{"report_id":"c925ab2f-20e4-4591-a4c1-301ad83bc8f7","version":0,"status":"done","tags":[],"date":"2026-09-11T10:02:50Z","url":{"schema":"http","addr":"roblhooudepu.com/","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":0,"asn":138415,"as":"Yancy Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"roblhooudepu.com/","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"title":"Robinhood","dom":{"size":47699,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (47662), with no line terminators","md5":"4b062673cfa9dcdb2ee53e63c469cb8c","sha1":"2fc09304810465de9751f4bedc21a98f2b8920d2","sha256":"30caa78ce348a1ff92e545fb8477807ee43547b5c5958c30416b7b94276195b2","sha512":"ecf3b728e022accee101202ed991da1a9020b14f34f211aeb654f6274dfa396af13b53ce3b9b3292c6a3d9f3a20c98d499893d0e7b5d5899bbe80c0165cf4452","ssdeep":"192:CJmPT6CJcNvNxGsy1i1b003auN6wIuWp6Kf0RfhHZLnbbkKO8IUWAsX2pBn1Kn6Z:wpy1ccwJbbkKISjnanCQm","tlshash":"c2239a70b61135129067e5d1f4613f8ab293e30fda0bc0a25af8c661dfcedb938665b1","dom_hash":"domhash5c1d9f43d79e510374c6a10434c18998","first_seen":"2026-09-11T10:02:58.325834Z","last_seen":"2026-09-11T10:02:58.325834Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"roblhooudepu.com/","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":0,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T10:02:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"roblhooudepu.com","ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"domain_registered":"2026-06-10","domain_rank":0,"first_seen":"2026-09-11T09:53:45.301651Z","last_seen":"2026-09-11T09:53:45.301651Z","alert_count":48,"request_count":24,"received_data":3360160,"sent_data":12386,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Sign-in","description":"Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.","website":"https://developers.google.com/identity/sign-in/web","common_platform_enumeration":"","icon":"Google.svg","categories":["Authentication"]}]},{"fqdn":"threpa.jiekouduogongnengpan.com","ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":914,"sent_data":1186,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2026-09-07T09:44:45.003254Z","alert_count":0,"request_count":1,"received_data":275947,"sent_data":461,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"roblhooudepu.com/js/chunk-vendors.92f4ad15.js","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ab07c6bff26dba31acf7886eb047f71","sha1":"65c3af669470e8ca6e67bcdf490821c8ac006c33","sha256":"f3341daa602d3ebbfac4ad33d4dea26191f509883e198b9825b8be381a83b828","sha512":"2546738d16b1e1a25fc83d108ea525f0033fe9f1efcfdf932ea0561fde75d1defcfa768ca4a188769741133bbb09c4ee5be5e81bc6c02a8b28b0fc05cfa8d490","ssdeep":"24576:33aAdw4wqC3XRJk8GaOXl8X4FiieKRbMwG7K:33aAi4wqiXRa8jOXl8X4FiieKRbMZ7K","tlshash":"d285f98db2c1b47543e760b0406f150bf33b6959a40a84a8f675e8d96cbc94e623bf7c","size":1731497,"data":"","first_seen":"2026-09-11T09:53:51.058191Z","last_seen":"2026-09-11T10:02:58.343512Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/js/app.d056f0e7.js","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f969600c7e0492ebe910ebce23b368ba","sha1":"0cf374b986bb1fba7307bb51759594dc551a5f02","sha256":"a3ec68952f5994791021670199440f4e5345f35ee6a3abba9173540ebdd0d380","sha512":"6f580b6cddc87b2916c8567216d40cf5f99439c55e73bd45bf6c30dc5d944bbf71cb2ad05315554a1eb117744fc272f87fbd9219f1bdb27af8da2ddbb03bbc81","ssdeep":"6144:B4ceLpl1VejVoCeATPY6woPqGMDDFf9GoaE+oN:2l9l18YZoPqlPNwoxN","tlshash":"ac648e7d21894a7597d243c2615b2a59f2b80dd2c2c59421aeeddf1e03ceb58f38e63c","size":328000,"data":"","first_seen":"2026-09-11T09:53:51.04675Z","last_seen":"2026-09-11T10:02:58.331313Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.google.com/js/platform.js?onload=renderButton","fqdn":"apis.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae235004e4ef87324d9f517ccafb871d","sha1":"25b99edbb0aa636f0050ed7d9342bd5ab988d75d","sha256":"3834f3665da217bd9293a221d34571c50c95d3fd180a77d88dfd7ca87cdd2656","sha512":"c8bebfc773de8bf98451ebcde045eb7a2455c397f95f01ef68e73532116b859d8b4d8008cad2b7fef8e0415df16827ab239dea1fe8b336d8e48c734fa34597a9","ssdeep":"1536:0DGSJRzsqdJ0mzAyPIxG531y/fN6M6GZBsZL:2RzjVIU5A63Gs9","tlshash":"9b53dad976a5702283a3b5a5103f010ef17f6da9fc4c98a8b199c4e42d78e89017bf7d","size":64841,"data":"","first_seen":"2026-08-18T12:05:44.083834Z","last_seen":"2026-09-11T10:02:58.344124Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/config.js","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2b91d0b3b5e8a6d86fcc4ab97452385","sha1":"ff160a60809dd729bb7367692102880128aa4cb5","sha256":"04d4aeb246b57c40ea7c0b0f3fe404528616d6aecb0800a7b15bfec4a55f23ae","sha512":"758ffa8ad1f06367406c18c083f347f8bb221b477756bb8fd882b613283d0add4e3e133f84fbe47a5120c5d07a768f08bccb6c626925b664c24b990c38856afb","ssdeep":"","tlshash":"bad012e70bd852870ba14884813b149bf616a4a64fbc5c14994a2b09cf5fa222d3708d","size":206,"data":"","first_seen":"2026-09-11T09:53:51.043592Z","last_seen":"2026-09-11T10:02:58.334315Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"53709e0b3afd58d69db7034dc9af2df0","sha1":"9ad506faf8d490157eb687e0d2c15e6d2c731f5e","sha256":"4fceee63ef088241e2055350a72736ed4e7167c5e8ab1851599ee6719f5f07b3","sha512":"c6b0ac6da45f0e1efc7f14a9238c058aefc4ccf308530c2b81f38976708d65d81c921e8915de90900a571af6844d3b30ce53816057ff5a599adc7ea319f96fc1","ssdeep":"6144:lTdErKg7hxy5dsIJFTS/0o5Sfwnkc+8MBaC3mz2ZU:lTlssQ/0o5isHdMBaC3mzWU","tlshash":"3c445bdcb6e270359212f8b5c43f410ab076a679f4498cacba98c5f5acb0d490177f7a","size":274847,"data":"","first_seen":"2026-09-10T14:28:45.892194Z","last_seen":"2026-09-11T13:38:37.835688Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"20250608_004","filename":"https://roblhooudepu.com/js/app.d056f0e7.js","line_number":1,"column_number":20981},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj24 