{"report_id":"32700134-c8ef-4e94-8ddd-3d42149a7f01","version":6,"status":"done","tags":[],"date":"2026-04-30T10:53:26Z","url":{"schema":"http","addr":"emcd.ink","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":0,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"final":{"url":{"schema":"https","addr":"emcd.ink/","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"title":"EMCD — майнинг, кошелек, Coinhold до 14% годовых","dom":{"size":11021,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1119)","md5":"f92ce6ac40972d72cf0540c170e84b00","sha1":"e7e3a0a946eec81c37c448e0156b572a49494bea","sha256":"83d66129af77c4402785352fd5b0ded0fa045b3bffb79b2736d730f9816d0d7d","sha512":"83bf50fa576486263707307b87578dbcb225058dfb01a4d0f67887a88f8f3a75ca5e989b38c8bafde0fa1dab70b0647573b362076ae443a701581749b31651eb","ssdeep":"192:LUH0wrYcwrZGwrDwrfwrHAlwr1wrcwrVwrQwrnwrkQbraYa+oFNbRsgVstl97:IHbUDFB4cTAyunOLsBxa+oFNNsgVsb97","tlshash":"1232620922421b85d1171c2432dbdb1d561e931aed8794bc2eab2e2ccbcf5f853ea71d","dom_hash":"domhash062b000095b75430943acfae73e08311","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"emcd.ink","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":0,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-04T10:53:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"emcd.ink","ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"domain_registered":"2026-04-22","domain_rank":0,"first_seen":"2026-04-30T10:53:30.661939Z","last_seen":"2026-04-30T10:53:30.661939Z","alert_count":84,"request_count":84,"received_data":10814676,"sent_data":37603,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"emcd.ink/","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"68f432a33ed2206129d630b75d3b8b24","sha1":"c2a9bb77b6382cad13d4ae5e8384bad312de0852","sha256":"fa2ab6d666a255c6916e358eff83682ae025ce23d568599f3cfd9f5427d1e3fe","sha512":"cba9d135f1cb4d36f3790c5556c12143d19b6d574524e25f8c73570004b5238e2a3a391a26b29fdaec3469197dfeeadfbaad94d2a7f64ebf75f02bcaf3f1fbf7","ssdeep":"","tlshash":"d8b012be1aa4053000b16061790f7214387b00e3104e6d040a18c7504d2ca1f01e2e8e","size":92,"data":"","first_seen":"2026-04-30T10:53:39.620262Z","last_seen":"2026-04-30T10:59:29.950397Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"emcd.ink/RoobertPRO-Regular.DyyezJ1H.woff2","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:04.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /RoobertPRO-Regular.DyyezJ1H.woff2 HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 61540\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-f064\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61540,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 61540, version 1.0","md5":"78f8afe8dec62f9e84541c96311c832d","sha1":"aa2b6ee7e20a5f8d7d1421196c6b760e5c4c89e6","sha256":"053aa6e525dda8ebc269f5f5c8c4c8f1c93bc7c28d89d401950e65aea21f0cf3","sha512":"373577f03abca84b9f40494deec512271f3502b6f4a2259e46d23aed7c68a440c64106eb70db6edef5bde158a22d76a934c3b46ef62e0817c6de08901fa62c03","ssdeep":"1536:R2Vh2jerZdd1DfRCnk+29LuP8x/8g/eHAC6TL15LmRm:YOSvdFpCkXa8KgGHAC4L15CRm","tlshash":"7b53f16784af39c61888dbf3c97e3e06e440c828208c3c9f5b5e758cb9d4156f5eea85","first_seen":"2025-10-14T09:54:33.798444Z","last_seen":"2026-04-30T10:59:29.921558Z","times_seen":3,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-30T10:53:02.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:02 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 58550\r\nConnection: keep-alive\r\nLast-Modified: Wed, 22 Apr 2026 15:45:33 GMT\r\nETag: \"6bf1d-6500e6c1c701b-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":442141,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16103)","md5":"272d407bedd64c1468affaaa84e9cda2","sha1":"42951ae8b9bb1bcd44c38c05607d1b56cfd96783","sha256":"2a261d0f0d0300746b4b1a6e6d7e23b4305517193479ab517d618b6d553ab44c","sha512":"bbfb19951437c1edb6875f8e3423fa7b7819b52b9ce927ddced1b5254fa7f3f6d7963225c2471093b263c637c7b5ea33aa5805a96724e817489169d8b5de6cbd","ssdeep":"1536:/oK+ZQmVb4J0dOSyZ0qjffyinoANqq84eR7BhP3SOZ001uFO3axnUQqoCzJ71b+E:/oK+SmOSxhzJ75Nh6fjiA1kf","tlshash":"df942b507170707a1213c2b5daa26d29ba22b903ce0a15e0f6fc5d74bfd7de2956328f","first_seen":"2026-04-30T10:53:39.537372Z","last_seen":"2026-04-30T10:59:29.896191Z","times_seen":2,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":109,"dns":45,"connect":28,"send":0,"wait":58,"receive":41,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/RoobertPRO-RegularItalic.DiE012SZ.woff2","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:04.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /RoobertPRO-RegularItalic.DiE012SZ.woff2 HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:05 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 63344\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-f770\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 63344, version 1.0","md5":"8b29b475e2bb96a6199b096f54398043","sha1":"4906648b6be16a24d010eb5c3caba9be76b1d4a4","sha256":"5865a6a9382edfac9e50527329b855247aec1734206594857188ed7a6d5edcb9","sha512":"ed459e265658a893d6b5f2b95e2d52a15e564def96394d1d9e7eba7e8472ad245d749e03aeaef41995ecd6bf7e9aa51a890e14313c42fac64518aaa7ce01170b","ssdeep":"1536:ZDe414R7OljPNXAuoJ61enzVLZZY06ldqdm:teFWGxgenPGdOm","tlshash":"8453021abe49f2f2d163b2f0186b77674f93727f308399932e29a0397375249b4855b0","first_seen":"2026-04-30T10:53:39.538333Z","last_seen":"2026-04-30T10:59:29.944888Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/CookieConsentWidget.DDWuQ0uR.css","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /CookieConsentWidget.DDWuQ0uR.css HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-1ca0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7328,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7327)","md5":"424be376be760218ee0fbc9ca715c857","sha1":"29ca82e8f34629411fe9aaf4bedaaf59842ce453","sha256":"ae226e4884027efd537bb01c3aad75239ff7f24a917f6b3d6447ea9f368a4a86","sha512":"550eb6beca5166d79a4ec6e91aa9fbcf9edc4668268cd0b34c7b982600db04cb5b5d5ea286e1a356ae5e7411e6faad5b4b8525cc95e8939253dbc7a18147d76a","ssdeep":"96:C8BFRJzlaBp1B4+lcZNKRW90u+C/CyrCx21BdIN:CKha1B4LZNKM90u+C6y+x21Bs","tlshash":"2be1030c356c95be23fa62589ef11c4e7a207d92852199eca101b8347ece2836de5b27","first_seen":"2026-04-30T10:53:39.539288Z","last_seen":"2026-04-30T10:59:29.909281Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/default.DvZWXyee.css","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /default.DvZWXyee.css HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: text/css\r\nContent-Length: 273\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-111\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":273,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f38554095956a421463a1244a8d98ee8","sha1":"cc45716e46216f6a3c07c2494aedef4d4cb04be9","sha256":"aa2d1d5f583b5497497218082fcdf8dbde782ecb8c72cd5730a6bea8d31567fd","sha512":"9d68002baf3836ed8a1bc86849269dcf14c17121b477d22053732c826d21b8a01e145bf38b549b336e7c5742a1f2bdcbc9725446b7972f55ae1c7d507390d718","ssdeep":"","tlshash":"f0d05e422b14623e705a645dccd3106e971d9022fb4f6af8ef7c957c698da820436c5d","first_seen":"2026-04-30T10:53:39.540195Z","last_seen":"2026-04-30T10:59:29.924942Z","times_seen":2,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":39,"dns":0,"connect":31,"send":0,"wait":29,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/index.2-H2nRoc.css","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /index.2-H2nRoc.css HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-4029\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16425,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16424)","md5":"09ee45fa39d03db93d2727eba02bfa0f","sha1":"d39f3dc9e04f2b5823fe461147f19b13e34ae709","sha256":"9cac08fbb375b7206c19978a4c3de04e8b8ea77e89e6e06d7a8bf960c41f8b09","sha512":"4299655010fa95f5aacd7e59413987cb6a4cd18b5875ed14be73b07109f8eb84c4129e291641cc17056693651388d79bd21258c479126c6637a9f809125c17ca","ssdeep":"384:2avfY1CNQmQcnGCqn1CNLSVphghumYlmMf1CN2n1CNT6ahO6QwGNI7Q56wGS6E40:RvfY6PnAnYSVp5mYlmMfXnIlhO6Q4I6W","tlshash":"6972fec1f13490e9731b52798a9668c67e0bb401c29416d1ee65fc70f8ceb9319e2b5f","first_seen":"2026-04-30T10:53:39.541042Z","last_seen":"2026-04-30T10:59:29.901864Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/submenu_products_slider_banner_descimg_3_570cfa8f00.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /submenu_products_slider_banner_descimg_3_570cfa8f00.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 7350\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-1cb6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7350,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"af999e571c291b717cbae841c5eda10f","sha1":"2973f8ef10940f1d72a091148c302c7d0abb3d8d","sha256":"672126ff535a1745e655c6d7a5f307109b3471bbdba3bd403d176142235d28c1","sha512":"3afe662b67106c61f12bdccecb34c15eb30094b908c4532e3313431270d8ec1c206841d8ef1eab95724a4e5972396f66f4783ed6b515a79da88aa6df05f98bd8","ssdeep":"192:0CGAp6SrtfdNb9nBJpjrFB7QVmwXYM22e19PH8u:0PA7ZpfIdXHSHP","tlshash":"0fe195f2b39663d4e405ffb5cd269179a91e2cfa3fc582a5c1b5bd4092d10e9cc48c98","first_seen":"2026-04-30T10:53:39.542244Z","last_seen":"2026-04-30T10:59:29.90234Z","times_seen":2,"resource_available":false,"data":null}},"time_used":938,"timings":{"blocked":898,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/hero_prod_6_a8696311f5.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /hero_prod_6_a8696311f5.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1392\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-570\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1392,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d0362bb03859ae8007573b555f6f2215","sha1":"784f822ce085072c63003cc70aa1030bc685e7db","sha256":"bf5d0b1ac75c77ea640bdc2e21704bf805a7fddba5192d5a52ee43817fb7ffc8","sha512":"a19a9aa489addd000037d15833a2ca9411d9e01959bce39e21cf7f8cab9d627dbf0f013a3b52558c470efadfbe772e52cb3291a980f1a0f7281861ff5084c80e","ssdeep":"","tlshash":"0621fce5106ae2edc804433dcb7e66d670333cd9258481c5b3963e293d6522f8c4c7c2","first_seen":"2026-04-30T10:53:39.543137Z","last_seen":"2026-04-30T10:59:29.913076Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/ru_5_b7102fbc53.