:28:08Z","last_seen":"2026-06-13T03:38:45.118683Z","times_seen":207,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/index-4_dMG82r.css","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:55.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/index-4_dMG82r.css HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:55 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=58YOCo4n5QJvv57Ry3yvnjxPJp7cRSyBilo5CTuk%2Fni%2FsfOspn6RjNsnlaJgsSszq2CerL13ct8EyIaU4chOzmjR3T0uMhS9Nw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"02d5e162c291cb84a4551f35ab0f59ed\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e0636339de56e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":978166,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"cc7658aeeafc4de267be66af6469b0f0","sha1":"6f5265c3005f299c1d56bb3fc161ce9b1c1b6922","sha256":"a31ded33f017b0d58d343caa9c38fcf9f38a545eaf14cc12914778a718f00f4e","sha512":"7d8b4ed4f2c5617af48cc6316438fbc0b3b071f4193b014f997ffc9eee62abdc42347f277543acca49f44c41236341288c15abf1f30c419c815ebdab6a38d2ac","ssdeep":"3072:UnNIClDsIxuVSR8M+mNa8IyjYQKOxm814c5ZrHE4hB+JI2sF3QoU8XTWyicfRAZP:UnxsaR8qaeYGme5HB+2qHQ2Zguuch","tlshash":"8d25f9723701842ce9fb8e3302df6d0c7019e11a7b33466de11e5e7447aa29b976636b","first_seen":"2025-12-21T16:06:54.075454Z","last_seen":"2026-05-30T15:36:38.26803Z","times_seen":21,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/BaseInput-Bza8nYTg.css","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/BaseInput-Bza8nYTg.css HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iBr8zqYrtzAz9JjX47MW54H8b566cvVyVf0xav%2FDs3DjyTjzXyETjzg%2FxKReNhWENYe%2B1rUOTTmIHmsOPyvZQP0lFKJFeUG%2Bdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1f072beeaf6c83e94e575a93d4390f27\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363d7f3b6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1716,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1715)","md5":"2dec063ddcc835dcb02abeee35f28a19","sha1":"4de369e362b979bb2da80eae83575519cbdcff57","sha256":"13805720d9b1ee8f859d1d9c0bb28fbe2b00b92720e8faa8f364f4c0eb7c7df4","sha512":"835a0a498bc59d2be5947eac8765d6364036648e5b821a0f71cf7b9670c60c47bb0267f22da5e902608a2528e9e4147306dd09748d1e798a68f02ec17565b7ca","ssdeep":"","tlshash":"8431af0c1e50df1a18ba5ef3e1c4ea97380954b38fa38d05c040541a87969b52f7fe68","first_seen":"2025-06-18T05:12:49.455997Z","last_seen":"2026-06-09T09:38:27.834324Z","times_seen":43,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/reg-CvbjsrDp.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/reg-CvbjsrDp.js HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WEBPmeEc1GD2Mf6idUj20MUFkQrBq8%2BvM%2BGVICBUsQSaPinmx%2B6rhsYR2AScwc%2BLmNlqcxRpRZSAEJMzBFbiBVs8C%2Bn%2BxgDUoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8699b950dbd0033939974bc65e45ee2b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363d8f416e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93035,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c5a35f8a2ef44cd09f057316656bbfa1","sha1":"0915e8990e37fdfbfe77e8b054476f7e3c1d976f","sha256":"950c807781de79a70adf54c01b19f7f197bcdf6056c428c827391c424af2d10e","sha512":"551d9770eb79bdb9deadbed2e5324736266cfc0f0938981f2f390829d25b2ca2d5756d6eab27c3cdb2b24a5a602f12e51dcebd11d6523c9ed962177dac95a800","ssdeep":"1536:sZxWeaK4UQ/0h7LAC8sEbFsXjytspllC8tYcx8t/3jdRyrKf:uWDK3Q8h3A5s6FCj6sXlHtrxW/zdMrY","tlshash":"e193504ce0f9cefb98fb660d79074830b15e6b9fc1005ba6a3bc06555e63cd09a326d9","first_seen":"2026-03-22T15:26:22.522003Z","last_seen":"2026-03-22T15:26:22.522003Z","times_seen":1,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/default-TMlsSTYf.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/default-TMlsSTYf.js HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/assets/index-Bpf1dkiq.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SkDqZhmfjBx63592P%2FUegyEKO%2BcqjptA9XJgm%2F%2Ff9hO5%2FESmdzBJ2pDPl4RoLbw%2F8c5ipfdOnppuBm0SkNonu5ShjIZbEZjp0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0e7d3f697446045a214d2715a6abaf1b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363dcf526e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42410,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (42409)","md5":"6e007a65547dc1c3dd7e68dafd2b9109","sha1":"4438ee2ea7d8a7e5e783f382991530bf339bc231","sha256":"ca590ae3bea982669a29857217097c800179da5c656206e23432cb3d30eecc87","sha512":"907c4ed981195ec3152f81605eb6d32d1a3a58e185b35ccea8613193acac95d5ab185026c9e8166e808427feb40999a9673ec5ac0dc4f2f12dcd4038ec639e75","ssdeep":"768:b5nOVanOhfyOZ1ykQa5OGnOALaQfyOejO4VOsOJO2af2DidotqmLme3+xG3GJ+k/:DJh/cH+xdPQfk+gG4","tlshash":"f21395815807933fc5729a4e4c466482328c5fdbd00c6fb6f2b4d52b86cac797a3af59","first_seen":"2025-12-23T05:10:24.11259Z","last_seen":"2026-04-15T06:27:02.244645Z","times_seen":11,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/BaseAlarmLogoBtn.vue_vue_type_style_index_0_lang-BPfHipwx.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/BaseAlarmLogoBtn.vue_vue_type_style_index_0_lang-BPfHipwx.js HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/assets/default-TMlsSTYf.