class:Object extensible:false frozen:true isError:false ownPropertyLength:8 preview:map[kind:Object ownProperties:map[fullPath:map[configurable:false enumerable:true value:/ writable:false] hash:map[configurable:false enumerable:true value: writable:false] matched:map[configurable:false enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj28 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[kind:ArrayLike length:1] sealed:false type:object] writable:false] meta:map[configurable:false enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj25 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] writable:false] name:map[configurable:false enumerable:true value:home writable:false] params:map[configurable:false enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj27 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] writable:false] path:map[configurable:false enumerable:true value:/ writable:false] query:map[configurable:false enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj26 class:Object extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] writable:false]] ownPropertiesLength:8] sealed:true type:object]","filename":"https://roblhooudepu.com/js/app.d056f0e7.js","line_number":1,"column_number":12762},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj29 class:Array extensible:true frozen:false isError:false ownPropertyLength:2 preview:map[items:[] kind:ArrayLike length:0] sealed:false type:object]","filename":"https://roblhooudepu.com/js/app.d056f0e7.js","line_number":1,"column_number":32634},{"level":"log","text":"map[type:null]","filename":"https://roblhooudepu.com/js/app.d056f0e7.js","line_number":1,"column_number":19143},{"level":"log","text":"ws://threpa.jiekouduogongnengpan.com/websocket/message","filename":"https://roblhooudepu.com/js/app.d056f0e7.js","line_number":1,"column_number":44188},{"level":"log","text":"locale:en","filename":"https://roblhooudepu.com/js/app.d056f0e7.js","line_number":1,"column_number":21094},{"level":"log","text":"messages:map[actor:server1.conn0.watcher17.process7//obj30 class:Object extensible:true frozen:false isError:false ownPropertyLength:10 preview:map[kind:Object ownProperties:map[ar:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj38 class:Object extensible:true frozen:false isError:false ownPropertyLength:182 sealed:false type:object] writable:true] de:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj35 class:Object extensible:true frozen:false isError:false ownPropertyLength:182 sealed:false type:object] writable:true] en:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj32 class:Object extensible:true frozen:false isError:false ownPropertyLength:183 sealed:false type:object] writable:true] es:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj40 class:Object extensible:true frozen:false isError:false ownPropertyLength:182 sealed:false type:object] writable:true] fr:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj36 class:Object extensible:true frozen:false isError:false ownPropertyLength:182 sealed:false type:object] writable:true] hk:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj39 class:Object extensible:true frozen:false isError:false ownPropertyLength:182 sealed:false type:object] writable:true] it:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj37 class:Object extensible:true frozen:false isError:false ownPropertyLength:182 sealed:false type:object] writable:true] ja:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj33 class:Object extensible:true frozen:false isError:false ownPropertyLength:182 sealed:false type:object] writable:true] ko:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj34 class:Object extensible:true frozen:false isError:false ownPropertyLength:182 sealed:false type:object] writable:true] zh:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj31 class:Object extensible:true frozen:false isError:false ownPropertyLength:183 sealed:false type:object] writable:true]] ownPropertiesLength:10] sealed:false type:object]","filename":"https://roblhooudepu.com/js/app.d056f0e7.js","line_number":1,"column_number":21129},{"level":"log","text":"The operation is insecure.","filename":"https://roblhooudepu.com/js/app.d056f0e7.js","line_number":1,"column_number":19365},{"level":"log","text":"111","filename":"https://roblhooudepu.com/js/app.d056f0e7.js","line_number":1,"column_number":19952},{"level":"log","text":"1.6666666666666665scale","filename":"https://roblhooudepu.com/js/app.d056f0e7.js","line_number":1,"column_number":20135},{"level":"log","text":"100rootFontSize","filename":"https://roblhooudepu.com/js/app.d056f0e7.js","line_number":1,"column_number":20190},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj46 class:Array extensible:true frozen:false isError:false ownPropertyLength:12 preview:map[items:[map[actor:server1.conn0.watcher17.process7//obj47 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj48 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj49 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj50 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj51 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj52 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj53 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj54 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj55 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 sealed:false