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /ru_5_b7102fbc53.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-1d8fd\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121085,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1156 x 1160, 8-bit colormap, non-interlaced","md5":"cca5f85277688053f7da85d7cd0f8ccd","sha1":"5a43aef81849d1dfb86bd1843f52ca75d2c7758f","sha256":"1bf76ae5ea2f26a5993de574fafdcdbb4898fb3e510ed5eb81cd357d6c55ecda","sha512":"ea44083866411a7828792eb701a9696602d91d26dc7754b683a28957c0a477abaa4bcd97a2fc5de3eb78b2d3de299d81f71b2e62e346c8f5e9a85df5f7b6cd3f","ssdeep":"3072:UWrtw5Mikvc4RDh91P27/b23GQXOvoAqA/JoT:Ux5MiGRr1Ojb230voAqAhm","tlshash":"dcc3126cdcccbad6ffc50faa1b9ab70087d54644015d32042d4ab8986c7f6fe51a272e","first_seen":"2026-04-30T10:53:39.544299Z","last_seen":"2026-04-30T10:59:29.948458Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":62,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/RoobertPRO-Medium.Ck59hl8m.woff2","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /RoobertPRO-Medium.Ck59hl8m.woff2 HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 62084\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-f284\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62084,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 62084, version 1.0","md5":"e96c85c178995b3b309ae0f8b5e67efb","sha1":"24298a14dc2e8e1704f063d83dbfd0bb9747d281","sha256":"845126226eae227772732ac5ca0e35bb80c7da1ccd247f0ed6966eea5f274d01","sha512":"e02deffd97a9230adf9f31580c63a2ea0085193f792a032e71933031bcecc4894ea86a511df0296dac2d6a9f238432e37ad177246184db4967a85069a4d3687b","ssdeep":"1536:cxSNdsphIioE5dGL22Yf50vQK5KR/Y9b1tI8hO4PK:SppitE5okaQls1tI8tPK","tlshash":"ea5302c9bd954e10db1222adccac00daee772a343a03dc5f7e54fa6359286417c8ce32","first_seen":"2025-10-14T09:54:33.711548Z","last_seen":"2026-04-30T10:59:29.911993Z","times_seen":3,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":189,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/RoobertPRO-Medium.Ck59hl8m.woff2","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:04.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /RoobertPRO-Medium.Ck59hl8m.woff2 HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 62084\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-f284\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62084,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 62084, version 1.0","md5":"e96c85c178995b3b309ae0f8b5e67efb","sha1":"24298a14dc2e8e1704f063d83dbfd0bb9747d281","sha256":"845126226eae227772732ac5ca0e35bb80c7da1ccd247f0ed6966eea5f274d01","sha512":"e02deffd97a9230adf9f31580c63a2ea0085193f792a032e71933031bcecc4894ea86a511df0296dac2d6a9f238432e37ad177246184db4967a85069a4d3687b","ssdeep":"1536:cxSNdsphIioE5dGL22Yf50vQK5KR/Y9b1tI8hO4PK:SppitE5okaQls1tI8tPK","tlshash":"ea5302c9bd954e10db1222adccac00daee772a343a03dc5f7e54fa6359286417c8ce32","first_seen":"2025-10-14T09:54:33.711548Z","last_seen":"2026-04-30T10:59:29.911993Z","times_seen":3,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/soc_youtube_hover_9e75f8e766.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /soc_youtube_hover_9e75f8e766.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1235\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-4d3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1235,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95eca46482f940ead5556f281de19025","sha1":"16ff772344ce1e37cc179289b6bca1e43ce9bbc7","sha256":"ac98ad7d0c667a40d015c561af1346ca00fdff857394fd67e5d6c23914f0bae4","sha512":"feba9067c7d719652b09af206e0563399437ad570ec437bda7043b4029b565fd32e34c207344f25962ae232464782ea16cde3519bda265c794572ab496b77a8e","ssdeep":"","tlshash":"ad21dce9f3fc48d92407d7e0dabb74753b3624f16724da5882f116b4e8201eec8a8840","first_seen":"2026-04-30T10:53:39.546502Z","last_seen":"2026-04-30T10:59:29.899101Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1011,"timings":{"blocked":981,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/index.BPKnpkFg.css","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /index.BPKnpkFg.css HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-cfe\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3326,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3325)","md5":"2beefe115d90e676241a4f7718ed8f12","sha1":"e9de7f42d0e80bd68c03a0bfc04f25c2db3a77b5","sha256":"892e15b6d0406363d0cce59a6f597e447b63123adb88d48396cdd8344406b66f","sha512":"cc8a3e2c1ba577ce6ecf10c69953106d682e8901678f310de694ade06c6b3d630c11469ddf385f40a46b449fe452a9b484f8c47b8d6128734a6ca56bd6d36b9d","ssdeep":"","tlshash":"ed61cc113231f3d96bd661394ad6389a7520d003bdab0be9d85aee3471ce6c34ce2767","first_seen":"2026-04-30T10:53:39.548169Z","last_seen":"2026-04-30T10:59:29.919144Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/index.BBGkwqjo.css","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /index.BBGkwqjo.css HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-1b01\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6913,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6912)","md5":"5343c280b63d8f028e8dc797ed6221d2","sha1":"891ca176787c8e55fcc68340c52ccb84c4c9d405","sha256":"a0a44d0e5bdd657729d10dc42777c983fce08b7d4ece3099f08fad5e6a1ff65e","sha512":"db9d97bdef4ed82db98b9af885314bf15377c449f8ac884b4d5646f6c194f2058f7683c010fe4ab694176d4607d858b1fa4ed04f8901ab4607fc46d3e5d49ddf","ssdeep":"96:/FRJzlaBat7zrRaRcQM5DKUua9SNG3/Ebtfa7Ma0ggMcfE:thaMzrR1DKUuBNG3/Ebtf2Ma0O","tlshash":"2ee14710a5417e753d230fb2398bec45d8a05e69ee320169e7fa7c2dfaa1ed954021cb","first_seen":"2026-04-30T10:53:39.549076Z","last_seen":"2026-04-30T10:59:29.943089Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/icon_new_tab2_9c37c97fb2.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /icon_new_tab2_9c37c97fb2.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 493\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-1ed\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":493,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53c861f6d0c320a44bdb2901083bc113","sha1":"52702d22848ab79fd991160be4b2b730bfefe517","sha256":"1400c1ad0b6ebc68cb00f514be4b6ac4e3c32ee1468702f96c586adfd4c91944","sha512":"cb081dd7639e1ede85735c8fe5382c8d05850f65750840c89c6e2784295f23a1613dcc211872cc9df0a5d2d926b81dc7d1e7d5788398ff22c9f87be58ab903d4","ssdeep":"","tlshash":"7cf059b8a3d5a3d017c08781e838e064a95d00f363186e8a5a208690f9f25525c0cef0","first_seen":"2026-04-30T10:53:39.550025Z","last_seen":"2026-04-30T10:59:29.90335Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1069,"timings":{"blocked":1030,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/hero_prod_1_6a8c72fae8.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /hero_prod_1_6a8c72fae8.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 6965\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-1b35\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6965,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8159285faeab26743bd799fa553601c1","sha1":"26010ebc4d15aeb709726a8b142989829cbfd1ae","sha256":"4e054c2f9cee0c1d6b24eb3d63adb323c659937eb91231ffc5f3e48c64327418","sha512":"6efc0d329dd9d6df6bbee0a5910539dfee956c2837d8d41224442e66f3cd26b35248b68b48b15b1adb9cb116dad244a0f1c2561449952e36e228fbe69935e455","ssdeep":"192:bJGXPy7ptNZ9DLHEcb2V3NRSv2sl555MJN:bJQ2itNNRSv2sl5An","tlshash":"7ee194ee57d633e0d821d3e4e912547ab5af38fe6bd1c790c6048e847b6229d988ccd0","first_seen":"2026-04-30T10:53:39.550813Z","last_seen":"2026-04-30T10:59:29.909816Z","times_seen":2,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":406,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/d7ce7926e14f817fb52b1d9b9e8003cb.gif","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/index_2.html","date":"2026-04-30T10:53:04.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /d7ce7926e14f817fb52b1d9b9e8003cb.gif HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/index_2.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/gif\r\nLast-Modified: Mon, 30 Mar 2026 12:39:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efe-9a2a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39466,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 74 x 74","md5":"c6e2baa39b35422b0a9e4af23f6278df","sha1":"b311670b5175d4e8b17bcd7a1cae28ba69684fd0","sha256":"4e508f3bdc6943bb181be7147259042af24c04a2cc1530fd6ab2a51fd5df9255","sha512":"b9781f094e8b92aa01a53ed8be90b193ae9a9056bfd97671eabdf26befc075f2a6afc0df199170a81580cd5dc85bc12dbddfc505583c5cb6ea19612f07cdf67f","ssdeep":"768:VQ0RCF2B1xR7LkULCFAZOQ+3KJv7rktNsc9CTtTcjMn:UF2B1xMFOOCJDG94tTAMn","tlshash":"5903ae7f10842962d219bbf447a5e6ac8631d9f43b52570e768c2b213ea32fd204fac5","first_seen":"2026-04-30T10:53:39.551775Z","last_seen":"2026-04-30T10:59:29.93667Z","times_seen":2,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/swiper-vue.B0dU-v8f.css","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /swiper-vue.B0dU-v8f.css HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-2c06\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11270,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11269)","md5":"c69eb0a57aed139c143130b751df6c5c","sha1":"5b387d2386da0143ee1016bf8f5df2ccdd038dfc","sha256":"2189cce4640d82538d02a218effea8eda9e80fdc42cbecb632b1dffb124fe918","sha512":"8ae974f68b4e4ec3407a123755ac6313ea583a0722bef4824426e4d69d08901f47ec7ff58fc9863bd849ac28f168610a566d56621efdcbcc2b486d8f149822ba","ssdeep":"192:gnJICdKSme+jeHCAlsedOJ9h0Mxw2GTR3v1zYfuf4:oJTdKW+SiwEi289MWf4","tlshash":"753299d85350282753134f3657b68bb8e57448c147d38e7a91c0ad98c6fbcb9236f2ba","first_seen":"2026-04-30T10:53:39.552722Z","last_seen":"2026-04-30T10:59:29.918642Z","times_seen":2,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":25,"dns":1,"connect":29,"send":0,"wait":33,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/StrapiDynamicWidget.eqrzBcw2.css","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /StrapiDynamicWidget.eqrzBcw2.css HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: text/css\r\nContent-Length: 490\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-1ea\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":490,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (489)","md5":"f961ba2ee65ed1c71f2538dbe5ffe23f","sha1":"87815d7ef58813b41d4a69d81b8d926c3e82cbea","sha256":"11b139ae1aab4ea3a5ac83f52a98f629dcbb47c54f3ac79e41ced3bbff149f90","sha512":"deb336b89e0f767a688aa0e98fea7f13ee573021d0ffbcc23626c3569d8550696cbfdf9cc91eefdebbad3229adc3d8901901adbe21ed2d2896d8287ae134bbc2","ssdeep":"","tlshash":"02f0a048d38c0d3faa22451853e3fe46bb791e5357227607160b7eb48b420a6233bcda","first_seen":"2026-04-30T10:53:39.553628Z","last_seen":"2026-04-30T10:59:29.912505Z","times_seen":2,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":39,"dns":3,"connect":35,"send":0,"wait":37,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/hero_prod_4_e2b5fbc789.