{"report_id":"a1ec6ca5-c840-4f04-90db-1a8c6fb1e04b","version":0,"status":"done","tags":[],"date":"2026-08-16T09:24:58Z","url":{"schema":"https","addr":"dhhud.lol/","fqdn":"dhhud.lol","domain":"dhhud.lol","tld":"lol"},"ip":{"addr":"172.67.156.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dhhud.lol/","fqdn":"dhhud.lol","domain":"dhhud.lol","tld":"lol"},"title":"MultiBot","dom":{"size":5781,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"e3a99b9cbe3514269f3ab69a01eaddd8","sha1":"df88421bcff4b18df1c7ce309a52776a239a8cef","sha256":"387396c26b5cee57666e31fea50938f1d1de3fbd32f576d76b745329860f035c","sha512":"e50c1cdce70224080e255947489377d563da42692ffb7b9208bd7b4c1c1eda17cfef308f7fba40864c788f350719ce4294a2633b07fce2ee3abd13288f9bf090","ssdeep":"96:8AFNPJL/mkbJWH+K4iZ2syvnR0xzKjLnp9N9aQJsSHJV:fRJLuuyZSvnBjN9assg","tlshash":"b8c1746094f85d9b0101d09ad9447f093c9780bfaf6a125236ec5ebe6fe6c26ca2b10d","dom_hash":"domhashb32f250eeb2442ff802367f0a80c4650","first_seen":"2026-08-16T09:24:59.219778Z","last_seen":"2026-08-16T09:24:59.219778Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dhhud.lol/","fqdn":"dhhud.lol","domain":"dhhud.lol","tld":"lol"},"ip":{"addr":"172.67.156.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-20T09:24:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"dhhud.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"dhhud.lol","ip":{"addr":"172.67.156.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-10","domain_rank":0,"first_seen":"2026-06-30T18:41:24.964068Z","last_seen":"2026-06-30T18:41:24.964068Z","alert_count":4,"request_count":4,"received_data":18935,"sent_data":2050,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dhhud.lol/static/pool_pick.js","fqdn":"dhhud.lol","domain":"dhhud.lol","tld":"lol"},"ip":{"addr":"172.67.156.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"955f5cb676a921b7c69be2254b0560b8","sha1":"52bcaec1b929df01e95b867d3c7b953a7ece22d6","sha256":"014cdd6e9775bbce76263881ed893ff64a83a69fb692bad1f7e7641445c3185d","sha512":"f88d902cbe8586e135dffed155621ee4ebba19858d2dec462f816f2c2592b41205741ceefa7873cca89ce4f725ac5164eb5f27305964fdf6d9af3a96ab608c4a","ssdeep":"","tlshash":"6d512f6ef4893c6a023bf7bbda07d908ff62083705969311396c516d2ff68145178ee8","size":2920,"data":"","first_seen":"2026-08-16T09:24:59.231757Z","last_seen":"2026-08-16T09:25:41.425217Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dhhud.lol/static/favicon.svg","fqdn":"dhhud.lol","domain":"dhhud.lol","tld":"lol"},"ip":{"addr":"172.67.156.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhhud.lol/","date":"2026-08-16T09:24:32.024Z","timestamp":1786872272024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhhud.lol","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 13:28:38 GMT","end":"Tue, 06 Oct 2026 13:28:37 GMT"},"fingerprint":{"sha1":"12:35:A9:DB:65:B8:F9:F4:2B:E5:E8:2A:43:91:EB:05:10:05:7C:0C","sha256":"2A:66:DE:70:A6:6B:B0:20:85:51:85:A5:75:51:1D:32:67:E3:43:2E:DE:F5:E1:96:F7:A8:EE:EE:94:98:77:D7"}}},"request":{"raw":"GET /static/favicon.svg HTTP/1.1\r\nHost: dhhud.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: csrftoken=Q0a-74fv9GVUPzHbKYtDKq2oJiXa7NLilcppE8wNZAM.79f38a42ae92d0ce44863229f6d2ddfb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 09:24:32 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"066154668601dd8577e26150f2836654\"\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fug%2BlKI8y%2FP6zDCFtp8k8873WDCW4vyZi7N5bxb6WKrIsqtw8kmztn5W%2BYdRBfTd6ggdc5V1Sb%2BHEe62U7ESgG%2FMuDUVSKXfVblA28B60Zayiz9LwMBVHxrnacA%3D\"}]}\r\nlast-modified: Mon, 11 May 2026 15:22:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-site\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self'; form-action 'self'; base-uri 'self'; frame-ancestors 'none';\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\ncf-ray: a2bf62f42a1956b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":434,"size_decoded":1361,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f8a01bf888f54d677c70ccb75a1d60a","sha1":"ba0eea3b1b1b527b00e913f5595e0ce90ce2f79c","sha256":"5be79be4bdace9c97a1fe9a23f6d4e8963e5b8718bf82c6ebab469b0b00ea891","sha512":"02b4600bf3f62dc4d7ac776d693a6a2bb00a3f10cf1628a5307beeddc9b575a587d7bf62b1ffdc605580497e7e153f625dc582f748d673af6484f189e29f37ce","ssdeep":"","tlshash":"f8e0e5a4e12cd92ce711490deb2d70a5616f92c3071e4305b844393869a22ef7d772fd","first_seen":"2026-08-16T09:24:59.225795Z","last_seen":"2026-08-16T09:25:41.422596Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"dhhud.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhhud.lol/","fqdn":"dhhud.lol","domain":"dhhud.lol","tld":"lol"},"ip":{"addr":"172.67.156.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-16T09:24:31.445Z","timestamp":1786872271445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhhud.lol","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 13:28:38 GMT","end":"Tue, 06 Oct 2026 13:28:37 GMT"},"fingerprint":{"sha1":"12:35:A9:DB:65:B8:F9:F4:2B:E5:E8:2A:43:91:EB:05:10:05:7C:0C","sha256":"2A:66:DE:70:A6:6B:B0:20:85:51:85:A5:75:51:1D:32:67:E3:43:2E:DE:F5:E1:96:F7:A8:EE:EE:94:98:77:D7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dhhud.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 09:24:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nset-cookie: csrftoken=Q0a-74fv9GVUPzHbKYtDKq2oJiXa7NLilcppE8wNZAM.79f38a42ae92d0ce44863229f6d2ddfb; HttpOnly; Max-Age=3600; Path=/; SameSite=lax; Secure\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-site\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self'; form-action 'self'; base-uri 'self'; frame-ancestors 'none';\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KhG%2B2amDSdaLVDW8Y04EpYBpZCw2ZM5GL%2BYiXzEjCUrY8to6yj00WRiLjksUrPsx5y42UsKrMeVrKIlHwGMxbbpJEIc7x%2B8jiih%2FWe%2BRYd95h9rxIWcSLfkhBsA%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2bf62f1599f56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"csrftoken","value":"Q0a-74fv9GVUPzHbKYtDKq2oJiXa7NLilcppE8wNZAM.79f38a42ae92d0ce44863229f6d2ddfb","quoted":false,"path":"/","raw_expires":"","max_age":3600,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"csrftoken=Q0a-74fv9GVUPzHbKYtDKq2oJiXa7NLilcppE8wNZAM.79f38a42ae92d0ce44863229f6d2ddfb; HttpOnly; Max-Age=3600; Path=/; SameSite=lax; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6142,"size_decoded":3680,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"3578763a3d34021d8b9db1303a219e84","sha1":"7fecd42984582844d7b705051e25279490f86abe","sha256":"86981c91d44c0874227aefa21652ee6c43675b7ab2d4cb2d3e0def9321e2d060","sha512":"d0df133c669b376cca5960095541131d41f504ff6c911f78dee13bf6fae250037df4253abe356a9beb1a99f69d3873093a372b2e6564d5f1e597fb63b78b19cb","ssdeep":"96:GAFNPjz/mkbJWK+K4RZ2syvnR0xzKjLnp909aQJsS5Ee:ZRjzuugZSvnBj09assg","tlshash":"29c1732094f95ddb0101d09ad9447f093c9780bfaf6a135236ec5eba5fe6c25ca2b20d","first_seen":"2026-08-16T09:24:59.227686Z","last_seen":"2026-08-16T09:24:59.227686Z","times_seen":1,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":109,"connect":23,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"dhhud.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhhud.lol/static/style.css","fqdn":"dhhud.lol","domain":"dhhud.lol","tld":"lol"},"ip":{"addr":"172.67.156.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhhud.lol/","date":"2026-08-16T09:24:31.916Z","timestamp":1786872271916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhhud.lol","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 13:28:38 GMT","end":"Tue, 06 Oct 2026 13:28:37 GMT"},"fingerprint":{"sha1":"12:35:A9:DB:65:B8:F9:F4:2B:E5:E8:2A:43:91:EB:05:10:05:7C:0C","sha256":"2A:66:DE:70:A6:6B:B0:20:85:51:85:A5:75:51:1D:32:67:E3:43:2E:DE:F5:E1:96:F7:A8:EE:EE:94:98:77:D7"}}},"request":{"raw":"GET /static/style.css HTTP/1.1\r\nHost: dhhud.