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gmzMCMEuQjCESq6MKJFdsGSVAgFHOoODwtGnkw%2BIMP5hLP1VVDLLbldynVl42YdOjU8VRcPfPYbor36CK9bTp6hHzqfk0anrkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"99acfe3d79c95c9bf9997825285f7675\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363e0f576e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":531,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (530)","md5":"8edce84d2e59a399608d53ee98805e2e","sha1":"d1893249946a484afa3652854f7159ab1327e172","sha256":"719b688c8f90276708468b027a0d680aa74a7fd04ac70d4e8c2ad16c183fbc68","sha512":"72bb32e293ce6fb0ed5cc64e2394018b19ff6cc37ef6e6400be39ef2c3e7682ea3d66a5f7e50777d67e610110e01f605053dfba89a88f3df1bbf7f3d6384043e","ssdeep":"","tlshash":"c4f0c01c5c118af9823701453e5620a204580f7e665cbe81e9db18119fe20bc372b72c","first_seen":"2025-12-23T05:10:24.142022Z","last_seen":"2026-04-15T06:27:02.231112Z","times_seen":11,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/LangLabel.vue_vue_type_script_setup_true_lang-D7xJmFk2.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/LangLabel.vue_vue_type_script_setup_true_lang-D7xJmFk2.js HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/assets/default-TMlsSTYf.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GcVwwxXcLCJ8vGmo%2FjsyXSjnrfpoZ%2BdO2uzgmIYo0iWArn8%2BVOvyvUJ2K430yXUlxNkAnL5n1mSQ2m2FkRaDWUYrguTWNTT7fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"27b427c167dd88bc18280af1cf9fb0eb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363e0f566e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":555,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (554)","md5":"c6013540942473798ea35bbd7907c069","sha1":"61d2de408f913770915d0797a4024e6290026f0e","sha256":"120ec7f24e8f04f80f6aa2a175b105f1414ce75333168ff83fddfac70a8fffa6","sha512":"1eb02ab3833035744aad0804c71be6b87174dd750c21b531a5c6b8770d8fa7ebe6b21fd282ca6edbc8cab979c255dac127a94e4511f17812185fe0014266c888","ssdeep":"","tlshash":"e6f08b6f1c218674c1b649183a971810504d5f6f6624ee81e29e5e135ae286db3feb28","first_seen":"2025-12-23T05:10:24.148918Z","last_seen":"2026-04-15T06:27:02.238007Z","times_seen":11,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/BaseInput.vue_vue_type_style_index_0_lang-DWph6OEi.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/BaseInput.vue_vue_type_style_index_0_lang-DWph6OEi.js HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/assets/reg-CvbjsrDp.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rWQG5CKLtxaWjGdWA467ttWASUvRgsgXW2YWTWXzPARcfwN4UYzfD69eBrsB%2FLpoSaPs4v8nsaMAGvaVxLH0W7aoxaL%2BS3M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f10eae702426ce2768e2d46d41dcdfbb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363e5f676e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2490,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2489)","md5":"4e4dc044838b56ff8ad745eb329b8db9","sha1":"8853083083c72306bb87bceb96ef6bd9730db299","sha256":"4d6fa40c93a08ea344f41c12e169ba32cf7429bf9b43428b0d6332d07e230a23","sha512":"cd4947d45826125ddb44016a7c06fe2d4a24f39dd4c63d1fef6e344012c0c9b07a86c6698636b49ab21c9c29c00fd5bd42d299ff1830a15cb345d5667b9ae41d","ssdeep":"","tlshash":"2d515004ec159fa3d6b39b4da5eb58a0a05c2b9f85084f5110fa561c2f5ecf8233af28","first_seen":"2026-03-22T15:26:22.521031Z","last_seen":"2026-04-15T06:27:02.258444Z","times_seen":3,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/index-Bpf1dkiq.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:55.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/index-Bpf1dkiq.js HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 22 Mar 2026 15:25:55 GMT\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\netag: W/\"5d2db2df3fc65c16e2195e716e1e2972\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncf-cache-status: REVALIDATED\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rd7Jdb1ccPvRf3DWH4G7sKUi7LYgG4aK2NCdD2jt4AJa72FhPZ7f1FwVnXwucveD0EW1pfvhoMT6Csg3letN%2BtzYYCFTW4VKqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9e0636339de46e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1318846,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16718)","md5":"c97e6615e1be56489c91bb991bfabe3a","sha1":"fd493614bce27ae61cf79b2cb42a986bf2b0cea2","sha256":"04adb88e6552044cc78f1f91f4c63a358d2463d044a5fe797de90b0ebdb8947c","sha512":"82118cd6063931d8708f10f041691b56f349521a57a87d527eecd10e7841984226f6305e6751af24af0dd6e4b4ee379dc9d7e8d28ca5504fc13835f182dfbf95","ssdeep":"12288:UqbvNHlR30T98cw1NMv+3Lt7NhnuuTMgzPpVo2Q:xbvNH4aV1Ne+3V3nuzgzM","tlshash":"482539282a5bf344e419c0dbfa373c84c59de18aa00b64d15f7547b31ba2797eaacd13","first_seen":"2025-12-23T05:10:24.126903Z","last_seen":"2026-04-15T06:27:02.259183Z","times_seen":11,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ddooo.vip/api/public/get_lang_json?d=1774193156264\u0026lang=en","fqdn":"api.ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"104.21.66.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 14:58:23 GMT","end":"Sun, 10 May 2026 15:56:03 GMT"},"fingerprint":{"sha1":"55:31:AB:97:A1:13:CC:64:6B:38:8D:D2:C7:B8:D7:AB:F3:71:69:8C","sha256":"BC:90:04:F3:3A:B6:08:29:E3:12:96:4C:A1:E2:3D:F3:47:66:48:E2:9D:47:E8:ED:98:1E:4D:5D:A2:4B:BC:B3"}}},"request":{"raw":"OPTIONS /api/public/get_lang_json?d=1774193156264\u0026lang=en HTTP/1.1\r\nHost: api.ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://ddooo.vip/\r\nOrigin: https://ddooo.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\ncontent-type: text/html;charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ddooo.vip\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1DPoLx2LUvGLkDPcuKZFifSjn8M%2FW5kO8yVSrBsWFjnRBAWiXymltQBfeqD0JSN8%2Fqv%2FrJDPI2LmGkZkHPBET62N%2B9xs2kyOzBO1Ldk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e06363acb14b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T14:37:42.525955Z","times_seen":16445070,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/default-TMlsSTYf.