type:object] map[actor:server1.conn0.watcher17.process7//obj56 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 sealed:false type:object]] kind:ArrayLike length:10] sealed:false type:object]","filename":"https://roblhooudepu.com/js/app.d056f0e7.js","line_number":1,"column_number":32634},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj57 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[code:map[configurable:true enumerable:true value:200 writable:true] message:map[configurable:true enumerable:true value: writable:true] result:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj58 class:Array extensible:true frozen:false isError:false ownPropertyLength:12 preview:map[kind:ArrayLike length:10] sealed:false type:object] writable:true] success:map[configurable:true enumerable:true value:true writable:true] timestamp:map[configurable:true enumerable:true value:1.789120939642e+12 writable:true]] ownPropertiesLength:5] sealed:false type:object]language","filename":"https://roblhooudepu.com/js/app.d056f0e7.js","line_number":1,"column_number":19114},{"level":"log","text":"map[actor:server1.conn0.watcher17.process7//obj59 class:Object extensible:true frozen:false isError:false ownPropertyLength:5 preview:map[kind:Object ownProperties:map[code:map[configurable:true enumerable:true value:200 writable:true] message:map[configurable:true enumerable:true value: writable:true] result:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj60 class:Array extensible:true frozen:false isError:false ownPropertyLength:29 preview:map[kind:ArrayLike length:28] sealed:false type:object] writable:true] success:map[configurable:true enumerable:true value:true writable:true] timestamp:map[configurable:true enumerable:true value:1.789120939666e+12 writable:true]] ownPropertiesLength:5] sealed:false type:object]","filename":"https://roblhooudepu.com/js/app.d056f0e7.js","line_number":1,"column_number":34256}]},"http":[{"url":{"schema":"https","addr":"roblhooudepu.com/","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T10:02:15.383Z","timestamp":1789120935383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:15 GMT\r\ncontent-type: text/html\r\ncontent-length: 901\r\nlast-modified: Sat, 08 Aug 2026 18:45:15 GMT\r\netag: \"6a77793b-385\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Sign-in","description":"Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account.","website":"https://developers.google.com/identity/sign-in/web","common_platform_enumeration":"","icon":"Google.svg","categories":["Authentication"]}],"data":{"size":901,"size_decoded":1131,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (901), with no line terminators","md5":"26ba0b66f67c551f6188a5697765880d","sha1":"d6e54a1e9dc9e2f98a5e792a2795834906e7dfec","sha256":"ebd858d5ef2c05be6861d5fd3feda3b10511e5d7cf8f2d2a2c383733a626c4da","sha512":"ffbf487dc9c7a80a0143886348b50fbd859545aa6cf73ed7cf484701ccfd4e240f1e586a929c518f8c87078efbd69002b676b141c6946ac4c1f8befaa41e8e99","ssdeep":"","tlshash":"c41195c3dc14c0ad4b206e85f871f30d888aac4d9e61eca169f4817e0ae4fd88d06960","first_seen":"2026-09-11T09:53:51.032114Z","last_seen":"2026-09-11T10:02:58.327591Z","times_seen":2,"resource_available":false,"data":null}},"time_used":681,"timings":{"blocked":0,"dns":4,"connect":222,"send":0,"wait":223,"receive":0,"ssl":232},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/img/service.bb8e9ee1.svg","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:18.864Z","timestamp":1789120938864,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /img/service.bb8e9ee1.svg HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1425\r\nlast-modified: Sat, 08 Aug 2026 18:45:53 GMT\r\netag: \"6a777961-591\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1425,"size_decoded":1660,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4f4dbd11018c5e948ad3ca184bd6ab7","sha1":"3490ecfa742c52caab0838830a1b82bc5e37c657","sha256":"0f3cbdd9e999a73a556e836b5402a23c06dcc066106e3c0778f30bc5a22f0cff","sha512":"572b006bcadd9be92cf641700ff6335b1996314040e4612e8c38c11f76e5b460f2f8a3dafa4ae30e37a2fd4b7b46781dd2470c2652f3aa27a86e12e603278c53","ssdeep":"","tlshash":"9521c2ece61d155ca4c273ca8638e4c953277095b6a20529d48f997880738edcb4fd5c","first_seen":"2025-08-16T11:30:34.812642Z","last_seen":"2026-09-11T10:02:58.328232Z","times_seen":21,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/img/icon_place.201127c8.ca968028.svg","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:18.871Z","timestamp":1789120938871,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /img/icon_place.201127c8.ca968028.svg HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 532\r\nlast-modified: Sat, 08 Aug 2026 18:45:47 GMT\r\netag: \"6a77795b-214\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":532,"size_decoded":766,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c5f3e628912ed48018f271723c30e3c4","sha1":"2e496a2c6990457c9041dcdcf7bc6d7ec7aced0d","sha256":"d9d4e52a7b636c33c701075f870cb639a0790a1eec98dfb508f12b803dd72567","sha512":"515da9544358e33ab1578343dafad80077b8ec4ce3630f2c8864178185b8d286aa35d107895a86da7965f4c8e3efc11f2c0aa391454ba4f15dde74765d1eda71","ssdeep":"","tlshash":"78f02b6cdf464d35b2129368f6603824963b34a5538be484cd9130336266a1d697fab9","first_seen":"2025-08-16T11:30:34.823282Z","last_seen":"2026-09-11T10:02:58.328854Z","times_seen":20,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/img/icon_loans.dd791035.d8963feb.svg","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:18.872Z","timestamp":1789120938872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /img/icon_loans.dd791035.d8963feb.svg HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:19 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 866\r\nlast-modified: Sat, 08 Aug 2026 18:45:44 GMT\r\netag: \"6a777958-362\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":866,"size_decoded":1100,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2deae2c409a9f32586255b55cf56dd4c","sha1":"f3f94a36744b9c5fdc7336fed23d954cbf034b87","sha256":"e0cf89271c32ff766516e4aa38c6b7f81e3130b914d51cc3eeff417270d07a1a","sha512":"545522416eb371f05c5e33859bc3695a82ea2d393e52041f7b9b3e4662d7efd8a042cf9df36f9e329cfd7874b7f8a1ce3f2e6700468573da7d30be16d365bcdb","ssdeep":"","tlshash":"7411cc706f114838f62063bcdb243c759539a4d37c876100cab73033a15ad6dbcb6aab","first_seen":"2025-08-16T11:30:34.827113Z","last_seen":"2026-09-11T10:02:58.329488Z","times_seen":20,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/img/img_board.0944cf42.bb380746.svg","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:18.879Z","timestamp":1789120938879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /img/img_board.0944cf42.bb380746.svg HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:19 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5336\r\nlast-modified: Sat, 08 Aug 2026 18:45:50 GMT\r\netag: \"6a77795e-14d8\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5336,"size_decoded":5572,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e2354c5d727224195b029154bdffd595","sha1":"a748d3fd051b5a0ab5397be4ca3ff5890976f1e6","sha256":"f85f71e2d371874e2e201010e1d4a31b25237ce6e01bddde81deb6cc64af1326","sha512":"80fd4c8baa6fd7239625892e2debc9c8569d122b7a4654629e1e7956b46e605c38b0944c7c2ae0dfd0d717a813b6bc3f462f933b0be2e87d9f1f4502ecee9138","ssdeep":"96:+65jvLkGvFI3+l88FB47MpJhKzAK1YIPOd4gHxDzEgI9F1CZy/ze8/zeq:+kjvLkGdI3+VBsMpJhKzAKqyOd4gHxf2","tlshash":"73b1ef6846596c0c62909378e76b7861d3aed2b0e3631344ad5d3237a81f48efcbb1dd","first_seen":"2025-08-27T11:07:37.108152Z","last_seen":"2026-09-11T10:02:58.330123Z","times_seen":22,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/js/chunk-vendors.92f4ad15.js","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:16.430Z","timestamp":1789120936430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /js/chunk-vendors.92f4ad15.js HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:16 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1731497\r\nlast-modified: Sat, 08 Aug 2026 18:46:25 GMT\r\netag: \"6a777981-1a6ba9\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1731497,"size_decoded":1731747,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"2b4e4343aa9e026301e1e736fafc83e4","sha1":"af001b2209030d8f9b2e5f3c1ac5b2a08387fb6c","sha256":"2118323f8f2ef8119a8e45fde0a7778970880b8925464f8d85da0853d1a715ba","sha512":"eedec052a7095a06c975680257f4fbf216f798805573409e30f4ea025a0d9ad65b6052ab40dce03bcae7cc3ac8caa5f2f5220acfe69d53acabc796641bd36841","ssdeep":"12288:9QcCtDoaASaat4whw0umUlQH46xbnohQJk8Po2mpim2E3if2fWUX+o8Q:33aAdw4wqC3XRJk8GaOXl8Q","tlshash":"0125098cb285b47543e760b0406f150fa3376949a40a81acf675e8da6cbd94e623ff7c","first_seen":"2026-09-11T09:53:51.045726Z","last_seen":"2026-09-11T10:02:58.330745Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2039,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":1595,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/js/app.d056f0e7.js","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:16.431Z","timestamp":1789120936431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /js/app.d056f0e7.js HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:16 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 328000\r\nlast-modified: Sat, 08 Aug 2026 18:46:16 GMT\r\netag: \"6a777978-50140\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":328000,"size_decoded":328248,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60107), with no line terminators","md5":"f969600c7e0492ebe910ebce23b368ba","sha1":"0cf374b986bb1fba7307bb51759594dc551a5f02","sha256":"a3ec68952f5994791021670199440f4e5345f35ee6a3abba9173540ebdd0d380","sha512":"6f580b6cddc87b2916c8567216d40cf5f99439c55e73bd45bf6c30dc5d944bbf71cb2ad05315554a1eb117744fc272f87fbd9219f1bdb27af8da2ddbb03bbc81","ssdeep":"6144:B4ceLpl1VejVoCeATPY6woPqGMDDFf9GoaE+oN:2l9l18YZoPqlPNwoxN","tlshash":"ac648e7d21894a7597d243c2615b2a59f2b80dd2c2c59421aeeddf1e03ceb58f38e63c","first_seen":"2026-09-11T09:53:51.04675Z","last_seen":"2026-09-11T10:02:58.331313Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":887,"receive":680,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/css/app.89135fc7.css","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:16.433Z","timestamp":1789120936433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /css/app.89135fc7.css HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 44515\r\nlast-modified: Sat, 08 Aug 2026 18:45:24 GMT\r\netag: \"6a777944-ade3\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44515,"size_decoded":44747,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (43551), with CRLF line terminators","md5":"a0b64884df86805e8ede9015d8665550","sha1":"5106821e5d7f0b3e1de87baf741a43da51ba85ce","sha256":"994bd9d3a1353a641cbd20df07389bfe29180eb6b85c253622f26a8a9a4b2a85","sha512":"69d066829c9622bea1e5f8b1c3570586f71bc276d99c2b8acb3537b581a606b9c3c1e1b836bbe4e342d369ebc2fa3acac534db68f3df261a4dde2a6cd29ad801","ssdeep":"384:lNawx7WtIbTqOu8ON8wjqyUKSE+X6jewuaAuoeiyngcl4ug7DopPZNgpqAEAL/2I:715WtIM8m8nyUR7hS9oKeZ45E","tlshash":"ca1344316614101ee373c993fac1ba8c2505e272c743f19691a3dead9dc732726b273a","first_seen":"2026-09-11T09:53:51.037702Z","last_seen":"2026-09-11T10:02:58.331874Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":885,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/img/icon_twitter.667925f3.667925f3.svg","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:18.877Z","timestamp":1789120938877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /img/icon_twitter.667925f3.667925f3.svg HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:19 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1018\r\nlast-modified: Sat, 08 Aug 2026 18:45:49 GMT\r\netag: \"6a77795d-3fa\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1018,"size_decoded":1253,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eed98fe4092ec614ba3dbff4caefa3f9","sha1":"8fceb8268d7fed24485b4673d76de4a1abb83c65","sha256":"c365d5ca9a9359bf0468075e17bcf3f8e64faee94223f6437605f0410d97d747","sha512":"1f522bf446b5108e8a5c11454052b025a4b8e8823e92fe9fbd913bc9d1fbc37b822971d988ebea803c94b2b12527abf6ef04d74121855f9551dfa00b44e55aba","ssdeep":"","tlshash":"bd1132f5818890e0964bcb40dd715437d51b64ff4f98178a0454abb5e3811d0e9d9cd4","first_seen":"2025-08-16T11:30:34.811645Z","last_seen":"2026-09-11T10:02:58.332442Z","times_seen":25,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/img/icon_bell1.98a9a1d5.4b8546c7.svg","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:18.787Z","timestamp":1789120938787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /img/icon_bell1.98a9a1d5.4b8546c7.svg HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/css/app.89135fc7.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 912\r\nlast-modified: Sat, 08 Aug 2026 18:45:41 GMT\r\netag: \"6a777955-390\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":912,"size_decoded":1146,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50a9c3052132d3ea4a54b4a744608e3e","sha1":"593019d37b3e2b007ddcabbe6f4219157a079c77","sha256":"bbbd891fffc346841388273d729cf9d57e9a3b73a173b82dee432827d810c04a","sha512":"d8c44849b7d96bfccb5da5f8f61c58b10245590bdfe9e005d658f31ead83e4342a515c50e4b60adf585ad9912c23485dff968ea106660d8bf93528ed604bfc84","ssdeep":"","tlshash":"ed11d07a5765292cf08083f0fb783c78f5a71b226205b4d095603b35913d02f987f8d9","first_seen":"2025-08-16T11:30:34.798475Z","last_seen":"2026-09-11T10:02:58.333209Z","times_seen":20,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"threpa.jiekouduogongnengpan.com/swx/customer/index/listMarketByType","fqdn":"threpa.jiekouduogongnengpan.com","domain":"jiekouduogongnengpan.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:18.880Z","timestamp":1789120938880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"OPTIONS /swx/customer/index/listMarketByType HTTP/1.1\r\nHost: threpa.jiekouduogongnengpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: virtually\r\nReferer: https://roblhooudepu.com/\r\nOrigin: https://roblhooudepu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:19 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://roblhooudepu.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: virtually\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":457,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T13:24:30.180518Z","times_seen":18403393,"resource_available":true,"data":null}},"time_used":654,"timings":{"blocked":-1,"dns":0,"connect":218,"send":0,"wait":215,"receive":0,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/config.js","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:16.425Z","timestamp":1789120936425,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:16 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 206\r\nlast-modified: Sat, 08 Aug 2026 18:45:17 GMT\r\netag: \"6a77793d-ce\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":206,"size_decoded":448,"mime_type":"application/javascript","magic":"ASCII text","md5":"a2b91d0b3b5e8a6d86fcc4ab97452385","sha1":"ff160a60809dd729bb7367692102880128aa4cb5","sha256":"04d4aeb246b57c40ea7c0b0f3fe404528616d6aecb0800a7b15bfec4a55f23ae","sha512":"758ffa8ad1f06367406c18c083f347f8bb221b477756bb8fd882b613283d0add4e3e133f84fbe47a5120c5d07a768f08bccb6c626925b664c24b990c38856afb","ssdeep":"","tlshash":"bad012e70bd852870ba14884813b149bf616a4a64fbc5c14994a2b09cf5fa222d3708d","first_seen":"2026-09-11T09:53:51.043592Z","last_seen":"2026-09-11T10:02:58.334315Z","times_seen":2,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/css/chunk-vendors.ab49d789.css","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:16.432Z","timestamp":1789120936432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /css/chunk-vendors.ab49d789.css HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:16 GMT\r\ncontent-type: text/css\r\ncontent-length: 210860\r\nlast-modified: Sat, 08 Aug 2026 18:45:26 GMT\r\netag: \"6a777946-337ac\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":210860,"size_decoded":211094,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d7d38c748924dffc0cd2ac0e07abf613","sha1":"d18a361f592070fabfe6068983ca767c27b839a5","sha256":"0d8d865d09c3f3038ff963dd211432085a0939a8495eda8864f6b2b4b916ba70","sha512":"9b84f7c6ab5572150cad1041d6499ff16de0e3b9f3b163faa43d812e19b60a7874d948890f4c946fdcc7834a2daa341808942cf046a5040ad5663cbaac3c1278","ssdeep":"1536:O28Y7SrW3YeWXA1u9w4HCe/l4JrgW9cMERw4B78O6iZkJgYu8e260kSDnvIcNeh5:TtKwi29eDLL6cf","tlshash":"ee24a710db17247b622bd6adb4c0ba896f24c363d8725b3bfd95741cc6e64891223e1f","first_seen":"2023-08-25T13:31:05Z","last_seen":"2026-09-11T10:02:58.334938Z","times_seen":11,"resource_available":false,"data":null}},"time_used":1566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":886,"receive":680,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/img/icon_arrow.dc4b9070.c42b469d.svg","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:18.865Z","timestamp":1789120938865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /img/icon_arrow.dc4b9070.c42b469d.svg HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 162\r\nlast-modified: Sat, 08 Aug 2026 18:45:39 GMT\r\netag: \"6a777953-a2\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162,"size_decoded":395,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e83de18fae140215998e2b029f219c8f","sha1":"d85e50bd24c1157a3290c9036a35b9551aa5acd5","sha256":"e8b4851520f11a8dacf725b952a41bfbd0184ad7cfd7b5ab846b3bac06ccbe6f","sha512":"ea8dbfc87b78e5bdd189426d62973b0e5e619f9895ea623189c303b8991c2aaa97e2685795b634d5c5ef4c9d81c02f385d5ff4538b0fae5598e496eb23cf695c","ssdeep":"","tlshash":"f2c08cbc41895d28d1a4c224eb3834a98dafe0a2428d02d8cd803137a15a59b3c736bc","first_seen":"2025-08-16T11:30:34.813636Z","last_seen":"2026-09-11T10:02:58.335567Z","times_seen":22,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/img/app_store.f539e414.a975603b.svg","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:18.866Z","timestamp":1789120938866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /img/app_store.f539e414.a975603b.svg HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 695\r\nlast-modified: Sat, 08 Aug 2026 18:45:30 GMT\r\netag: \"6a77794a-2b7\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":695,"size_decoded":929,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8593bfb0fa9337fd16494132b19f1d3f","sha1":"e98b6155d081507c324a03ac98a2f1d0c2f1cd20","sha256":"77e7beb7a72d2fa97ab33afddcb119d41e5a2c1c2c1c25bbfc813bf3eac8d4ff","sha512":"24237e685dfcf25311aec3a9175d24df5fc8ff08fdd47e429f9ae26fd6a4b93e20aff23856dd9b215e7a86d22b91c38997f05ab9473fdcb4cc65f206eea493c2","ssdeep":"","tlshash":"7701c0d4a3e8c5904b077bf4da315461da6158d41b86c37547a129dafd350dd980d024","first_seen":"2025-08-27T11:07:37.135696Z","last_seen":"2026-09-11T10:02:58.336241Z","times_seen":15,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/img/icon_trading.733e50e8.66511d24.svg","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:18.873Z","timestamp":1789120938873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /img/icon_trading.733e50e8.66511d24.svg HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:19 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 969\r\nlast-modified: Sat, 08 Aug 2026 18:45:49 GMT\r\netag: \"6a77795d-3c9\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":969,"size_decoded":1203,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c52183d361ba0bbcb020eb1a7215d8b2","sha1":"494cb60466c07097fd4ecbfa3ce619efa9f19119","sha256":"c65cf57d776a0f497a5a82d969735326e9ea83edffda7f90b580598bc54b961e","sha512":"f7f8a2f57593b1fb68e139fd7c6c5b03ec8a3694eb74c7876f130a441a3d6cb5f8fc0fc616ec3bd6c916574f814a3a061dc10b47df3f61db21cf614f2568a147","ssdeep":"","tlshash":"2811a8784368d8a4b341c3f8cb1430921a3f2093eb2761980be17a360a2511d6cbb1b9","first_seen":"2025-08-16T11:30:34.800764Z","last_seen":"2026-09-11T10:02:58.336795Z","times_seen":20,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/img/icon_telegram.83daadb6.83daadb6.svg","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:18.878Z","timestamp":1789120938878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /img/icon_telegram.83daadb6.83daadb6.svg HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:19 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1045\r\nlast-modified: Sat, 08 Aug 2026 18:45:48 GMT\r\netag: \"6a77795c-415\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1045,"size_decoded":1280,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e57698fc4d52bb52d046c5e02deff69","sha1":"1eb52398654c717fdb35dc95390a04ebc36a31bc","sha256":"2eeeb11deb25289eeafb9587ad0155224228d84d196d7bc8762264e7396dfb49","sha512":"13c561c8f0fe216e70331aabb11929d0851abd2c259d90968d2e58f5ce782bb2d81e6eeb6b7d0d7166ac5a546a056759598a9883b91400d170f97bc7dd0a9fdb","ssdeep":"","tlshash":"fc1132fe7248b3e0c607d768dc36e890329f74f6bf95c7e8025299e563425c58884cb0","first_seen":"2025-08-16T11:30:34.8167Z","last_seen":"2026-09-11T10:02:58.337399Z","times_seen":29,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"threpa.jiekouduogongnengpan.com/swx/customer/index/listContents/2","fqdn":"threpa.jiekouduogongnengpan.com","domain":"jiekouduogongnengpan.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:18.881Z","timestamp":1789120938881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"OPTIONS /swx/customer/index/listContents/2 HTTP/1.1\r\nHost: threpa.jiekouduogongnengpan.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: virtually\r\nReferer: https://roblhooudepu.com/\r\nOrigin: https://roblhooudepu.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:19 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://roblhooudepu.