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: csrftoken=Q0a-74fv9GVUPzHbKYtDKq2oJiXa7NLilcppE8wNZAM.79f38a42ae92d0ce44863229f6d2ddfb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 09:24:32 GMT\r\ncontent-type: text/css; charset=utf-8\r\netag: W/\"3d6f2869443e8af8ade2b8d57f989c77\"\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=npHrxYVcU8VuEg1NdqRbfvfs1dUnaJp%2Fvc5y2G1T4%2B02hjDp53os4FCdYrB3HvnqTU7AjHnCCGhCV9dvL34IQJwB6VZJgDuxJbVxJh0JXkFrqEx8%2FhKcuMQERSA%3D\"}]}\r\nlast-modified: Mon, 11 May 2026 15:27:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-site\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self'; form-action 'self'; base-uri 'self'; frame-ancestors 'none';\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\ncf-ray: a2bf62f379d756b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4911,"size_decoded":2702,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"94483cb80fa9800e7b80381bc5a4d721","sha1":"e1843037a75615c7ee9ad39df2b508ef1ffd6759","sha256":"96f7dce5538b0dfd50d5ceb927ae28acdf27e3bd23846041cb4ccf228e007630","sha512":"110b244045b00dde1c16b625f84b9ef253f018eaaf4a4d91cb6e0d9a9b6d128a1c47afcd7791a21410d9093120126a94e83ccb702cfe02ab15ac77f2ef481f01","ssdeep":"96:Fnesj+yjrWIXeZ3+/ssh6QlDnmGu4+aIbqy19srClRa:xesbj/384DIV1el","tlshash":"9ea10d59fa1065b2e533a724f7e7879af6c8b563480903747ed462048ff127aa550f8c","first_seen":"2026-08-16T09:24:59.229653Z","last_seen":"2026-08-16T09:25:41.424442Z","times_seen":2,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"dhhud.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhhud.lol/static/pool_pick.js","fqdn":"dhhud.lol","domain":"dhhud.lol","tld":"lol"},"ip":{"addr":"172.67.156.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhhud.lol/","date":"2026-08-16T09:24:31.917Z","timestamp":1786872271917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dhhud.lol","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 13:28:38 GMT","end":"Tue, 06 Oct 2026 13:28:37 GMT"},"fingerprint":{"sha1":"12:35:A9:DB:65:B8:F9:F4:2B:E5:E8:2A:43:91:EB:05:10:05:7C:0C","sha256":"2A:66:DE:70:A6:6B:B0:20:85:51:85:A5:75:51:1D:32:67:E3:43:2E:DE:F5:E1:96:F7:A8:EE:EE:94:98:77:D7"}}},"request":{"raw":"GET /static/pool_pick.js HTTP/1.1\r\nHost: dhhud.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: csrftoken=Q0a-74fv9GVUPzHbKYtDKq2oJiXa7NLilcppE8wNZAM.79f38a42ae92d0ce44863229f6d2ddfb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 16 Aug 2026 09:24:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\netag: W/\"0d024ae761bc5894cf91608b7f9fe723\"\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wmBMz6YSaa1BDeCOiS2UHqetUvS2X5OgLZnADast9%2BSSEF%2F%2BrAuu0PH%2FZtyDkCOkEX43QPWXRqT7UuXch4uisEYGs5LNVJfFMVwrC4%2FY7pviC2jRT6Gc4TDt1D8%3D\"}]}\r\nlast-modified: Mon, 11 May 2026 15:22:56 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-site\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self'; form-action 'self'; base-uri 'self'; frame-ancestors 'none';\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: zstd\r\ncf-ray: a2bf62f379d856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2920,"size_decoded":2401,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"955f5cb676a921b7c69be2254b0560b8","sha1":"52bcaec1b929df01e95b867d3c7b953a7ece22d6","sha256":"014cdd6e9775bbce76263881ed893ff64a83a69fb692bad1f7e7641445c3185d","sha512":"f88d902cbe8586e135dffed155621ee4ebba19858d2dec462f816f2c2592b41205741ceefa7873cca89ce4f725ac5164eb5f27305964fdf6d9af3a96ab608c4a","ssdeep":"","tlshash":"6d512f6ef4893c6a023bf7bbda07d908ff62083705969311396c516d2ff68145178ee8","first_seen":"2026-08-16T09:24:59.231757Z","last_seen":"2026-08-16T09:25:41.425217Z","times_seen":2,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-16","alert":"Sinkholed","trigger":"dhhud.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