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /hero_prod_4_e2b5fbc789.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 4353\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-1101\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4353,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3954a68833367eb20f57114102dec763","sha1":"830f66afd852a24440641f6d743e5eed9ee79c91","sha256":"e040dde925ee149513d4afacd9e3feadf2f225e612adf3138b4d9e3e08f854f7","sha512":"878c5f39ee0978329527d769c22edfaa427c3555fce2c737f2b67dfb99e2e2bb385431af5adfacfe1bc8346c8683e1f00c09d49501ab16375f9b4613f74921dc","ssdeep":"48:T+dPLKX5mZz/dNKti5zLCrMhFeOsp9UgyD8SVOqcaF2Lzewkup6U0bVkjQdWAjoy:6u5mN/d553CrgcJRyD8S/joHdkDXVES","tlshash":"cf9166fbb789b2e0cc45e7e28706203df02774edd05684e987997e017e494ae8c9acc0","first_seen":"2026-04-30T10:53:39.554719Z","last_seen":"2026-04-30T10:59:29.932077Z","times_seen":2,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":435,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/hero_prod_5_e44e9df971.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /hero_prod_5_e44e9df971.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 12822\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-3216\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12822,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fac792dba2d844fe5ccc885b1a6f040d","sha1":"55919796f9e5b1abbbba9374ad3bc58b76711172","sha256":"dd42cd02ec4f6d6beceb7f65c9cf87f7dbfe94700d6ba2c7733454acc73ddb3b","sha512":"cec48d9f622ee789becd26a09b3310666b70a78bd43d8bfa768e77b2e340dcb15b3e27d2bda559465480238f18ff9027f3a6eae8dd2355922732557085a401f8","ssdeep":"192:yfMYwYxzYdP9megIcw96+3eG7xITukdDYOKgJ6yV06qNq/9qsgK1TsCjR52ibr:gMOY9TuW3RNFkdDiE6e68Q1UTFNHr","tlshash":"234273e866e9b3e4f001f7d0c8169472f9b734fab316cf65c7909e91ba02028d59acc5","first_seen":"2026-04-30T10:53:39.555684Z","last_seen":"2026-04-30T10:59:29.927188Z","times_seen":2,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":32,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/hero_prod_8_3946b3d536.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /hero_prod_8_3946b3d536.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 10430\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-28be\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10430,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"933fd8f32aa3288f444876f9f6beb5f3","sha1":"e38624742c9165f416f6acb2b63ffb85743c1757","sha256":"3190b7a8662cc98860263ffba8f975640fcde789fa92dd8172b10587300b2bce","sha512":"37c9aa6f6ce4c23cd1976da048e917a2c60540d577d8e0392c7a63ad3fca511015ed2b4e08cb840b670063f1658b47ba96d7316f4e76f8006f0a1e8bcd5d2835","ssdeep":"192:MjWTb23rApFVONCLqoE/CWxytY8fWsCmPs6eS9EczNPI+z2JjUBtGLw7p+IIb:RTS3rApFoNYcCPY8fWAU6eS9EENPI+zo","tlshash":"1a2274ef67d533e0e802e3f1c91670b6b55f70f93a12ca61c7946e95ee8642c8888cc5","first_seen":"2026-04-30T10:53:39.556641Z","last_seen":"2026-04-30T10:59:29.923899Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/hero_prod_9_3ba35b7fc7.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /hero_prod_9_3ba35b7fc7.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 6865\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-1ad1\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6865,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e48a9439c4ca325a628ea0b2bc222e6c","sha1":"7aa6d8ac6b7905919bd4a5be985e8bff89cfcea1","sha256":"1da660d6cf4a0fd73071977938c463ff1156e2441914192cc5312b7d9918fe85","sha512":"3c119749d6879740a77723d7d4e945292916528d289fd77f9b60fa92fa186a490092dece84e61a75fae7c3a6ef52ac18edd9d211a834fe3cce22d36f8f3c41ef","ssdeep":"192:VZVi1jn5h3MUJ/5Rg3LyPGwSaHD+rOoAxjybM:VZVi17/8WRGLHVaHKrUWY","tlshash":"0fe1b9e933e2e3e4f442b3d4c616a462716f14fa2b56ca6dca60bdc8fd0105d8ca5cc6","first_seen":"2026-04-30T10:53:39.55922Z","last_seen":"2026-04-30T10:59:29.932689Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/ru_2_bcfe6717c5.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /ru_2_bcfe6717c5.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-27410\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":160784,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1156 x 1160, 8-bit colormap, non-interlaced","md5":"77a5061b143462a995f8734bfa381c49","sha1":"492944e596a2bf676d4946ac3fa06efc45bbf29d","sha256":"554a4fd95998f5f88d3e326cb6b540674f4e1c9538c2aa5fdefb997ab3a359c2","sha512":"883ff4a7503b7e6ff1c2d826556566a62b17501925bc1490a8a69069fc22e2114dfbf8e5ceb910d24206f297162340abcc1bce1e03c4a2778ed61daea5979a25","ssdeep":"3072:8tP2OtYw3lJ2I/cXK8BcY74JZX82KtB3IAnBmPKS+6KU7+5CrkXqFcd4sdWk/hh/:8Z2OWqJQa3pJZMDtB3pK+6KUi5Ccy7kL","tlshash":"84f312cc4ece5b8ec0691a16aca2161f9b0e2fc7b72d1b4ed82680b5d9dcd55f520a07","first_seen":"2026-04-30T10:53:39.564285Z","last_seen":"2026-04-30T10:59:29.9051Z","times_seen":2,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":68,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/RoobertPRO-Regular.DyyezJ1H.woff2","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /RoobertPRO-Regular.DyyezJ1H.woff2 HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 61540\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-f064\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61540,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 61540, version 1.0","md5":"78f8afe8dec62f9e84541c96311c832d","sha1":"aa2b6ee7e20a5f8d7d1421196c6b760e5c4c89e6","sha256":"053aa6e525dda8ebc269f5f5c8c4c8f1c93bc7c28d89d401950e65aea21f0cf3","sha512":"373577f03abca84b9f40494deec512271f3502b6f4a2259e46d23aed7c68a440c64106eb70db6edef5bde158a22d76a934c3b46ef62e0817c6de08901fa62c03","ssdeep":"1536:R2Vh2jerZdd1DfRCnk+29LuP8x/8g/eHAC6TL15LmRm:YOSvdFpCkXa8KgGHAC4L15CRm","tlshash":"7b53f16784af39c61888dbf3c97e3e06e440c828208c3c9f5b5e758cb9d4156f5eea85","first_seen":"2025-10-14T09:54:33.798444Z","last_seen":"2026-04-30T10:59:29.921558Z","times_seen":3,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/advantages_slide_3_dff6606f5a.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /advantages_slide_3_dff6606f5a.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-62b87\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":404359,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2160 x 1302, 8-bit colormap, non-interlaced","md5":"f753cca62ed074cd72dd1cbb9ebecd78","sha1":"17946bb6feb95e0a87a8bcf457e6f0139bcea7d2","sha256":"b000347baecd0b6b5e99c8a8fa1af0a4466531e1b4e8738617942668f4d46ee9","sha512":"d8b1b06d377ddc18575b1491dee243f5e48dfacbc5ac84efcb57145335851a29e61338067bf58a72637aecb2e9c75021e944f8c92adddaad3b5cf6964eb02845","ssdeep":"12288:MoBXfUIRd2uf8rHZkrbBt3+6mDYqZlQnhibgG:MEfUILB8rZktO2Sear","tlshash":"ce8423c949142600ae2dbafea30dc4a7452481f4e93b5c5e73df88df51ad2a09d3ed72","first_seen":"2026-04-30T10:53:39.565238Z","last_seen":"2026-04-30T10:59:29.941951Z","times_seen":2,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":434,"dns":0,"connect":0,"send":0,"wait":45,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/logo_emcd_black_d62dd43639.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /logo_emcd_black_d62dd43639.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 3740\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-e9c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3740,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"417d0d70322fdb0078fbed2f145411d9","sha1":"033e10db1bb328b789257daf6a6e2504cb76fb48","sha256":"e73b0db44e3a6f47d8b01412ad4ef3f8c12d2081c555228f6eb3f8d99e2c21a6","sha512":"3eacd3b14cc05e4a8bb4e63a7812554e3cb722b90ca42cfc1d331fa3e8402b8e2f2381da97b41cc66fefeec1eb1f6720feb4687c0e6905681293c97c49257f2d","ssdeep":"","tlshash":"ed7165f0f3aab1cce401e7e5cf3614a06f2f75ed794189ac0a73bd60a4011ad449ace9","first_seen":"2026-04-30T10:53:39.566205Z","last_seen":"2026-04-30T10:59:29.917506Z","times_seen":2,"resource_available":false,"data":null}},"time_used":896,"timings":{"blocked":761,"dns":0,"connect":29,"send":0,"wait":30,"receive":1,"ssl":74},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/favicon-16x16.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:04.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/png\r\nContent-Length: 577\r\nLast-Modified: Mon, 30 Mar 2026 12:39:22 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efa-241\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":577,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced","md5":"9628ea1af61052f36656b5200da31e50","sha1":"9029df2eb03834fc901ca247440cabed92a63f6a","sha256":"7180bad9a1ba02f3064354ec5c5896f5730977334504c7131f8d024232cc798d","sha512":"cb1b673890bd5044d41bdc05122a4aeb8e6ea46713da45398b80295af4fe1b932940293557fa02d5b3e24fa9b2ea53d195005d6914daa40ecf0d064f4ff080d8","ssdeep":"","tlshash":"99f0e1e3d0b69da8dc1a162721265346a92e819b12411c09ea58d3a54c3dec87076fd2","first_seen":"2026-04-30T10:53:39.567002Z","last_seen":"2026-04-30T10:59:29.921099Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/index.C9ltkALb.css","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /index.C9ltkALb.css HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-1797\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6039,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6038)","md5":"643b5b332b35eb78da6702ce53d262a0","sha1":"0d4bab7123cc56b06bde7e09b5e701776b97a3be","sha256":"ed156d6bf6f87ce6614d20ac1807d7a35e667623f415df953dc7bd40f852aa21","sha512":"c950455766b8b783468d50f046706067abaddeae6e1f6ab671818cbf4d2d691c5ec0d86acd75fa420fb56c48518e423d1e6b0550aad742b10fed3180ea26e4bb","ssdeep":"96:WOhO/OPOUOo/OsO/OvOKOMOmOJO2O/eOuOQOrOoPO+O9OOEOovObObO9OoORxOoE:JYG2XoGvGWVP5Ap/RBbao2x9hnoWqqsK","tlshash":"68c1ec107198b1a4301fd52225db6c47943bb861a3f023bdf5b6a96dbeca26205933cf","first_seen":"2026-04-30T10:53:39.567933Z","last_seen":"2026-04-30T10:59:29.900383Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/hero_prod_7_4885e0963f.