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/default-TMlsSTYf.js HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SkDqZhmfjBx63592P%2FUegyEKO%2BcqjptA9XJgm%2F%2Ff9hO5%2FESmdzBJ2pDPl4RoLbw%2F8c5ipfdOnppuBm0SkNonu5ShjIZbEZjp0w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0e7d3f697446045a214d2715a6abaf1b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363d8f3d6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42410,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (42409)","md5":"6e007a65547dc1c3dd7e68dafd2b9109","sha1":"4438ee2ea7d8a7e5e783f382991530bf339bc231","sha256":"ca590ae3bea982669a29857217097c800179da5c656206e23432cb3d30eecc87","sha512":"907c4ed981195ec3152f81605eb6d32d1a3a58e185b35ccea8613193acac95d5ab185026c9e8166e808427feb40999a9673ec5ac0dc4f2f12dcd4038ec639e75","ssdeep":"768:b5nOVanOhfyOZ1ykQa5OGnOALaQfyOejO4VOsOJO2af2DidotqmLme3+xG3GJ+k/:DJh/cH+xdPQfk+gG4","tlshash":"f21395815807933fc5729a4e4c466482328c5fdbd00c6fb6f2b4d52b86cac797a3af59","first_seen":"2025-12-23T05:10:24.11259Z","last_seen":"2026-04-15T06:27:02.244645Z","times_seen":11,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/PhoneSelect-DFHaJ4bv.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/PhoneSelect-DFHaJ4bv.js HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R18pGekKNCoJHLjcqylmMzgW8JXflUXvMUn%2Bqi%2FzPAh5bt5rgnWqt9vEesSanddq8c52%2B9Iw2jCupsf%2F7c0lM3H0XVwKhU0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7b04ad649b9561cac8b822409064858d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363d8f436e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15571,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (14209)","md5":"9decd3cfb1ae7bdf1e430dd500e06b36","sha1":"c6620c9cebd44fa1c4bae30c599e5726615f25b9","sha256":"8c8b1ae377b596a225e34cf3174f7c101c6d1afa5c4c4ba60920ed3b1114194b","sha512":"72b3f8347eafbba8edc6b115b082134f92b5691353d945b9d07637a3ee7296436f7e3263f1e1ebd1e58446c38870896a5eb893772f3f969fa5da64a0d7333329","ssdeep":"192:Ejxs/hrvvvkR1aCuhPU8mZsdisBTrP2BrhuGQ7w/yYf8/TkqqjNeGQTuOalAtFht:uxj5a28wa8H5tnzxaF","tlshash":"8f62bd6b00b017a6fbf19321f101f8a663c91e862857a5f38dbf136259a00f7b5cb65c","first_seen":"2026-03-22T15:26:22.52755Z","last_seen":"2026-04-15T06:27:02.250056Z","times_seen":3,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/BaseUserTab.vue_vue_type_style_index_0_lang-CDbasudD.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/BaseUserTab.vue_vue_type_style_index_0_lang-CDbasudD.js HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bnN%2F1B70zkx2utpU5%2BH9tbUYKe5%2FXvRIKrwi1SrBfVruIq9TVRrw4JzXiJdcv%2BbilgeyTR1UFtP629LJ%2Fr8wuSc45YDDJdlXjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9f2dd74fb38ff5007b4983eeafaa290c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363d8f466e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":948,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (947)","md5":"f10c49c4754aac60c43812e51009ffa6","sha1":"7989a1e777accc45a907a3431dbc25c4e3a94186","sha256":"1088c71654c0574d2362594d20a2720cf37bc15486588dc2385dcb97b2d26da2","sha512":"1900a29dd2664e8a6ed04789ccf6736a2b14d302c6b578f1ba5c24558f51c908199c76594282b1cd3f9669211a7d0c799fc794d24c2394752cbe12221d4f08d7","ssdeep":"","tlshash":"d811489daca9cfb604f205a82ea71079e094bb4e9614cd26d05e5431325fdf9e68d32c","first_seen":"2025-12-23T05:10:24.158079Z","last_seen":"2026-04-15T06:27:02.249273Z","times_seen":11,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/BaseLogo.vue_vue_type_script_setup_true_lang-WeLZ3sgr.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/BaseLogo.vue_vue_type_script_setup_true_lang-WeLZ3sgr.js HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/assets/default-TMlsSTYf.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lwvBSGNklMaNH3vO0xDXXtFRh7k3VdpdWfOHBIQp6X%2FCRTAuc5AC%2BPWt2mdcJd5D9EJ4dlU0uBib946pR8n%2F2%2BF%2F%2Fy4XiUo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"af61e8600ba6ba43ef58a3b6df3faa16\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363e0f586e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":585,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (584)","md5":"b6001906d50bb482c7ebc845aecb6a0e","sha1":"e1e033fe9b54e6050a3070ec40638b38adcb8357","sha256":"d2f859c8ebaf127b17fd05d4632a28dff9383e02beb021e746a26043e40b1739","sha512":"61267833285fc5e86fcb5a89116f26ad7f25a06f0af3afe4e53013981907aa5c6518249f39d69b55cc157b99d0e2b1099c5c2ad63d01695977ee789aebf2ebd3","ssdeep":"","tlshash":"1cf0e14e5d6e41fa91a344582a4b9081210c4e5ec634af80f2f82735a241c5d741db38","first_seen":"2025-12-23T05:10:24.129986Z","last_seen":"2026-04-15T06:27:02.248487Z","times_seen":11,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/star-sky-BSNOjsrG.png","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/star-sky-BSNOjsrG.png HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/assets/index-4_dMG82r.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 57671\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"37f29a26a0ca2bee863699dcf1374f89\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9w8u%2FbRkKqMaT9CrffBZ8y%2FEpnILzzafINqrXq0y5k3XQuK45jPZwFbXqAbBb8tcAPjOBI6Eyif2i0sTeuRLgsebZv4XDPbpkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 22 Mar 2026 15:25:57 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9e06363eef746e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57671,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 634, 8-bit colormap, non-interlaced","md5":"814308437a9d767385f6997c89c5e18e","sha1":"4ce561c86e1797aad37b38460d4a6c2f056a8cc6","sha256":"70243c216383accd1b9398d395385088e92d434e2ba07304abda32a4f535efbf","sha512":"970f4b59a8d385b36ed8ecd441acbf881ad94eafb9c10f6524f05dc7f249bc6764764b6d7a76df673264fb9507c973d4e9bbfd5528f68ae5ee983eca871311dc","ssdeep":"1536:3LswFSEt1UM9U0pJxCPqidHDptT+zCzvd570X:bs7EYAU0pOC+H6z+d570X","tlshash":"7a4302b45aa812cbe67e6483d46fe4d40101bdfdd38dc658f5e310cc2350ba689f66ba","first_seen":"2024-10-12T13:51:31.530327Z","last_seen":"2026-06-09T09:38:27.835167Z","times_seen":5,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuGKYAZ9hiA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuGKYAZ9hiA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://ddooo.vip/\r\nOrigin: https://ddooo.