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: virtually\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":457,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T13:24:30.180518Z","times_seen":18403393,"resource_available":true,"data":null}},"time_used":647,"timings":{"blocked":-1,"dns":0,"connect":216,"send":0,"wait":214,"receive":0,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/gsi/client","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:16.427Z","timestamp":1789120936427,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:51 GMT","end":"Mon, 02 Nov 2026 08:39:50 GMT"},"fingerprint":{"sha1":"FC:B8:DC:ED:6F:0B:18:09:F8:63:FD:24:B5:43:5B:82:24:12:8D:CE","sha256":"AE:2E:F5:9B:87:A8:3F:F9:28:7F:20:01:D3:0B:0D:96:0C:5D:E4:B6:0C:7C:14:E6:F7:92:2C:95:FF:78:7D:0E"}}},"request":{"raw":"GET /gsi/client HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nexpires: Fri, 11 Sep 2026 10:02:16 GMT\r\ndate: Fri, 11 Sep 2026 10:02:16 GMT\r\ncache-control: private, max-age=1800\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http, script-src 'nonce-zpicu-AwVXiGgWrcCzQWUQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/identity-sign-in-google-http\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_dd7de8473bddc59c6b748810a67a39b1\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/dd7de8473bddc59c6b748810a67a39b1\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_dd7de8473bddc59c6b748810a67a39b1\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":274847,"size_decoded":102534,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2663)","md5":"53709e0b3afd58d69db7034dc9af2df0","sha1":"9ad506faf8d490157eb687e0d2c15e6d2c731f5e","sha256":"4fceee63ef088241e2055350a72736ed4e7167c5e8ab1851599ee6719f5f07b3","sha512":"c6b0ac6da45f0e1efc7f14a9238c058aefc4ccf308530c2b81f38976708d65d81c921e8915de90900a571af6844d3b30ce53816057ff5a599adc7ea319f96fc1","ssdeep":"6144:lTdErKg7hxy5dsIJFTS/0o5Sfwnkc+8MBaC3mz2ZU:lTlssQ/0o5isHdMBaC3mzWU","tlshash":"3c445bdcb6e270359212f8b5c43f410ab076a679f4498cacba98c5f5acb0d490177f7a","first_seen":"2026-09-10T14:28:45.892194Z","last_seen":"2026-09-11T13:38:37.835688Z","times_seen":123,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":60,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/logo.png","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:18.863Z","timestamp":1789120938863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 42381\r\nlast-modified: Sat, 08 Aug 2026 18:45:16 GMT\r\netag: \"6a77793c-a58d\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42381,"size_decoded":42614,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1254x1254, components 3","md5":"b6694e86403ffe959a4640e2b557215d","sha1":"0458ef9bb6bc4f96d20d62cfcf44e1b13b352bc7","sha256":"0c2b3f53fd54fe4e8d80bf03fa524a5fe21f3bc5be07f4c4a9bb864d55516f5a","sha512":"ef04fcd0ef0ecc71d410cefe5cf42b2710479b85c2dd254fb198f23b7ea9933fdf278d6a74803fba0a05b258a6e860c8f968b8b03340df8f5f975524916f3179","ssdeep":"768:nDsnbR2hJBBx48xal2oSZ4IEqrI1Q/Z6fhWnsX65UA4rADzYtdOb:nhhL4eal2rZ4UrI1kZOWnsKFvQtdW","tlshash":"10139d3e72765fefd9c931fb459b2b583d3632a3c18545124908d69324cf1caaa84dcb","first_seen":"2026-09-11T09:53:51.053118Z","last_seen":"2026-09-11T10:02:58.338505Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/img/icon_vetor.e4607d5d.611d3749.svg","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:18.785Z","timestamp":1789120938785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /img/icon_vetor.e4607d5d.611d3749.svg HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/css/app.89135fc7.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 516\r\nlast-modified: Sat, 08 Aug 2026 18:45:50 GMT\r\netag: \"6a77795e-204\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":516,"size_decoded":750,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"28ff090ea047513c8d693c45a8d7b997","sha1":"45047a8c9383cb0bf177a305e29e8e73f1ec62c6","sha256":"1fbf51a6f9317074901acdb867855e356e4dadf4e9128824860f67b0f06a2dfb","sha512":"15a36db5908314611a0e91a218e9dd86a2603ecd63458f434386064952a141b7c2d860ca5c00714a269eb860e6a3c47004b3a5dfc82dad15898d5820af2e9f5d","ssdeep":"","tlshash":"8ef0c068c02ede144b95d234c78e29e0c06f936181984281773131a7b4948da74da2fd","first_seen":"2025-08-16T11:30:34.824242Z","last_seen":"2026-09-11T10:02:58.339077Z","times_seen":20,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/img/home_iphone1.b28f3fe0.804d15fe.svg","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:18.868Z","timestamp":1789120938868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /img/home_iphone1.b28f3fe0.804d15fe.svg HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 383384\r\nlast-modified: Sat, 08 Aug 2026 18:45:36 GMT\r\netag: \"6a777950-5d998\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":383384,"size_decoded":383623,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0e7f977994e466eabc093a4cf609fc2d","sha1":"0d39f845a828a2ac10d9784870d149e858b1ddb7","sha256":"4289e0bcab37e33909bb86a1dd7be7f65ed6f41e7d9052d692a320b079984e72","sha512":"0b8bda8a8d18437c02f43ebb0b9329491b871ce56f591cf0249296aadf0909c5175d952f1b5ba2df86c6019a4253ab4ed1572c58696ec0ff794715e38c3b9fcf","ssdeep":"6144:9QmrxmFcMqyLm1Nj0c2I6WFT41q43cm9CPkR0UIxoFWKVXnYXLCvhFVsA5m64:WYaGj0c2I6WGHMICPkR0HKFZnYuFWr","tlshash":"6d84125a1867ba2fef3a16895705fd889cf0c1b8107128fc4f947425808bd62d7e9a6f","first_seen":"2026-09-11T09:53:51.041418Z","last_seen":"2026-09-11T10:02:58.33964Z","times_seen":2,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/img/icon_quadrangle.b1234c66.5d7a1589.svg","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:18.867Z","timestamp":1789120938867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /img/icon_quadrangle.b1234c66.5d7a1589.svg HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1839\r\nlast-modified: Sat, 08 Aug 2026 18:45:48 GMT\r\netag: \"6a77795c-72f\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1839,"size_decoded":2074,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad2a598cbc4867354819ced1de0a2543","sha1":"3d2699951a1e22b088b089599ca5765d5bf8d61f","sha256":"007baf9375973bbf3be8b3cdefec37ca211f02320153439d40acf9c8c1fb09e1","sha512":"f70861e4a5d9cfec1df56de6afded0c7b0b12133cbbf963b7566871dd0a883a17a2979335a43b56b063c3bf2797499e28dd5f706b8d1808307791b9d6642100a","ssdeep":"","tlshash":"703173f967d5f2c0248fd7f0ec2429a6f65e347b6be9868882489dc4d34706c948ce44","first_seen":"2025-08-16T11:30:34.802919Z","last_seen":"2026-09-11T10:02:58.340211Z","times_seen":20,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/img/home_iphone2.da1b154c.807beaa0.svg","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:18.869Z","timestamp":1789120938869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /img/home_iphone2.da1b154c.807beaa0.svg HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:18 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 584982\r\nlast-modified: Sat, 08 Aug 2026 18:45:39 GMT\r\netag: \"6a777953-8ed16\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":584982,"size_decoded":585221,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7711cd9cb512a63319a9783d9287a176","sha1":"a757c5fc446da38af835a997b4b89a1cdcf065b5","sha256":"8b4ddc2d405277044072b91916ffdd5c562a0ee752b40883564ef5f4457982d2","sha512":"6eb491f18c55691fd5709bb2075eec526edc29a5a51fe9f964084adbc6da8129ad7b2e8c32e06675527f097f2dcfe59188ce0a460421b662ab469ded10a9bb2f","ssdeep":"12288:SoYSPOlDP6MqOdBCjI7cmaWxUx2zJSAOFeq0NOMSCkhFE:60MAmaWhJ2eqCkjE","tlshash":"92c4123759773e1ff32909d88436fc5cecf089e544116cd99aea3067c48a872a3e991e","first_seen":"2026-09-11T09:53:51.056056Z","last_seen":"2026-09-11T10:02:58.340815Z","times_seen":2,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":227,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/img/icon_charity.ce0fa0ca.4c8ca485.svg","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:18.874Z","timestamp":1789120938874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /img/icon_charity.ce0fa0ca.4c8ca485.svg HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:19 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1410\r\nlast-modified: Sat, 08 Aug 2026 18:45:41 GMT\r\netag: \"6a777955-582\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1410,"size_decoded":1645,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ba6222511f090f1d7c15972bc334c51f","sha1":"6eef2b302ecb1007b251d8e851c8ee6b14028719","sha256":"2de037ab06f6ea2f66702525e5371db5b65d170ba9dbff53535c4e058487cede","sha512":"01e7873e36fa3128918b42fc5acd4343d3ac0e4d7033fb1344223e8e9eb1ff19016179b03d6792f363ee30e39a943663da4d6fe782e00bb0769993ccc7d4ca60","ssdeep":"","tlshash":"f221cd7997348cecb14653bce7243ae0e62768623a4091489ee03d33261142c9c7a6db","first_seen":"2025-08-27T11:07:37.129139Z","last_seen":"2026-09-11T10:02:58.341342Z","times_seen":14,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/img/icon_discord.08727466.2e6dfee9.svg","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:18.875Z","timestamp":1789120938875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /img/icon_discord.08727466.2e6dfee9.svg HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:19 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1367\r\nlast-modified: Sat, 08 Aug 2026 18:45:42 GMT\r\netag: \"6a777956-557\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1367,"size_decoded":1602,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ceafaca5f98b194944c26ddd87e9589","sha1":"f80f75a76662a3b8ad31b5f14d01924927b41254","sha256":"44d487023634778368e6aaba3905e9280eebeb88575cbe5ddc0f014beac095a1","sha512":"fdbc5e54cf74620c9303a0e5f8008c028caf657873e335333bc3b26b54e6993a045ddfacbb4eb90b4175714021e69a020021c1eb1806cdba4da0e0f86a3220c9","ssdeep":"","tlshash":"802101f8c98cb4c489568379cc381ca8fbbf74b7274d9295468136d1f70b2f14687480","first_seen":"2025-08-16T11:30:34.810598Z","last_seen":"2026-09-11T10:02:58.341953Z","times_seen":20,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"roblhooudepu.com/favicon.ico","fqdn":"roblhooudepu.com","domain":"roblhooudepu.com","tld":"com"},"ip":{"addr":"43.229.114.42","port":443,"asn":138415,"as":"Yancy Limited","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://roblhooudepu.com/","date":"2026-09-11T10:02:19.535Z","timestamp":1789120939535,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"roblhooudepu.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Aug 2026 18:08:28 GMT","end":"Sun, 08 Nov 2026 18:08:27 GMT"},"fingerprint":{"sha1":"AC:1E:5D:4A:06:F6:4F:F0:80:3E:1E:DE:91:89:0E:2E:CE:E7:4D:40","sha256":"BB:68:DD:26:E3:98:49:4D:1C:CF:31:C4:39:F9:52:A6:11:EB:70:44:A3:5D:63:44:34:8E:4E:41:CC:05:67:73"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: roblhooudepu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://roblhooudepu.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.27.0\r\ndate: Fri, 11 Sep 2026 10:02:19 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 9677\r\nlast-modified: Sat, 08 Aug 2026 18:45:17 GMT\r\netag: \"6a77793d-25cd\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.27.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9677,"size_decoded":9912,"mime_type":"image/x-icon","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 512x512, components 3","md5":"21a096cc9c4dabeef8cadd0c8cb4c3a7","sha1":"150fb4de8962a5cfb252d1009c2d32d488035165","sha256":"dfa58a38a60e2a272744e6399125b47ad738d0054f52e6781951588f96ba5f38","sha512":"7132469dd73a967ae4db083f6aa4d8568ce5156e707e39fda879c7622b85a67449a88799cea0ae62e9e872c1628087426c1127bbf4a428667cf9316ac4bdee2e","ssdeep":"192:Ij+wK30FHULRFpX+LmbfdfjOJEhUcHz+E:Ij+wK3MHULhX+Ad79+2+E","tlshash":"a2129e67d363280ad8660dbe80cfe749e7e9b46973c4f39e25520b6b88f75809960860","first_seen":"2026-09-11T09:53:51.054014Z","last_seen":"2026-09-11T10:02:58.342485Z","times_seen":2,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"roblhooudepu.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}