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /hero_prod_7_4885e0963f.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 6965\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-1b35\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6965,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8159285faeab26743bd799fa553601c1","sha1":"26010ebc4d15aeb709726a8b142989829cbfd1ae","sha256":"4e054c2f9cee0c1d6b24eb3d63adb323c659937eb91231ffc5f3e48c64327418","sha512":"6efc0d329dd9d6df6bbee0a5910539dfee956c2837d8d41224442e66f3cd26b35248b68b48b15b1adb9cb116dad244a0f1c2561449952e36e228fbe69935e455","ssdeep":"192:bJGXPy7ptNZ9DLHEcb2V3NRSv2sl555MJN:bJQ2itNNRSv2sl5An","tlshash":"7ee194ee57d633e0d821d3e4e912547ab5af38fe6bd1c790c6048e847b6229d988ccd0","first_seen":"2026-04-30T10:53:39.550813Z","last_seen":"2026-04-30T10:59:29.909816Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/index_2.html","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 2154\r\nConnection: keep-alive\r\nLast-Modified: Mon, 30 Mar 2026 12:39:22 GMT\r\nETag: \"2b1c-64e3d23de3280-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11036,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1119)","md5":"c64070b229dca24daf52aa8c7ad0db5b","sha1":"4bd21061e84eb723b961cc5057c5a74d7d3e3f31","sha256":"a5ff05ac066125830bc67883037e5e0af99efd8a88a4c46a552a4e59593596da","sha512":"43b26d6545b97cfd7c6350b4623b881a2ee99979d123184cf81105a62aa1b6c39677c070b9aff239c8b88f53a75244ab2e2429e236f80798011c4729d0ff249c","ssdeep":"192:LcH0wrYcwrZGwrDwrfwrHAlwr1wrcwrVwrQwrnwrkQbraYa+oFNbRsgVstl97:IHbUDFB4cTAyunOLsBxa+oFNNsgVsb97","tlshash":"3432620922421b85d1171c2432dbdb1d561e931aed8794bc2eab2e2ccbcf5f813ea71d","first_seen":"2026-04-30T10:53:39.568801Z","last_seen":"2026-04-30T10:59:29.935042Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/RoobertPRO-SemiBold.Ch_ZlkY6.woff2","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /RoobertPRO-SemiBold.Ch_ZlkY6.woff2 HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 62092\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-f28c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62092,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 62092, version 1.0","md5":"f397255089d626a9a059e66a08203e87","sha1":"0a87afb3680ef901ab2c85acc714fb81be9e9f10","sha256":"21820b42208d3faa80758de13af9892d329625603cdf00426b6430f64b19ab57","sha512":"e6c95c8c0073e5dc76a9a0439d68c74d258c3a9437f61946be96a50908b3dcdd89b9c9cb918aba7fe4cd1a26dea1808cd1f0078423d9dcb63ef202c079e10adc","ssdeep":"1536:5Qc4Xg94LuSHrRSQNTQd0MeBvqnugzUJGs40bpaXEs5hJYGrKOpIUx:5QDguLzLRSI8OM2gAJGqm53JYZOSY","tlshash":"0653024685eb0a59c8122473f16e74da8d7c47430bbe10f3c9cb8beed5e5270a893885","first_seen":"2026-04-30T10:53:39.569825Z","last_seen":"2026-04-30T10:59:29.918014Z","times_seen":2,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":137,"dns":0,"connect":0,"send":0,"wait":140,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/index.llfDGIFG.css","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /index.llfDGIFG.css HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-2651\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9809,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9808)","md5":"058279677887a4a12617371ccb1a2f65","sha1":"b33fb1f929576c13b8cf0f092f03a3056a25c77e","sha256":"99c50eaab1dbfcbfd13e308f1457f37730340ae69e60c63428edd6856bd40ad9","sha512":"e7f6d1e1b7218a82683522f24e255c86508249ed2aed775605dd716a2a9772128ccf2468d4c43e599ac6d4dacdf0f1cc9efbba897f45d4ffcf19e49ab94e8a3f","ssdeep":"96:gFRJzlaBzxSxhgSZudFRJzlaBgEBHFGHYEaYBZpXFDq1x9efLxglfEt9oCFHZ:ghaXkaSZubhavlgpZpdq1x/q9oCF5","tlshash":"0d124281f93af064112b8d3750da3146f420a54387aa19cc29f37524ffb7aa7226b5cf","first_seen":"2026-04-30T10:53:39.570751Z","last_seen":"2026-04-30T10:59:29.946066Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/c0a15d53a1da7b3319a903d965641175117e92ab.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /c0a15d53a1da7b3319a903d965641175117e92ab.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 2165\r\nLast-Modified: Mon, 30 Mar 2026 12:39:22 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efa-875\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2165,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b72ab343cf4208e8614644732a549d6","sha1":"c0a15d53a1da7b3319a903d965641175117e92ab","sha256":"45a99f22e392c146a56b28e890aca452b8cc4244c604197dcb07f159711e6322","sha512":"484b96f219bdb29243ff1ece535039d167b1d3e98567e2529fa0b790aa7597d5a8d630dd830f3d3cf4e044be12d4999974ffc8d755ed45c21ed4350ebf417e1f","ssdeep":"","tlshash":"394111f1f64c0049ba0d5731be2d487db437752066ae2002a9d2171ac2ad05d9dfe5f5","first_seen":"2026-04-30T10:53:39.571574Z","last_seen":"2026-04-30T10:59:29.930204Z","times_seen":2,"resource_available":false,"data":null}},"time_used":975,"timings":{"blocked":941,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/soc_instagram_hover_7ae5196b1b.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /soc_instagram_hover_7ae5196b1b.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 710\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-2c6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":710,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ccfe8eb3de44f625eafc9d06c97fb9f4","sha1":"9f6cc02ac0a536884723303aaf7440ee624c7531","sha256":"d4834618f49a44d7a25e8d909c9dc2999f821b43efa893a90c232d4b8bdd55cf","sha512":"9dcc1cb249cc3a339e676f2dee5b9ef5b8e147d0f817424053194bb1bcf0512bf3221a4ea612aaa26f7d884cd41e1babc9bfb58a9421f7353d91ea854caac9a6","ssdeep":"","tlshash":"440176eda3480c7cb9134320e39bb630407712bb5b886a4dc5b320b14a89d1ea57fdc8","first_seen":"2026-04-30T10:53:39.572486Z","last_seen":"2026-04-30T10:59:29.926438Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1038,"timings":{"blocked":1006,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/product_img_2_49a6e9339f.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /product_img_2_49a6e9339f.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-1be65\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114277,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 755 x 941, 8-bit colormap, non-interlaced","md5":"bdb289eaff8d8a50e35af4ea9828e72e","sha1":"86a6e75190f02438c6aded5867033de09571d0e3","sha256":"001e9293713924562e0f7091d30a9bc25a163730f0e897f4c82261aa62aa1c5c","sha512":"d349a23ad7b6c3d4a5d2ecd9859ac1927a7b93a8573433672d62ac337726aecbff8464e636da53b9e2ae3d4077d9278e53b5d29fbc1b00ae182b2f3b00e49f59","ssdeep":"3072:WCBQ7PY7GHW7dsazn5+5OpeOryFSYyGR2dSVVdrEm3WMp8:WCBQPYeWHzn9PryFMGR3n/r8","tlshash":"9fb31214a689d890f763a4b8396ce140d9dd06fef33020d6b96ee41c2966bff8f05d25","first_seen":"2026-04-30T10:53:39.573403Z","last_seen":"2026-04-30T10:59:29.90725Z","times_seen":2,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":228,"dns":0,"connect":0,"send":0,"wait":68,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/icon_new_tab2_hover_a08d7af881.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /icon_new_tab2_hover_a08d7af881.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 558\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-22e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":558,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"166dc051d45b45a147c6b035fd315b97","sha1":"356c6897b6ea3aaf13c03f7a35320fcb79f6122c","sha256":"337ef38af9fbeadd09027c4261adccb06b2b97922a800ff62fe8fab628dd46b2","sha512":"9706caa10c85b3dcd9e9c301658580cbb282b7dcc9373fdd502819f4f93a87b7992763946029a41bee1d542f324e5f11b1aa1f0410b4640e1346bd1423142a1f","ssdeep":"","tlshash":"42f0c0bda356a3c006e4c3e0e539b5a0791810f7b77e5a9ecb300ca1b9f2161ac0cdd4","first_seen":"2026-04-30T10:53:39.574435Z","last_seen":"2026-04-30T10:59:29.901271Z","times_seen":2,"resource_available":false,"data":null}},"time_used":940,"timings":{"blocked":896,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/icon-trustpilot.BzVeDdlO.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /icon-trustpilot.BzVeDdlO.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 16426\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-402a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16426,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c6416cc936e5c15602dcd88715f4347","sha1":"20f03b71e480ccf304f2dd2e5881c47f53b9d4bd","sha256":"8406dbb8bbca4e26f46acda8392e904948a02f9edfcabe65cd4e6c55dde857b2","sha512":"f76e0cb1cc03e204fe929cb5f69e6c14addddbee12e9988177807b78503f40f3f52a4d6ef354536a651048a03b0d9d618a2a8a411d703e8f943a93608870cae0","ssdeep":"384:lL7ezDvQwdP5+21qqUiX7ezDvQwdP5+21qqUiClnO:ta/dI5Oa/dI59O","tlshash":"257263e967a5b3fcb042f7f8941380617e9b30fe77468668c3a5ee84a1561a54dc8cc2","first_seen":"2026-04-30T10:53:39.575244Z","last_seen":"2026-04-30T10:59:29.925781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":976,"timings":{"blocked":943,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/main_support_ru_09c01471e0.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /main_support_ru_09c01471e0.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-3b700\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":243456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1037 x 1131, 8-bit colormap, non-interlaced","md5":"22a9852f74ddb1d13646255a12c98fa6","sha1":"3d0d9a53e72a65d8cd6a6c08d5238ee92f7ac792","sha256":"91efec46a75ac29890e3b48f2ef7f2b7f895c112d3724dbf9758ede919668e88","sha512":"8bccb7778dacf029334a4442f9bd8f8f8165d8251d30b27970a41040accb34127ff67660affc7eef1974fb0ba30c8c988da68eb4a44d3f60fd4004caf75656e6","ssdeep":"6144:DzCHBZZdnvARulRD/qccW5m8+cXVj15LQU1liYLT7:DzQ7Zdvsulp3Xf2LYb","tlshash":"da3423ac2f29bc531870e39033396db7df5184176870c9585e7010edbdeaba982b43b9","first_seen":"2026-04-30T10:53:39.576524Z","last_seen":"2026-04-30T10:59:29.919687Z","times_seen":2,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":33,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/ru_3_b215b0a2eb.