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24452\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 02:01:47 GMT\r\nexpires: Mon, 22 Mar 2027 02:01:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:36:19 GMT\r\ncontent-type: font/woff2\r\nage: 48249\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24452,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24452, version 1.0","md5":"2ede57db1a3a5f41f40467e7a43a1dd4","sha1":"e0d61f6dc511d64a072b2f4dc94e155ecf1bb6f6","sha256":"f9a06e79cd3a2a20951c0f0e28f66dd0e6d3fda73911d640a2125c8fcb78f21a","sha512":"a30d204efb2a66231f29804b8c1e467d61a741b0252eccb40aea60206bd4d5cdb0a32a76cb01d1ba8ba0c73469d10fc55df1d8e54ea3b55b6b75b17e94afc80b","ssdeep":"384:WuaNAiwkOHiuWl18daDX7+rEvHG297z5lzWMTSbXhVR7ebvio772036BhuJJRiVF:zaKfkOHiJEdWX+svP5m7R7eTio7JKWHC","tlshash":"79b2e03132ea530e5b14c43c9537287e5eca2fe78aa93e5e9fd5d004b2104d6836fe06","first_seen":"2025-05-30T14:20:15.679609Z","last_seen":"2026-06-15T14:42:08.491641Z","times_seen":4751,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ddooo.vip/api/public/init?d=1774193155645","fqdn":"api.ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"104.21.66.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 14:58:23 GMT","end":"Sun, 10 May 2026 15:56:03 GMT"},"fingerprint":{"sha1":"55:31:AB:97:A1:13:CC:64:6B:38:8D:D2:C7:B8:D7:AB:F3:71:69:8C","sha256":"BC:90:04:F3:3A:B6:08:29:E3:12:96:4C:A1:E2:3D:F3:47:66:48:E2:9D:47:E8:ED:98:1E:4D:5D:A2:4B:BC:B3"}}},"request":{"raw":"GET /api/public/init?d=1774193155645 HTTP/1.1\r\nHost: api.ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nst-ctime: 1774193155645\r\nst-ttgn: 8447f4b8b2c0a6a0b983d6a13090a352\r\nOrigin: https://ddooo.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ddooo.vip\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zan9jYZ2QRDVyYJpFBkvSH%2BDxsvf6e9KLIuz9EdsivlHnLCUcvgozkzK2eDvOiQjsAKgCRF9v3nZtlgbhIUj06kTYDF4E%2BLl7T2Kbv8%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9e0636399cf8fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6849,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6118e4cde960c291a70f4c20991deaa6","sha1":"daf0a4ad0e9712e3e24620f8efc5e0f2db715348","sha256":"5a5296ca03bc6a0b7e90630896a3853d91d46f0109881bd22d1f8886f7497a36","sha512":"0d04801f765e3ecd5d9f44bb4567af456bb62af11ab3c0f20fa1396651859a4153124b8c56c6aca8b71fb2b95506531ae3182ee4db5ec6f0a7ebe2646ddda26c","ssdeep":"192:IlS2qBgV3yRyhywbyRHeDFDzU/Ptj+f47N/kILjf/FOaGnOW:J6S/kstra","tlshash":"fde1eb15205a9c7be5e7bed426cb71188d4d3c9feccc8fa69f2deda6059c092201e643","first_seen":"2026-03-22T15:26:22.531488Z","last_seen":"2026-03-22T15:27:12.72714Z","times_seen":2,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":15,"connect":8,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZ9hiA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZ9hiA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://ddooo.vip/\r\nOrigin: https://ddooo.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 02:01:47 GMT\r\nexpires: Mon, 22 Mar 2027 02:01:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:36:19 GMT\r\ncontent-type: font/woff2\r\nage: 48249\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"da03732a27e16543f09d6a6a62b0cdd4","sha1":"68f645c6b6ff12e25c54b13d4ed119e631dcbb26","sha256":"8909904ab6c872eb994093482a88a28eca2cd95912d7b6fecd72103b0dc07edc","sha512":"8f8a1b22d7fedc8a5c0b75a237932fa00b71d25b1c13d1ec6f9c31fbeceba5d7e1a728a06fc3c2abd803337617394f91d2cc08e9798417b73e3587da3b9d882e","ssdeep":"384:LDIByvvcpxzNfjZ7amidC7gcUH6rpfmzO59sT+m+WFg5ivhjpaBNSS6X:LMBYabZ7aXvaVfSCWSogoSSSi","tlshash":"fdb2e0e97b5be3e2e077c67d41bbdf94e64c2860435e4b830e24be14e2d24fe6484416","first_seen":"2025-05-30T09:01:41.826892Z","last_seen":"2026-06-15T14:42:08.504053Z","times_seen":13687,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":90,"dns":1,"connect":7,"send":0,"wait":11,"receive":3,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ddooo.vip/api/public/home?d=1774193156276\u0026language_type=en","fqdn":"api.ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"104.21.66.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 14:58:23 GMT","end":"Sun, 10 May 2026 15:56:03 GMT"},"fingerprint":{"sha1":"55:31:AB:97:A1:13:CC:64:6B:38:8D:D2:C7:B8:D7:AB:F3:71:69:8C","sha256":"BC:90:04:F3:3A:B6:08:29:E3:12:96:4C:A1:E2:3D:F3:47:66:48:E2:9D:47:E8:ED:98:1E:4D:5D:A2:4B:BC:B3"}}},"request":{"raw":"OPTIONS /api/public/home?d=1774193156276\u0026language_type=en HTTP/1.1\r\nHost: api.ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://ddooo.vip/\r\nOrigin: https://ddooo.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\ncontent-type: text/html;charset=utf-8\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ddooo.vip\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qndVR5S0OIDB0KGG8K33xwZWy9Xl%2BuuUXGXLkPaiO1O8%2FlNUgW0xXCRD%2F%2BpAwukIsLIpwG3BXTAYyAyOLjzp4EDykuMx5mAtVsRAFII%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e06363adb44b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T14:37:42.525955Z","times_seen":16445070,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ddooo.vip/upload/img/693c0191202d.webp","fqdn":"api.ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"104.21.66.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 14:58:23 GMT","end":"Sun, 10 May 2026 15:56:03 GMT"},"fingerprint":{"sha1":"55:31:AB:97:A1:13:CC:64:6B:38:8D:D2:C7:B8:D7:AB:F3:71:69:8C","sha256":"BC:90:04:F3:3A:B6:08:29:E3:12:96:4C:A1:E2:3D:F3:47:66:48:E2:9D:47:E8:ED:98:1E:4D:5D:A2:4B:BC:B3"}}},"request":{"raw":"GET /upload/img/693c0191202d.webp HTTP/1.1\r\nHost: api.ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 15:25:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10162\r\nlast-modified: Fri, 12 Dec 2025 11:50:41 GMT\r\netag: \"693c0191-27b2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=magpy2brMEAftAuIw0UQkZP41j2%2BM%2FQRne74DSaRhY%2BV4UTDzdsAkZnx91iYyyaOAmKAJQFHmiNz6s8WFigF6QN39VIVI6NohDgAjh0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e06363e3bd5b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10162,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 225x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5b82a51ea18ac252483daab990013756","sha1":"7b9192b01e8936b0e1756154cdf8988250658b1d","sha256":"d34b09ad413dc0d2bd85679d6a6716a7c900fef528f13b6e820c9d6ba64dd577","sha512":"37559ba3c1aebb5f4c0d6321cef9bce364170166fedb9d9f77d65107d806b2edd1144585f58ee34299b0fb3c89246090b97ae904ab30a2a53614c1814a5e6013","ssdeep":"192:ucZQBWvJx7fdak1pMlzP2SsQuAzIB5IaFmU5CVEGR/Y/6:ufUtFa7kSszuIPljUEGlM6","tlshash":"cb22d065d98abcb66cadac50778da0a46e01f06ec5eeb98fc3b735511a40244b982e0c","first_seen":"2025-12-27T07:38:36.88443Z","last_seen":"2026-03-22T15:27:12.674112Z","times_seen":6,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":379,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ddooo.vip/upload/img/693c0191202d.webp","fqdn":"api.ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"104.21.66.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 14:58:23 GMT","end":"Sun, 10 May 2026 15:56:03 GMT"},"fingerprint":{"sha1":"55:31:AB:97:A1:13:CC:64:6B:38:8D:D2:C7:B8:D7:AB:F3:71:69:8C","sha256":"BC:90:04:F3:3A:B6:08:29:E3:12:96:4C:A1:E2:3D:F3:47:66:48:E2:9D:47:E8:ED:98:1E:4D:5D:A2:4B:BC:B3"}}},"request":{"raw":"GET /upload/img/693c0191202d.webp HTTP/1.1\r\nHost: api.ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 15:25:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10162\r\nlast-modified: Fri, 12 Dec 2025 11:50:41 GMT\r\netag: \"693c0191-27b2\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kiLRXKL7oCFywxmVLQnUtdRLTu1t8od6O%2BcsceqkxotUZDAQUmRDBZsBH7BDkDDeHudOH1RDrMNPEqa23EGe8LY857SuUJSMArDbISs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9e06363e3bd6b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10162,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 225x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5b82a51ea18ac252483daab990013756","sha1":"7b9192b01e8936b0e1756154cdf8988250658b1d","sha256":"d34b09ad413dc0d2bd85679d6a6716a7c900fef528f13b6e820c9d6ba64dd577","sha512":"37559ba3c1aebb5f4c0d6321cef9bce364170166fedb9d9f77d65107d806b2edd1144585f58ee34299b0fb3c89246090b97ae904ab30a2a53614c1814a5e6013","ssdeep":"192:ucZQBWvJx7fdak1pMlzP2SsQuAzIB5IaFmU5CVEGR/Y/6:ufUtFa7kSszuIPljUEGlM6","tlshash":"cb22d065d98abcb66cadac50778da0a46e01f06ec5eeb98fc3b735511a40244b982e0c","first_seen":"2025-12-27T07:38:36.88443Z","last_seen":"2026-03-22T15:27:12.674112Z","times_seen":6,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/PhoneSelect-DFHaJ4bv.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/PhoneSelect-DFHaJ4bv.js HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/assets/reg-CvbjsrDp.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R18pGekKNCoJHLjcqylmMzgW8JXflUXvMUn%2Bqi%2FzPAh5bt5rgnWqt9vEesSanddq8c52%2B9Iw2jCupsf%2F7c0lM3H0XVwKhU0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7b04ad649b9561cac8b822409064858d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363e5f656e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15571,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (14209)","md5":"9decd3cfb1ae7bdf1e430dd500e06b36","sha1":"c6620c9cebd44fa1c4bae30c599e5726615f25b9","sha256":"8c8b1ae377b596a225e34cf3174f7c101c6d1afa5c4c4ba60920ed3b1114194b","sha512":"72b3f8347eafbba8edc6b115b082134f92b5691353d945b9d07637a3ee7296436f7e3263f1e1ebd1e58446c38870896a5eb893772f3f969fa5da64a0d7333329","ssdeep":"192:Ejxs/hrvvvkR1aCuhPU8mZsdisBTrP2BrhuGQ7w/yYf8/TkqqjNeGQTuOalAtFht:uxj5a28wa8H5tnzxaF","tlshash":"8f62bd6b00b017a6fbf19321f101f8a663c91e862857a5f38dbf136259a00f7b5cb65c","first_seen":"2026-03-22T15:26:22.52755Z","last_seen":"2026-04-15T06:27:02.250056Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/#/reg?ref=271555","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-22T15:25:54.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 15:25:54 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5aGk6P6EBKtvflKO0MwRXVIi7w9hiZ2xp4BDDu%2BDa4aWbHRJ1%2FIABXG7tqp3gLmIIhfy4Nts2t1ZPJpL68mGFEFwp2H0HsPs1Q%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e0636326917bc80-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10439,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"8771301af99e9cbe90d1e6ef0c08d1a7","sha1":"6182fb7a2f7c9fe88a45fac6b26b1c5b65cdaa1e","sha256":"ed6d38df78acb93ecf0626fcfc8fe9b8f9c9c6c673541603bc5d3ed6a8ef4250","sha512":"4a7b13bedb5997c563fad6157eec9f38a3790b03a2faf0dfe1f3ae7b059e86dc469fe9ab435e7c213454c3b46197ef277dd7920004ffd70251bec75423572e40","ssdeep":"192:SUYfkdoq1aBIBksXZhu8M0k9X+T60YDIVkKy5cbjlxixIb8IuQGthsriMHLqj6c2:xYKkBzsju8pk9X+OIjlYAuN4qLl4","tlshash":"99221f5b2ce66028630370ba9d7ff50a7621001b1998ec007d0cd7345f99a7dabb5eed","first_seen":"2025-12-23T05:10:24.117408Z","last_seen":"2026-04-15T06:27:02.25702Z","times_seen":11,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":52,"dns":21,"connect":8,"send":0,"wait":54,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:55.