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /ru_3_b215b0a2eb.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-2a50b\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":173323,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1156 x 1160, 8-bit colormap, non-interlaced","md5":"0d76d62df9029e7540306b1a14fa381d","sha1":"0af9ee1b866d45b889f51f07d920ed461726a488","sha256":"ccd8fe16e9b7b7759e7c0ea91d973cd2b6be8aa0a8e0c9549f58bb8fc77c0284","sha512":"fd1c269334be2536e251ddb3fd72845ae2c56b0571096c0a89cc4378d8796e603e5bbedaeb32c985b836053cb19bf9a4455d14aabee374f9d1132f913bc1c08d","ssdeep":"3072:XKGs9iDxq58ej2IdQ0TjQXaalyRWM3g4WPWHVCFBZZfzXYfh/rscfMVs5dlOE:6cs5VXdQ0Th+b2gTWHav2q5Vs5dlz","tlshash":"bf04124ef39677a0d78afa1de88523a1045678df4baf16111c20a3f28738b95d131f9d","first_seen":"2026-04-30T10:53:39.577686Z","last_seen":"2026-04-30T10:59:29.933866Z","times_seen":2,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":126,"dns":0,"connect":0,"send":0,"wait":67,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/advantages_slide_4_0d4ab13708.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /advantages_slide_4_0d4ab13708.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-b0f22\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":724770,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2160 x 1302, 8-bit colormap, non-interlaced","md5":"10cdd26e82cf4dd0f529f33e55bb61b9","sha1":"952912ec35895d0a60d724e018b872f82658c4ee","sha256":"5010293bdb55b2e2d718e6d7b2e2e6abd5721fdc8b520aa0a0f449224e637542","sha512":"24edc95ef74f50a0c70c5a49e8e4a5482aa83f94ffbe7c23f8140ed38a88c2cb7e88a6d1b812c8fdc814be535353e573285d52477cfeda2ebf0e635a8bd10266","ssdeep":"12288:C3ErUwkjRprQiXxpJt9RlxYmWHNm2dN1qp8Zis7YlVXHzYWLJxtC789ref32+T:qEDkrrQgVtD36Nm2dzqeZF7KVjjLJxty","tlshash":"e4f4237656f1f219df42935b7a2b4e00de7ef03eb16799724c69cc27b57d0884a23610","first_seen":"2026-04-30T10:53:39.578553Z","last_seen":"2026-04-30T10:59:29.917Z","times_seen":2,"resource_available":false,"data":null}},"time_used":754,"timings":{"blocked":426,"dns":0,"connect":0,"send":0,"wait":90,"receive":238,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/hero-section-bg.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /hero-section-bg.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/index.llfDGIFG.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-2cd1\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11473,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 704 x 833, 8-bit colormap, non-interlaced","md5":"fec534d56735d82f87e7f058f5dae575","sha1":"db85df15d45bde9df2f033584a767abbe3361be5","sha256":"94ed972bc4468926fee0640121f54f71d49d3a2ce88be6f72fa135cf9f9aa7f1","sha512":"c1eeb5411c39760d549635bfefb1654944f00ce336c31b69d8d9df775b36f477e108e17ef9ede6acc2b4d73a65000b9165d039e46632453469a47e127395fd81","ssdeep":"192:OT/G0xplnRFukIX+rnGIBuZGYLrV6HNKoAcAIVpAMDp/:OT5pNRFdMAnGWuZGurV6HNRllj","tlshash":"9332af85d5bacfc2fcbd10702269afdbc5835a6176c0810ae2013b790eece9973d6958","first_seen":"2026-04-30T10:53:39.579645Z","last_seen":"2026-04-30T10:59:29.913797Z","times_seen":2,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":300,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/connect-equipment-video.mp4","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:04.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /connect-equipment-video.mp4 HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=3276800-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 63054\r\nConnection: keep-alive\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nETag: \"32f64e-64e3d23fcb700\"\r\nAccept-Ranges: bytes\r\nContent-Range: bytes 3276800-3339853/3339854\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63054,"size_decoded":0,"mime_type":"video/mp4","magic":"OpenPGP Secret Key","md5":"36437a3e1509b6232386e91ac00ca2e0","sha1":"59ab689f0a7fa3756c8d0086705c768061a9d593","sha256":"bb0d7fa0f563b5a2021e826dc31228772eb79347ccda82e2bcd19cc449f42612","sha512":"3d0f45ba5ff2aab6fe9125e193e207ec899dace270744aad5b42cd85b60eb2449fcf35faec311bf6a6384437d2f3b9f144d9f2d28e41debc0dba46defb9f1317","ssdeep":"768:ERp3fV1JhAGEht56CneJ9slO6cs300MTAeJRs3840hB7rzuhpUXVZM15YkGyl9wz:AFTboeuO6cs300mRw84gZuklSS","tlshash":"0953e469eb650413c8a1423984e253243730d9b837875b8f8bd9a77dfd173e82e878d9","first_seen":"2026-04-30T10:53:39.580875Z","last_seen":"2026-04-30T10:59:29.945463Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/RoobertPRO-SemiBold.Ch_ZlkY6.woff2","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:04.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /RoobertPRO-SemiBold.Ch_ZlkY6.woff2 HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:05 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 62092\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-f28c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62092,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 62092, version 1.0","md5":"f397255089d626a9a059e66a08203e87","sha1":"0a87afb3680ef901ab2c85acc714fb81be9e9f10","sha256":"21820b42208d3faa80758de13af9892d329625603cdf00426b6430f64b19ab57","sha512":"e6c95c8c0073e5dc76a9a0439d68c74d258c3a9437f61946be96a50908b3dcdd89b9c9cb918aba7fe4cd1a26dea1808cd1f0078423d9dcb63ef202c079e10adc","ssdeep":"1536:5Qc4Xg94LuSHrRSQNTQd0MeBvqnugzUJGs40bpaXEs5hJYGrKOpIUx:5QDguLzLRSI8OM2gAJGqm53JYZOSY","tlshash":"0653024685eb0a59c8122473f16e74da8d7c47430bbe10f3c9cb8beed5e5270a893885","first_seen":"2026-04-30T10:53:39.569825Z","last_seen":"2026-04-30T10:59:29.918014Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/soc_dzen_hover_85e52f6a42.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /soc_dzen_hover_85e52f6a42.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1019\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-3fb\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1019,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd25bd1bcfa0092dc66b504767a02b64","sha1":"638e4404450bc1406e8a1bdf177eb7ffc8b5dbb6","sha256":"d858afb72541e339c2b633071243babe2d41fc16aa392c9cdff83de11ec4344a","sha512":"33c999e5fac9ca0b59e46d2ad1d2cffca7b618fb878f19320ba70371ae82b7e6316e2cbe6f9d94b316c6745513e7a4762f7a2987c1a8d5449a4a333ae0c2a9c4","ssdeep":"","tlshash":"e21121ba33f8c2a1dc0a4b8483878960221330788b18ce2d91c5544937b99df86cfed4","first_seen":"2026-04-30T10:53:39.58165Z","last_seen":"2026-04-30T10:59:29.90282Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1032,"timings":{"blocked":1001,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/ru_4_987f9f3d3a.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /ru_4_987f9f3d3a.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-27d5c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":163164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1156 x 1160, 8-bit colormap, non-interlaced","md5":"fba9359a835c68c132141151c69ed0fb","sha1":"66e71b5d23bfc6aa99880157c5bd622244da74bc","sha256":"20f7d31d18b15ef2b93819641471f368a4e4f30ed01cfc9fb54b792c750e5f46","sha512":"b753521c3e4ba5f0c30ceb70bc4c667d77c9e6db1e0b0b249204e72c9d392637203bc28e2c26addb002ada0e77ced30da124c148d64097fa65993c1be9b4a95a","ssdeep":"3072:XdHSKGvxVAbpkl3D/tFOhRm9vQmeAX5zJioDaBAbUBUz3:QtVAbi7eiOme8+BAwBE3","tlshash":"e2f312217cd642d271033bab1e5be1ad61c0b532e2e6780a792817b5be13994f03c7a3","first_seen":"2026-04-30T10:53:39.582506Z","last_seen":"2026-04-30T10:59:29.916037Z","times_seen":2,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":63,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/index.C_6FoSv6.css","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /index.C_6FoSv6.css HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-1bc3\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7107,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7106)","md5":"ee19f895b932538028854c25ca8a6168","sha1":"cb0d153dbf763eb000b07357cda06e3a18de5e01","sha256":"df948979e0c3f4e2ac7c7ee10b09f2404151af792d5431ee8364cb8eb468bd7b","sha512":"6a7c56f8fff1a3584c3ad8087bcd129b25e99282cabc49b20e5345efa74e4015a6e9213f750ab6add7b851500c277ccc5130652e6dd9a3de44e575162bfc695e","ssdeep":"192:OOhaCvxWhgqp3ClERxwbl1paTFObZRywDNd2fODA/qWseN2jbpefKX9:3awxZWZi","tlshash":"f0e1a5a13691b89fd117883f719bad75d1389ea1cf24511cd93260466fe2f6220ab3cb","first_seen":"2026-04-30T10:53:39.583432Z","last_seen":"2026-04-30T10:59:29.899858Z","times_seen":2,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/soc_youtube_04a69fc9f7.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /soc_youtube_04a69fc9f7.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1238\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-4d6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1238,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a22086dcdbad72a782d4e82adbca231","sha1":"0f4a10ef95818d91a9519cd1b596463d0b6e2589","sha256":"7d2449bef47bd99544781b6386ef44ff0f39908fcf1ee5029eec6a1a4219d329","sha512":"9763653152405f622a1a89f7f259bfa86085d98f525cbb818f6c36aaf41d8d7be1b5801a8097ac7a9fca944319973701310c323e98d7348452e5dcc3813ee2f7","ssdeep":"","tlshash":"9e21dfe9f3fc58d92407d7e0d97b74753b3624f26724ea5882f116b4e8201eec868840","first_seen":"2026-04-30T10:53:39.58432Z","last_seen":"2026-04-30T10:59:29.931443Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1028,"timings":{"blocked":998,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/soc_instagram_082a3d644a.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /soc_instagram_082a3d644a.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 719\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-2cf\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":719,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"54d5f2b62e95b751e4e0f462c504e5c4","sha1":"ec75424b55a9d2d010814e6d21237b7fc430564b","sha256":"2e3edefec3a01ff850e76e7f0dc0b71629d6eabaa907c6564b082a775acabc3c","sha512":"c2bea6bdf0890159d7b497a1a3f5e47ad1f1934db3e62fc7762395f76e60fbd9f4299a53faf52013dc0ed97c2f282ef8da4748e94ce329ea53d55489464bef89","ssdeep":"","tlshash":"6701f7aea3482c7cb9134720e35b76704076117747886a4dc5b221b14a4595ea57f9d8","first_seen":"2026-04-30T10:53:39.584955Z","last_seen":"2026-04-30T10:59:29.922073Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1039,"timings":{"blocked":1009,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/hero_prod_2_7934bbe390.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /hero_prod_2_7934bbe390.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 5448\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-1548\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5448,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1c356054a5f17a1a76b4fa643295a53c","sha1":"e1a202620e2be926da68e0319d53221c2a316888","sha256":"51bdb1575eb0db07e93bf5315cb1670af8c3cdbcfbfb5b9f0832705d697b19a2","sha512":"0f4949fb0e8db5f15e351625088cf174e58ec72c4b90a9410726655e8454a9b2c4ea3e4fd57ad9da05e23e7352af2ca45803910377be9eb376765f7c9f0360e3","ssdeep":"96:qsziU9PRcLFSfvVwyNua8uut56txcR16iXcVF0qUYM2PFOYXfjFpYxwKHWTI:tUzyNicTcR1dXcCCPFVXB6wjTI","tlshash":"b2b196da6b85a2f4a001f3e5cb2198b8775f30b73b26cbbcc7556a18a92205c9cc54c1","first_seen":"2026-04-30T10:53:39.585622Z","last_seen":"2026-04-30T10:59:29.904018Z","times_seen":2,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":412,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/ru_1_78f980dd09.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /ru_1_78f980dd09.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-207ce\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":133070,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1156 x 1160, 8-bit colormap, non-interlaced","md5":"f57bb9527077cbdaea6573770f0d88fd","sha1":"2abd65cb5628eef953ffb285673dbe96deb017bc","sha256":"4fa927b66f5c0372c412c59a972bc2400145128fa015f9cf4f3ed21b16665135","sha512":"cb34317a5eedbd54b92c5aa58f0154d8adfeef81a61fde002de88e2403057f6c9321baaac6d00e71d451acf24da4230dbfcfa5dc5158422ba0a430eec96b61ed","ssdeep":"3072:+9pzgyOYh7InyYvi6cGLNMm2LxsQkiJ4TF9CMiSaDan2YiVQwXTV8:+oDSIFcGOLqios1R8","tlshash":"1ad3123c81ec1d93ad975021ca39cb396be357597ba29b1add00c5644e24a3c3b913be","first_seen":"2026-04-30T10:53:39.586524Z","last_seen":"2026-04-30T10:59:29.90455Z","times_seen":2,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":63,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/10-sec-web.mp4","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /10-sec-web.mp4 HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 6686101\r\nConnection: keep-alive\r\nLast-Modified: Mon, 30 Mar 2026 12:39:26 GMT\r\nETag: \"660595-64e3d241b3b80\"\r\nAccept-Ranges: bytes\r\nContent-Range: bytes 0-6686100/6686101\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1474257,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"f8bb88376b8828b99184e57a1a02820e","sha1":"2995e064ba65fd56359487dc0d2aa91625dfa9d9","sha256":"915abfe7a94fd47f234d9b9b4fc26c5566099512746a6f1886865d2d19471366","sha512":"4ae58f9a9b4a267ccdf96fd588980f3049505bf3e7fc83379db52118ee9b872b7650dfb0e8677783c19a02bd9a4b330b1b92d641c00626b6e065613ee71925d5","ssdeep":"24576:hoIHWo8ac9EpD/+4VGBG9wDMiRjA2QitDQOKIWLhbzbC:pHgvEpy4j9D0A2QilxUdbzbC","tlshash":"162533b22e42d9d44fbe74f2ab5010810d7dc0398cd1d6dbc9bef48b99b45a3c4e4a56","first_seen":"2026-04-30T10:53:39.587378Z","last_seen":"2026-04-30T10:53:39.587378Z","times_seen":1,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":390,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/index.C2NN49mX.css","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /index.C2NN49mX.css HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-2de1\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11745,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11744)","md5":"5f701d95e1747e1892474ee9cd2f19f4","sha1":"bcef82173984fa1739ee0998aac5f0b388987d21","sha256":"3220ab48a298243e3de64bafb71153feea281e8662a3ec823fa45e07799c68fe","sha512":"938e6ec059e3ebc81589b315815a1cfff2fae2153b12b26f240e22198f5a3eff5c60d8473f4263947949f9c5e70ff9394daf7034f60170cddd36f1f7d8a0ace0","ssdeep":"192:fBK+7ppHzOiYxJCnwVgCVuVB/VoVlHVhha8hEuPa4hax1:fBK+7ppHzOJnCsVuVlVoVlHVfaOEP0a7","tlshash":"a232b890121060ac3f37ceb51ae1aae5d950ca48a95206efc4d0fd6cf5df6f70663ac6","first_seen":"2026-04-30T10:53:39.588247Z","last_seen":"2026-04-30T10:59:29.906094Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/product_img_1_3c1d7a0145.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /product_img_1_3c1d7a0145.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-2e155\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":188757,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1041 x 711, 8-bit colormap, non-interlaced","md5":"eb72330aad50e17adf183863600abcff","sha1":"824f08bdfe5586dc870d2477aad3cbf8b1a79adf","sha256":"ed3d5236d4d39a7cae8579c827b5d8120595466637e6d15e2fb0e091e9083cf0","sha512":"12e666c6b76e1b9178e4bdc8aee38da36e09b120f30fd0460aa47371a7a66116666fcc5755a8e727d40e603b981b8ad6c50a8389245ec8ff4153978fe5912bbb","ssdeep":"3072:cbTdBORy5ic6iUbKjR1aW5YY2rAYsiwBiUA3+cgVDx2E8pNfTkpd20BQrOj/MxA:cbTdBO81lOKasw0eSizAVx2zipsCr","tlshash":"3204237f47c6bdb0f2f2067a4cbae5709356e5c6fa2416ed30c0205196456c63c8aefa","first_seen":"2026-04-30T10:53:39.589196Z","last_seen":"2026-04-30T10:59:29.916541Z","times_seen":2,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":221,"dns":0,"connect":0,"send":0,"wait":62,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/advantages_slide_1_05a4cdec84.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /advantages_slide_1_05a4cdec84.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-42411\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":271377,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2180 x 1302, 8-bit colormap, non-interlaced","md5":"dc1962cd2adfd992f2cc28c6f90374a9","sha1":"72e660b9a1dedf9c2379f7ac2fd8686365da4edd","sha256":"b1b5770e3b6f405f4bde28b744c76b75fd0b0a96d9a313307db454717075137c","sha512":"43c474c0bb57f5415ac7d125f1ec1a02383a984a8abcb89ee9da7a035fa2f8f8b7249c0e706aaec2b1eeb095fec152eb1915025f1c68e10ca1a34f49377a20bb","ssdeep":"6144:CZKZODF31uJIHRU7k4KSH2fs0VEieXn9GA2mlPwCYp:CZOODtYqxUuVEBNGjmiCYp","tlshash":"9844239a4c232e16d6c98cffbc197877dc65e211991873c410cc6a34e9cf8c6b95ee26","first_seen":"2026-04-30T10:53:39.59005Z","last_seen":"2026-04-30T10:59:29.943659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":833,"timings":{"blocked":761,"dns":0,"connect":0,"send":0,"wait":55,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/soc_telegram_hover_565025fb78.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /soc_telegram_hover_565025fb78.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1234\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-4d2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1234,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b512191f82822bc4bbbc0ffe392d5b16","sha1":"4744ec0de60b83fdc5b6e5650e97dd44e913d7e7","sha256":"1214327f97fa49962bf9de64bf7735cf88e63e0860a3523e5f53d3f0c70e1b0a","sha512":"3a0d28ae4a2d89eab05517742729279ee6483f2faefd6834abc3505c9a6433d4be2cc96054d6d2665dfcc73e61c4c2e2d593f44f204f2ed865e26fd86c1873db","ssdeep":"","tlshash":"822121e0d7ccb2d05207d7e8dd16c46c24f625fe3f5fcb5801620bb8d264148da5ac98","first_seen":"2026-04-30T10:53:39.590936Z","last_seen":"2026-04-30T10:59:29.947905Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1030,"timings":{"blocked":1005,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/entry.Cfo_Rj-A.css","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /entry.Cfo_Rj-A.css HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-150b7\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86199,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65516), with no line terminators","md5":"8c6a1c554006dbce498e5e2b98c3747d","sha1":"a19c34a5a1226b6c437494b810dd612982efbf80","sha256":"d0ad0b8f086fc3936c9fd092590de372833ffe504694745ef66d5277f89c2d98","sha512":"149a3e23d80273ad14f07073f825fa73d3f5d123167bb541a1c92d4a6447b2c5d6ed40c723ddd0283483b0224ad9df809bb98950059f98f5dd712847ce1b771f","ssdeep":"768:zWA3y8/1YHL/hbO78TRXzuepZrzB3TOTI95W89uwz+Ewz+mJq+60RudRxxxxxxxV:zzCy204N0Sq4","tlshash":"ef83a692b610713d1317913acaaa4d1c611a7d01df1669f0fb94a12e78cfaf366b360f","first_seen":"2026-04-30T10:53:39.591749Z","last_seen":"2026-04-30T10:59:29.933284Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/submenu_business_slider_banner_1_logo_fcc7b9e391.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /submenu_business_slider_banner_1_logo_fcc7b9e391.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 6543\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-198f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6543,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d63f7f5ad50188da0dea6eab5572964c","sha1":"ba12f271de0a0fdf9ecfc044fc5248978594eb58","sha256":"4fa0bfdad9658c9bf288542ddc7f6444588e7f69b7c2da7dfdee2df1a29cc3ba","sha512":"f175a3cd68087ea81305e8a3290171fd2ca11ee3cd21c5588b33d2b408f67143a1130e18836cbd85f6d623f401def6e85cac047defbdca19bfee9d49466f888c","ssdeep":"96:1OS0/ZFHHguR77cR6r8Mfvjz1aWIFkQoFAIDAn4hctkBIgbhiVsNXWe/fGoZLV:t0hFRRPcRA1FIFCFAgA0nI4hiSXNZR","tlshash":"05d187d3a39873f4a502f3b8c52a1436bfbf28fa7726db9442519e44a5211994cddce0","first_seen":"2026-04-30T10:53:39.592643Z","last_seen":"2026-04-30T10:59:29.897006Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1049,"timings":{"blocked":1020,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/icon_link_35c0494381.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /icon_link_35c0494381.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 548\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-224\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":548,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0d9fa0dfa974691a5160fcbd7bb8f3c","sha1":"975a0606697bd4140debd0fb115f475d3284efd9","sha256":"d0c9356356e5f2cbf9aa495e5da9bb5c5fe6e4b79ff00e491e69be2313f28ace","sha512":"e8a6144c8df980045ef77b858cbe431c3ba905ff759204b14b639a970e07ff4639712e95153be0ab844441f5560bf0b9dca59014f71f2379aefbbd3398e70d0d","ssdeep":"","tlshash":"58f0f6f775c473bae547d3e8822869a0b09321b2797bd70486c03c54b95645d49c8c9c","first_seen":"2026-04-30T10:53:39.593434Z","last_seen":"2026-04-30T10:59:29.89798Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1045,"timings":{"blocked":1016,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/hero_prod_3_ec5f7428d3.