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sc-static.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 22 Oct 2025 00:00:00 GMT","end":"Fri, 20 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:63:7D:63:F2:DF:8F:C5:65:EF:16:8E:06:3E:E4:66:D9:41:67:CD","sha256":"91:A8:D7:CD:20:36:14:EC:9A:D5:10:BC:DD:44:F1:9D:26:20:78:F8:92:93:7B:37:6A:F8:E9:7B:FC:7E:72:66"}}},"request":{"raw":"GET /scevent.min.js HTTP/1.1\r\nHost: sc-static.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript;charset=utf-8\r\ncontent-length: 24779\r\nserver: CloudFront\r\ndate: Sun, 22 Mar 2026 15:25:55 GMT\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncache-control: private, s-maxage=0, max-age=600\r\nset-cookie: X-AB=b8d7372f99494c198cd57e1dbac9557f;max-age=86400;expires=Mon, 23 Mar 2026 15:25:55 GMT;Path=/scevent.min.js;Secure;SameSite=None\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 3B5jUgMuw0qE5j_TDVXYgJ_f3qlVyqyV5F161OZ2UuuY_LwTXsJYzg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":58763,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (58736)","md5":"fee4b1e586b7632d54147dd3f136e8b4","sha1":"17de2caa754fe6fae6342bd4b1370bcc1bdb6eda","sha256":"a7fb860e2b465b3fd03b62d06f21f815adbaba16da41f57ed691331f42f6f583","sha512":"24a6e096b3f80d7ca0d3bb182ea9854b1e2a35b586fcc3f3039faeac745415b9836caa6b456afc3e2146ce23213ecb4c6d5230aaf9c012b5cc8d1ec548496795","ssdeep":"1536:kQ870ziaawzjPOevVJm0tlsuHrih9HHVZ1GJV51kxx0Kb:78ahTl49dx0G","tlshash":"2043d78cb7e9b02503973472497f541be33bb9646c0bc650c526e5883dbc69e9237eac","first_seen":"2026-03-17T17:35:04.652559Z","last_seen":"2026-03-25T18:42:07.46855Z","times_seen":911,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":10,"dns":11,"connect":1,"send":0,"wait":40,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/favicon.ico","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:55.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aLYZpzpc2vlf2GhVux7z6blyXW3smaWvF8Z3bUzpeRyOEIGvKROmdhjR%2Bz67UCx9wjctjCjtEORrnr9lqQpkuN29uorLf6w1%2BQ%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ndate: Sun, 22 Mar 2026 15:25:55 GMT\r\nserver: cloudflare\r\ncf-ray: 9e063637de7c6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10439,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"8771301af99e9cbe90d1e6ef0c08d1a7","sha1":"6182fb7a2f7c9fe88a45fac6b26b1c5b65cdaa1e","sha256":"ed6d38df78acb93ecf0626fcfc8fe9b8f9c9c6c673541603bc5d3ed6a8ef4250","sha512":"4a7b13bedb5997c563fad6157eec9f38a3790b03a2faf0dfe1f3ae7b059e86dc469fe9ab435e7c213454c3b46197ef277dd7920004ffd70251bec75423572e40","ssdeep":"192:SUYfkdoq1aBIBksXZhu8M0k9X+T60YDIVkKy5cbjlxixIb8IuQGthsriMHLqj6c2:xYKkBzsju8pk9X+OIjlYAuN4qLl4","tlshash":"99221f5b2ce66028630370ba9d7ff50a7621001b1998ec007d0cd7345f99a7dabb5eed","first_seen":"2025-12-23T05:10:24.117408Z","last_seen":"2026-04-15T06:27:02.25702Z","times_seen":11,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ddooo.vip/api/public/get_lang_json?d=1774193156264\u0026lang=en","fqdn":"api.ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"104.21.66.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 14:58:23 GMT","end":"Sun, 10 May 2026 15:56:03 GMT"},"fingerprint":{"sha1":"55:31:AB:97:A1:13:CC:64:6B:38:8D:D2:C7:B8:D7:AB:F3:71:69:8C","sha256":"BC:90:04:F3:3A:B6:08:29:E3:12:96:4C:A1:E2:3D:F3:47:66:48:E2:9D:47:E8:ED:98:1E:4D:5D:A2:4B:BC:B3"}}},"request":{"raw":"GET /api/public/get_lang_json?d=1774193156264\u0026lang=en HTTP/1.1\r\nHost: api.ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nst-lang: en\r\nst-ctime: 1774193156264\r\nst-ttgn: 369b5a68f4f337083e331adcc632fea5\r\nOrigin: https://ddooo.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WO7mNAnINCksefDnmQSgUxss0ZFTaP%2B9X%2FMkwL8fithvTX6Z%2FnYCtuPfdV%2FKcth6x%2BKxj66eIUG7sORYrQehByjw5lpHuSDHqzQI4Uc%3D\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ddooo.vip\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e06363bbb66b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28221,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4dc696d167f65a8bb5e05964af550a44","sha1":"da43badbf9bf06a875b911307c11f4c08613b73c","sha256":"9a36aef07a58cdf287e673fa6c3b2ee0c6a3159252d44ee13c571bfaeb09c2a8","sha512":"023c02d5efad933ddba469b9b9df580aa140729747a7ada529b1b374b28d644e12ca6e494b898c0a7433fad548e1ae5475d058028dd22db83944df77eb7fee6b","ssdeep":"768:ddeJv+SvU0zOorYXuIWB6yCvmBX961VC/pM2r:ddO++zOoLIWIyCE9","tlshash":"40c2b44d26170e779fd34bc174ab2e1626fc22d30285484e48ed892852def59f37f68a","first_seen":"2025-11-09T05:08:26.489196Z","last_seen":"2026-03-25T09:59:51.702447Z","times_seen":35,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/BaseLogo.vue_vue_type_script_setup_true_lang-WeLZ3sgr.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/BaseLogo.vue_vue_type_script_setup_true_lang-WeLZ3sgr.js HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lwvBSGNklMaNH3vO0xDXXtFRh7k3VdpdWfOHBIQp6X%2FCRTAuc5AC%2BPWt2mdcJd5D9EJ4dlU0uBib946pR8n%2F2%2BF%2F%2Fy4XiUo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"af61e8600ba6ba43ef58a3b6df3faa16\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363d8f406e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":585,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (584)","md5":"b6001906d50bb482c7ebc845aecb6a0e","sha1":"e1e033fe9b54e6050a3070ec40638b38adcb8357","sha256":"d2f859c8ebaf127b17fd05d4632a28dff9383e02beb021e746a26043e40b1739","sha512":"61267833285fc5e86fcb5a89116f26ad7f25a06f0af3afe4e53013981907aa5c6518249f39d69b55cc157b99d0e2b1099c5c2ad63d01695977ee789aebf2ebd3","ssdeep":"","tlshash":"1cf0e14e5d6e41fa91a344582a4b9081210c4e5ec634af80f2f82735a241c5d741db38","first_seen":"2025-12-23T05:10:24.129986Z","last_seen":"2026-04-15T06:27:02.248487Z","times_seen":11,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:55.