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /hero_prod_3_ec5f7428d3.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 2462\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-99e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2462,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"79258563b349838e383b5d510e9629ea","sha1":"f5d12380d66eef1caa41e7c0ec7995ce3c3802d2","sha256":"4ba9e55e2048cef2f7996b7f16c0c392755b039239e8fb15b43e7a4955ec1991","sha512":"896b1230c1c0be6e2d88a14ab8b8e22e46e43c066d3cb6e1d2d19fc3a710aa0efb02575213f8acaf8d37afcb9dffc8343129d4c43ede7b3d438c61979a0bd180","ssdeep":"","tlshash":"d15196d043e885f8e906c7941b1ea836657b28fdae758654cfc63fa2b55a80f04accc0","first_seen":"2026-04-30T10:53:39.594296Z","last_seen":"2026-04-30T10:59:29.915479Z","times_seen":2,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":440,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/hero_prod_10_7d34f07fb7.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /hero_prod_10_7d34f07fb7.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 10553\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-2939\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10553,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"137400bf866a27695f470ab74fd5ba75","sha1":"81c28e5d80de661717b759f89258c986a3524e81","sha256":"2e7e655bd3ac11acc5385ffcaa90b714c1e53fc60190a91ee72f019db6f69126","sha512":"339a56a179ae9c4f842f2bcf99fbb89bb9ecd665e94330f69ca60d28ffd752b4795b8a820c76512df1a8fe7f94495a3d21a80f2afb2010c8747fda18915ca608","ssdeep":"192:V1QByC1OT3VeW5gHiUtFqoJJjFtYuNkahUL55qX8pbE/8DSUep+rg2IvQ:Ad1GleeULBXFSunUL5Y6LBm+rnIvQ","tlshash":"4722b4db67da73f4f941ebe0d81654b57b1b20fb7e62c779c3951e50fa220ac8849840","first_seen":"2026-04-30T10:53:39.595079Z","last_seen":"2026-04-30T10:59:29.937185Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/trust_block_img_ru_8329a0d0f2.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /trust_block_img_ru_8329a0d0f2.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-bae57\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":765527,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"59b055773f0baf4892b3907730a03dff","sha1":"c6e3fd8ebf8ed9e7384767baea4eec0ba60bd73d","sha256":"d5ecf56531fc2461fade0b01c456de2f66be9d88d157cb14285b75cf79bdf42c","sha512":"171275f2801881ff18ce0acf4cffeb792ec4be4c854e42a0cd9c979bce7a8197c1f15d3ee2533c888f34f4e3c00dc21bf8d33681224b4aac0fca1b9ed43627c8","ssdeep":"12288:7kjNurhPv+cBjR9vu/inXO+sPSptSvgOvYi0QoGkVvfIQWh0c9BAOURYhPgmxSz:+NursGjR9L+pPqSviQZkVvw74TYh4V","tlshash":"a2f433ed0ce334516987ff806ade5596abc549a3f3bee17a27402ad11cc361b093c86d","first_seen":"2026-04-30T10:53:39.595893Z","last_seen":"2026-04-30T10:59:29.937869Z","times_seen":2,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":35,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/connect_equipment_img_c933b51aec.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /connect_equipment_img_c933b51aec.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-1e4f5\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124149,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 485 x 611, 8-bit colormap, non-interlaced","md5":"45797158ee6f8c05a8d8f0f1245c4773","sha1":"c04b8e53edad03fd48e9add84a252d09568a9411","sha256":"f520957dd2db12b3522b264f044fca3b36143e7e81d91a3ec124d3d4951fc4fb","sha512":"4a1cfaa1fb77e229e34ff41b332f934912596a32a64accfe9359aa49a2721573ef8fe1c7a278dbd7370625162ec8a28cc2f1465df461cfaf891c252b92a415e4","ssdeep":"3072:rHAwuaNCRs8RRUHJmETGMY+m8B8Bxt7n+yEBx:rJuaYRlR+HJmET1xBAxt7+yEf","tlshash":"93c3129b9f94ec31f7778bc3e1456bc536d6f60b20a6d1cd58906ac711a382f6268313","first_seen":"2026-04-30T10:53:39.596858Z","last_seen":"2026-04-30T10:59:29.93435Z","times_seen":2,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":229,"dns":0,"connect":0,"send":0,"wait":59,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/index.BCRS7j00.css","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /index.BCRS7j00.css HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-cfe\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3326,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3325)","md5":"db1c468609e6960ccd8373bd4ffd7ed1","sha1":"6d92988e6d685e94989cfebed2a7bc25a65472e4","sha256":"2b8a60574a2987c174697c227eb0452157dc80a2185a3d02911cbcc190e492fc","sha512":"aa2d7b3167bd52f693252166218718dbc66532dfd0f09c60d042ca190d6fdcaf081a9032a812fa63abf231e9c5337c106f09dd5bdef61025fbde1ef4b9eb7572","ssdeep":"","tlshash":"406198287150b2a5a416043f29d77c45b434dcc3cbb68e1b9df37125aab9e822ca61cb","first_seen":"2026-04-30T10:53:39.597759Z","last_seen":"2026-04-30T10:59:29.928935Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/coin_video_poster_51b25c333a.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /coin_video_poster_51b25c333a.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-7763\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30563,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1392 x 800, 8-bit colormap, non-interlaced","md5":"560d0f84f83d50850e420de526ba0fd3","sha1":"9f32a799fef3cbca917d79684cfa6a8b085939c7","sha256":"6b2cee47c81682b4e33499f3ba6f3ebfaf3f75f4be126435d2995813379552f2","sha512":"f8bdf7bd615e5e864a6bbdf6e5000f599f2a67a7ac0fb06343433f6720031501e5039bfd2db5944457a5ca4def0b668f5c140a48f81dedd4d1addf1e299bfb3d","ssdeep":"768:Y7zzvUqx50OcsSqepeRgIzZRY67c91idMT1Dl:aTUqxK7sSqesga/Y67c9tdl","tlshash":"3dd2f129b2b33f1c864c02f252e07161c844bf6cf7b179464eb2b20d8e6354d8eda729","first_seen":"2026-04-30T10:53:39.598668Z","last_seen":"2026-04-30T10:59:29.90659Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":42,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/index_1.html","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 1328\r\nConnection: keep-alive\r\nLast-Modified: Mon, 30 Mar 2026 12:39:22 GMT\r\nETag: \"1603-64e3d23de3280-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5635,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5596)","md5":"862ceadb273b689bd6d0a283d02aa70d","sha1":"a0185d51032715cfc6dcf7716f4caba4b567c0f7","sha256":"69095376e0b47766ccc929278cb4625bf6136dd447ef8dd812d50db0063178e1","sha512":"8f5176d861443a92e9d239b93410c1f3999b59be53b4a88b67478591cdf981ed1db78e3d25bea2b436bfa5684ba3e468befb336367e78ec7e51c856f7465aef1","ssdeep":"96:J8IuO8XwdH9FSFQLy3IdyOR6dHUFxEBVxSIzXmXNL0f9wmlwwwjxDga5ZwxXZZtI:J8ZSxxVxxF3","tlshash":"06c1ac38f60d440eb19aa5246df4d5c9e3e4c553973b16ebe42f76a1c1c60d909bdac0","first_seen":"2026-04-30T10:53:39.599448Z","last_seen":"2026-04-30T10:59:29.942502Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/connect-equipment-video.mp4","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /connect-equipment-video.mp4 HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 3339854\r\nConnection: keep-alive\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nETag: \"32f64e-64e3d23fcb700\"\r\nAccept-Ranges: bytes\r\nContent-Range: bytes 0-3339853/3339854\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1277952,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"963601a246da9c551713ff9cae13759b","sha1":"8f23742ef33ac229da6efbabb2cea3e652ca855e","sha256":"40595123dfe25292f6097da04f77e2f27ae4d826f7f82bd05b8219b3ca0baabc","sha512":"e8cac80104a2a6efc1ade5346482a9a08b07ace0fe4ea1070f4fe8bc7f490153be15a8cb68c746eb95eaafb73d99b7c63bd615e0892f19818995f446a0b58904","ssdeep":"24576:+xwvla0dTZZTYEuPY00zXObf9Ptkyshfw2j1U:jgUz7uPYfbO79PtqHji","tlshash":"89253352b3c79255e9fa53be426c7a8c30fb05250c61474b4f581c7dbfa82a9acc2e91","first_seen":"2026-04-30T10:53:39.600404Z","last_seen":"2026-04-30T10:53:39.600404Z","times_seen":1,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":389,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/founder-section-video.mp4","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /founder-section-video.mp4 HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 2206263\r\nConnection: keep-alive\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nETag: \"21aa37-64e3d23fcb700\"\r\nAccept-Ranges: bytes\r\nContent-Range: bytes 0-2206262/2206263\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2206263,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"cdb6b305311efa15bdd420c4370c449c","sha1":"2de334cad48e4219982dc0dbaafaf10f5d01bf5b","sha256":"5b5385b722e3219756e0c067cd73f9fd4786064bbea1d94fa21489c2f3b23a45","sha512":"f12725f8ab16aaad039713bfd127e069c6aa26c3b3e6d9745a9cbcf734aba886a5ec9870da1fe64612d164d0680a81a330c2e17e0365eababedf4c633ce4ecef","ssdeep":"24576:9jziuREj/8WtLQAmHe04ttt3c7On48LTPXMbXkcdQap/j7:93JEj/TQxH4tttsYLskcuap/X","tlshash":"a82523822f3994cbfc38d798dc791f917b55a3418f28d21be4a16d22f475468e7c0369","first_seen":"2026-04-30T10:53:39.601396Z","last_seen":"2026-04-30T10:53:39.601396Z","times_seen":1,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/RoobertPRO-RegularItalic.DiE012SZ.woff2","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /RoobertPRO-RegularItalic.DiE012SZ.woff2 HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 63344\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-f770\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 63344, version 1.0","md5":"8b29b475e2bb96a6199b096f54398043","sha1":"4906648b6be16a24d010eb5c3caba9be76b1d4a4","sha256":"5865a6a9382edfac9e50527329b855247aec1734206594857188ed7a6d5edcb9","sha512":"ed459e265658a893d6b5f2b95e2d52a15e564def96394d1d9e7eba7e8472ad245d749e03aeaef41995ecd6bf7e9aa51a890e14313c42fac64518aaa7ce01170b","ssdeep":"1536:ZDe414R7OljPNXAuoJ61enzVLZZY06ldqdm:teFWGxgenPGdOm","tlshash":"8453021abe49f2f2d163b2f0186b77674f93727f308399932e29a0397375249b4855b0","first_seen":"2026-04-30T10:53:39.538333Z","last_seen":"2026-04-30T10:59:29.944888Z","times_seen":2,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":252,"dns":0,"connect":0,"send":0,"wait":29,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/BaseSvgIcon.B6-eQHGG.css","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /BaseSvgIcon.B6-eQHGG.css HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: text/css\r\nContent-Length: 66\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-42\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b581612bddebcbba85cac434b2327ef7","sha1":"2969c9966057f4fdb8d42f733b445d65679afa98","sha256":"82b0bf86de6d8cce41150f2d289ae73e46e66ab2ec524486e779c5419e037d4e","sha512":"9dc70a1861a63a9dcf2d22cc79b5d3f42e5569baf933d73e9c72af337797a7020b8e47b57dc1079e310ad00c9186e110c0e87449bf0f34da6fec9f691deac981","ssdeep":"","tlshash":"cfa022a303220023e0820aa82203ce0ee333e080bf800008822b8820300b00eb8288f2","first_seen":"2026-04-30T10:53:39.602305Z","last_seen":"2026-04-30T10:59:29.914944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":38,"dns":1,"connect":43,"send":0,"wait":32,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/soc_dzen_897ceadfc2.