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Sun, 22 Mar 2026 15:25:55 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 10 Mar 2026 10:53:09 GMT\r\netag: W/\"69aff815-1c106\"\r\nexpires: Thu, 26 Mar 2026 15:25:55 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114950,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"bb0a2fecf6cd27fba9cd29610fd2ccdc","sha1":"7546ed807d56be081be97fa1e4859381ecccf58e","sha256":"dc67f1e084e069a3fb629f3154765856fe0aa805a4e138bc42c228bc3d656a78","sha512":"5350795e68c371956350f88354aac62900d7fc5974817e93f49f218fa60becda436da0a8bf17d6239e2ef882cee0b18bfe66e181baa6f1ca04b57817c2920166","ssdeep":"1536:pO5TpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:s5TpRdfcKFU7Rx1H","tlshash":"31b33e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","first_seen":"2026-03-10T21:38:17.367441Z","last_seen":"2026-06-14T13:52:36.655198Z","times_seen":766,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":132,"dns":0,"connect":21,"send":0,"wait":21,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ddooo.vip/api/public/init?d=1774193155645","fqdn":"api.ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"104.21.66.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:55.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 14:58:23 GMT","end":"Sun, 10 May 2026 15:56:03 GMT"},"fingerprint":{"sha1":"55:31:AB:97:A1:13:CC:64:6B:38:8D:D2:C7:B8:D7:AB:F3:71:69:8C","sha256":"BC:90:04:F3:3A:B6:08:29:E3:12:96:4C:A1:E2:3D:F3:47:66:48:E2:9D:47:E8:ED:98:1E:4D:5D:A2:4B:BC:B3"}}},"request":{"raw":"OPTIONS /api/public/init?d=1774193155645 HTTP/1.1\r\nHost: api.ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://ddooo.vip/\r\nOrigin: https://ddooo.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ddooo.vip\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B9lMgbWPJDnC6b1uwFOEVr%2B%2F%2BxgffK6XCT78Xv8IZevfga4ugryjBfi%2FGalMPnOTX7DO93pU2mOGyBmUWIwzQdLnbfxo10PJF5Z48Qk%3D\"}]}\r\ncf-ray: 9e0636373f76618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T14:37:42.525955Z","times_seen":16445070,"resource_available":true,"data":null}},"time_used":478,"timings":{"blocked":50,"dns":13,"connect":8,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ddooo.vip/api/public/home?d=1774193156276\u0026language_type=en","fqdn":"api.ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"104.21.66.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 14:58:23 GMT","end":"Sun, 10 May 2026 15:56:03 GMT"},"fingerprint":{"sha1":"55:31:AB:97:A1:13:CC:64:6B:38:8D:D2:C7:B8:D7:AB:F3:71:69:8C","sha256":"BC:90:04:F3:3A:B6:08:29:E3:12:96:4C:A1:E2:3D:F3:47:66:48:E2:9D:47:E8:ED:98:1E:4D:5D:A2:4B:BC:B3"}}},"request":{"raw":"GET /api/public/home?d=1774193156276\u0026language_type=en HTTP/1.1\r\nHost: api.ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nst-lang: en\r\nst-ctime: 1774193156276\r\nst-ttgn: 42a3b537df84915793043ec9c85a3683\r\nOrigin: https://ddooo.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QWdYBwT%2BOM7NMmRGs%2BsO6ohWhrxbB5hmb3DJ%2FfEXRUTg4DUVrUHVCQYLdtC8ASh8LmlBO1kodW86sHh%2Byg18FPhXBPENj8bc42wEDX0%3D\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ddooo.vip\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e06363bbb68b27a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13059,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ad2b0670dd652957b58aa7c8564b57c6","sha1":"5e202c1f003c20bfabbd50b8baa0d0840fe1a8bc","sha256":"88b767492b9a645ea07b059cde9dddc65850adfa5ac844b842b057207a99d13d","sha512":"fa85e9222ad29db5bec402634a1ce425462e2c2111033e43642d17ef71885b155ffb60da258756e21f736e4bbd96eaf1069833706d8adfff7aa0a901a974b33e","ssdeep":"192:IPS3oZeu+9Tji33MTr8MQRMzoGN44qk4/rkwozWljyDbPqVQUiMwfonwdDCQo+kA:v3Aq9Tj2kxwoKwnaQUIfiok6PDogYB1G","tlshash":"1a42761f66994430cbe226c83dcf7482727db1ab1ac85e9dce5b8f9921d8046267f0d3","first_seen":"2026-03-22T15:26:22.535617Z","last_seen":"2026-03-22T15:26:22.535617Z","times_seen":1,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"api.ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/BaseUserTab.vue_vue_type_style_index_0_lang-CDbasudD.js","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/BaseUserTab.vue_vue_type_style_index_0_lang-CDbasudD.js HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/assets/reg-CvbjsrDp.js\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bnN%2F1B70zkx2utpU5%2BH9tbUYKe5%2FXvRIKrwi1SrBfVruIq9TVRrw4JzXiJdcv%2BbilgeyTR1UFtP629LJ%2Fr8wuSc45YDDJdlXjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9f2dd74fb38ff5007b4983eeafaa290c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363e5f686e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":948,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (947)","md5":"f10c49c4754aac60c43812e51009ffa6","sha1":"7989a1e777accc45a907a3431dbc25c4e3a94186","sha256":"1088c71654c0574d2362594d20a2720cf37bc15486588dc2385dcb97b2d26da2","sha512":"1900a29dd2664e8a6ed04789ccf6736a2b14d302c6b578f1ba5c24558f51c908199c76594282b1cd3f9669211a7d0c799fc794d24c2394752cbe12221d4f08d7","ssdeep":"","tlshash":"d811489daca9cfb604f205a82ea71079e094bb4e9614cd26d05e5431325fdf9e68d32c","first_seen":"2025-12-23T05:10:24.158079Z","last_seen":"2026-04-15T06:27:02.249273Z","times_seen":11,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuFuYAZ9hiA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuFuYAZ9hiA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://ddooo.vip/\r\nOrigin: https://ddooo.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24356\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 18:54:17 GMT\r\nexpires: Thu, 18 Mar 2027 18:54:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:36:20 GMT\r\ncontent-type: font/woff2\r\nage: 333099\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24356,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24356, version 1.0","md5":"8ca0a51552960933d0fd52c19175cbe9","sha1":"5197a7aeb22454110aa1f3ef3ed4c98ca7ef1ba1","sha256":"6f56409fd3d64bb85f7d070bce20749db2d66b6d63cec586cc22d1c761be2491","sha512":"90ab60c6717c27109e8b818e17a696f8665b2fa6247dfcd13a8eb22027aad26ab7becf08e3260bffa8ab3e97d7b1e09830f7d59652c28ec6af13cf925a176393","ssdeep":"384:18j7oxsH+H811z2d2GksjGcVQbNTw4W0LclnfWf7xN5mmOFbxOBAeVLLRIDqGrdt:Y7B1h20GkXRTw70L/pmmybCAaBZGBprf","tlshash":"d9b2e07b99dfeba1dde7def5252e0480ca6c80d06380a6fa135c51b7f50b80710af989","first_seen":"2025-09-20T14:27:23.117722Z","last_seen":"2026-06-15T14:42:08.515809Z","times_seen":3472,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v50/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://ddooo.vip/\r\nOrigin: https://ddooo.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 18:54:17 GMT\r\nexpires: Thu, 18 Mar 2027 18:54:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:10 GMT\r\ncontent-type: font/woff2\r\nage: 333099\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20612, version 1.0","md5":"b07da7aa3e4f363c5cdbc11312239e8c","sha1":"47bf5b2f24ea4a4caafccc89b9d2a6677ef9e3b8","sha256":"e44c11f4834bdd4d6b6da7b8ee5eaebc8acb41250cd6bce5cc82ea8262140eaa","sha512":"420729406b315d8af34b62b78f39e763f5cf33cbf94467457b393fde0573dd7ffc6a23f25680988f9b82a4a3b719876ff76f3e1db047ce82615f544fc3a82532","ssdeep":"384:k5Eu+yl5Y9RpwjjmD/8Qu+POP9w+oB7rezldH9W4EMs8qCr9WvS80M8T4PTEXPFw:YEu+/Jw3FF+WP9DC/ez79jcCrb8BK4Eq","tlshash":"8192df6bce71497ac711262c773917addb8b44f627f91f2ba0562411c7b8e015c2cc7a","first_seen":"2025-01-09T06:25:34.419113Z","last_seen":"2026-06-15T12:36:10.503994Z","times_seen":47092,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":61,"dns":1,"connect":9,"send":0,"wait":16,"receive":2,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/default-CNw7G3Q0.css","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/default-CNw7G3Q0.css HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e4Y2KVqA%2F0f2pPPZSsoejTHKiRbYuLIhPWMq2uWIpX2ch7sxp%2BpNL8WAw%2BRYLa5f3yNfzQW4YDSQG5nBip%2FvdkLVJMBYaP6U4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"faec5eaf1ebda90533d7a7ee16bf17a7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363d7f386e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6983,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (6982)","md5":"3c69d43351fdf4044b0b765057feee47","sha1":"b2418355c718c5e0da93c27cc4e04c5dba528821","sha256":"4fbcef29d3f8d2af0aacf62b8864e823715bd631adb0b4e2ef8ed17339638a1a","sha512":"c21ffa030ccde244c0611947d4a93ef687b1a7873c212e04be45331c3a04bb1aa6851d7fc435b98cbc4120c333eb50a8664c2bc56f3b620fe73dedc2cecd8dd4","ssdeep":"96:Ukat9lAqhvtjr33m8O+2rVG1mhg2/z5CJwyksVuVw:UkatjtTf33m8O++VGg6CMwyksVuVw","tlshash":"9de1bf142438732e9a77f1a766ff518c4824e652d6536b8eb313b50059ebb933132bcb","first_seen":"2025-10-09T12:29:11.737912Z","last_seen":"2026-05-30T15:36:38.248273Z","times_seen":35,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ddooo.vip/assets/index-c7An_eE9.css","fqdn":"ddooo.vip","domain":"ddooo.vip","tld":"vip"},"ip":{"addr":"172.67.159.116","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ddooo.vip/#/reg?ref=271555","date":"2026-03-22T15:25:56.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ddooo.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 12:23:30 GMT","end":"Sun, 10 May 2026 13:23:29 GMT"},"fingerprint":{"sha1":"5F:FC:23:DF:10:ED:8B:4A:FD:59:43:1C:E1:74:E4:DC:65:B0:BB:A4","sha256":"53:49:69:F6:48:E5:DE:0F:37:2A:A7:67:A1:77:B2:8E:BE:1D:C2:16:31:E6:95:8A:B0:16:3B:A8:C6:57:42:94"}}},"request":{"raw":"GET /assets/index-c7An_eE9.css HTTP/1.1\r\nHost: ddooo.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ddooo.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _scid=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR; _scid_r=D4vEG6BqhAHFwS7T9eJxgkuQgJDDz-XR\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 22 Mar 2026 15:25:56 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nos0e%2BrTcXFx6w%2FoqILodUP8zIjFK0eYuY6O1qo1hzITF3l%2BorCHoDdB9M8U3kW67tlYl8e3MVUYIGAHL%2FSIlwzSwFFU85o79Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1701a6ccf3990df83fa5844f5f1083ac\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e06363d7f3a6e70-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2327,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2326)","md5":"7bd4a66586ac0efcaee53f78939a74ba","sha1":"506817c8069af3f01be6682795c718270bdfafa5","sha256":"8f0b1520474e30bcdf8479f160f6e797bfcda0b6391f1227b1bb8d3fa131e74c","sha512":"32e6864dae9dac89056c4ba748f1c9419c58c48447653c67631b2cefd408d585c5e410d7c75734db1122aa6164d5a47b1e864d09915f07449b366f2687c4e2c4","ssdeep":"","tlshash":"ce41f567daa055faaf33a1991f5585cab13ce9208e00df72b180d11c8dcf6f626136ec","first_seen":"2025-05-07T21:58:18.032036Z","last_seen":"2026-05-30T15:36:38.266658Z","times_seen":54,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-22","alert":"Sinkholed","trigger":"ddooo.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}