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /soc_dzen_897ceadfc2.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1022\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-3fe\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1022,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b310ae46a609a1cd5a6e8ecee634c933","sha1":"6023d12b643e9029ff44d6f47da4b6f7beadb430","sha256":"db92b33504c8d8f7491ff2582092cbf24779fb3173ed692f0ce2c10f2435e7c2","sha512":"7ac3c6cefe939bafb4010a4bbef167b38b0ba18db4af3e3cf7b435d7c115c457a4bc9ac41b88fbc6aa4c5cca355c599b9acb0636af8d61e2d507a8644b395895","ssdeep":"","tlshash":"b3110eba23f8d2a1dc0a4b8482878961221330748b18ce2d91c5584937a99df86cfe94","first_seen":"2026-04-30T10:53:39.603377Z","last_seen":"2026-04-30T10:59:29.930916Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1013,"timings":{"blocked":982,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/submenu_business_banner_business_logo_dbe9b3be1a.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /submenu_business_banner_business_logo_dbe9b3be1a.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 7724\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-1e2c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7724,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f752d7b0db2b5c936f9170faf1e40ac","sha1":"0cc6918e8a4f349cac97da6a69b50dc4e4785161","sha256":"776e8cea9529bb4d8a8ac8bfb53c906d1114dcd94df26d61faabe1af6dd6fe57","sha512":"3550e3f5fcb0f1d70963c6322e029c269ad9ee9700d9bd986b6e5556b199698e17863a0ba87b273352ee77adc37a8fda8b29178cc95d3622dbed3462e5e46a40","ssdeep":"192:xxtauwtsn8qhkQQFs0pDPzrNqQSBryzs73nKFyRTp4:xxwuwxFlN9uC80S4","tlshash":"0cf184e266d573f8e10fe3f6d9269136ba8730f9a36b9694c384ae447153076cdc8c90","first_seen":"2026-04-30T10:53:39.604239Z","last_seen":"2026-04-30T10:59:29.922656Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1029,"timings":{"blocked":994,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/6e5313f83fcf53b6743df23190e02a7603744c68.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /6e5313f83fcf53b6743df23190e02a7603744c68.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1589\r\nLast-Modified: Mon, 30 Mar 2026 12:39:22 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efa-635\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1589,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"adca47b8d41f8df71a1b5545ba344ea3","sha1":"6e5313f83fcf53b6743df23190e02a7603744c68","sha256":"75ddddc04fc12ab0b0ed9f08013a02c171299b16bcb188acc7b108e4ffbdd747","sha512":"04682ad49367c3f703c30e54339ddb811c751cf3d4f4f369f2d6a9c71f7affa639a5b6bbf8c27f25df56b0546ce67af308284ba8eb85da5e30f961cc95753e8a","ssdeep":"","tlshash":"d8317867fbddd420910e7bfd680c987224e7b8111397e68509453a99f60543dbaf0cc6","first_seen":"2026-04-30T10:53:39.605154Z","last_seen":"2026-04-30T10:59:29.905578Z","times_seen":2,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":181,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/founder_section_img_ff9eb53267.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /founder_section_img_ff9eb53267.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-19734\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104244,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1392 x 670, 8-bit colormap, non-interlaced","md5":"6bc4b45db2c00d7e1bee6b0c1f199216","sha1":"efe87775f5b2aa2eaf45084c892e37e5d370befc","sha256":"e2e00a87152cab8c2446b61123aae0a7accf78238506dea87d9fc31d1a948a9c","sha512":"3fd4aa0d3430f2d01588fb78a0f36727f86e3241b742b521eb702047cd54a8582e1c691b658d90a01897605785ca92456f79b734f616277eb0ae63dae878b3aa","ssdeep":"3072:Uwyk26LF23a1+gjedpqpyudGCKcDYF9/AzQldV2jh:VyOLF23a1+kedopFGODYF7ldV2jh","tlshash":"71a312974fe3215c289631c19496404fbfbbbba9173d6205c28c98eed4785e4696f3e0","first_seen":"2026-04-30T10:53:39.606067Z","last_seen":"2026-04-30T10:59:29.911412Z","times_seen":2,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":759,"dns":0,"connect":0,"send":0,"wait":35,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/app_phone_d0e215af18.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /app_phone_d0e215af18.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-782e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30766,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 555 x 915, 8-bit colormap, non-interlaced","md5":"85b818520fc9228cabb64035e4894e13","sha1":"dee0a5a3bb1b9706f4e3a529f1294bd0a9f26f7f","sha256":"c7fa93b2f39f6db72320da64785f4cbe465ce9c911103efc1fd824da84722561","sha512":"0dd36685c3c239f94684613dfb58865e42d89821b35a0eb761d772fc1aef10794a5fa05df12d542518d7cfabc8619df3cbde78daa03ae5b065f0a4fe7599d834","ssdeep":"384:rxrPwCDCsvdWYHOoGKq7aFRrm+HxwPE2rp/aGw0jfZ9gfbsuQUAJTvH7kYk:1d79Ua++Hxws2fwyebxQUAJLbkt","tlshash":"2bd2cf27df2187b0c97e1a0523dd0ccdeb4b1a773c961c868c96e73e10bae544de4a89","first_seen":"2026-04-30T10:53:39.607187Z","last_seen":"2026-04-30T10:59:29.944251Z","times_seen":2,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":398,"dns":0,"connect":0,"send":0,"wait":33,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/10-sec-web.mp4","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:04.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /10-sec-web.mp4 HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=6651904-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 34197\r\nConnection: keep-alive\r\nLast-Modified: Mon, 30 Mar 2026 12:39:26 GMT\r\nETag: \"660595-64e3d241b3b80\"\r\nAccept-Ranges: bytes\r\nContent-Range: bytes 6651904-6686100/6686101\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34197,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"8e8854ca05b81e33cff94e860c1fbd0b","sha1":"dfabedbf95581275d8a0755fe0bab6d25821ace1","sha256":"33e274ef1d44308b111a68bf904971c24bc0b0925c0c355e8d3d5fb201984f2a","sha512":"98a250ef299c6faddfaf885b4f05661638f639ae2c084a6d8d364361961629c031e7abefcd358735d3564144bb51f89e3016d8c6692136568486298ce8bda358","ssdeep":"768:LXREghsMubiMORJ+gXrg7yu31AVIpnzly8EGXSw2VCt2LAOZTBd+8jTx:DALWM6JBXrSAVIpzly3ZyUTb+8jF","tlshash":"c7e2f1f712401563fa004279b4f633f7bfc8e97490a791753e82e5c46964ec2b716ae8","first_seen":"2026-04-30T10:53:39.6084Z","last_seen":"2026-04-30T10:59:29.949034Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/index.DT1wG5U4.css","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /index.DT1wG5U4.css HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-9eb\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2539,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2538)","md5":"ece8c4504ad73028f5205eeb007ee899","sha1":"67c2031f195d87a4fe9cf77bf3604f3ba4ba770c","sha256":"f945008e2b94b032aa33b483637200fab885535981c79e4636d086ed1ae630d4","sha512":"40eda278ca5179b82d82f3a73b38ebb6d0a98387a29befe7992f7ba7068d8934b42cc4e6d0a15e29a433b23e41a9d4948da12fc84985aa74be15fc29f5b329c3","ssdeep":"","tlshash":"1351cec17934f5ab055b003b34e63d77bd378a01ba64187ed0b2b21c6ae7a41829f19e","first_seen":"2026-04-30T10:53:39.609908Z","last_seen":"2026-04-30T10:59:29.914457Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":41,"dns":1,"connect":32,"send":0,"wait":33,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/index.83hKB9w3.css","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /index.83hKB9w3.css HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-261e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9758,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9757)","md5":"d3abfcfa1b8d930aafc8643bda1f9663","sha1":"3808895a5a1b084899eed0f80ae1bad9ef16930a","sha256":"e8350e72c4067ff6b402f8479500df29c95b560c470482fecc1485d59fc31ead","sha512":"106048cac509fa0e928cc4711e34d0f39f9e9a83772d9951d8d5c820d1b02a48316b7abf635e5c240fd735a110d953781b865ad1ddc6878902bb1e406d7d43a4","ssdeep":"192:fIsd7ZWcLKNsW5IUh7gjLXSp1ujvpXLbL8qFtbhac4y7:Asd7ZWEKywIa7g3XQ1ujvp7fXVac4+","tlshash":"9f125418637860dda436bf7d3bf3aca6aa254a00857182fad520dcd0b6fd55148933cb","first_seen":"2026-04-30T10:53:39.611131Z","last_seen":"2026-04-30T10:59:29.94961Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/advantages_slide_2_3bcc326b4b.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /advantages_slide_2_3bcc326b4b.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-6e1c9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":451017,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2160 x 1302, 8-bit colormap, non-interlaced","md5":"38a0b99dcd0f7af571f18f58d591bb67","sha1":"14751a087573e667bd2768196589ecdadd2333b9","sha256":"d4c8526f741578e4d25e02d615f368f8a1e010c3a94b96803e788c86b7e7f008","sha512":"953351e15a531ca7e7f3f308669be61154a8ab453aeedbde75b785524f606cd1e9989216575d63cd2e6d70a35fe1e418ce49ba00daddb0e40d78da1e3f5bce71","ssdeep":"12288:OoUOCLCidu8iaaP8MEKPmsoqxGGB0FhvU96Q+FM/GFpPOP:zUmpZr8c+lqIs0Q+0GFQ","tlshash":"a6a423e2835e8cec6b4045a1daa2c9db6ee17d41410fb30d9b56351c3784b37b69bc8e","first_seen":"2026-04-30T10:53:39.61272Z","last_seen":"2026-04-30T10:59:29.928204Z","times_seen":2,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":236,"dns":0,"connect":0,"send":0,"wait":102,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/a927bb739922e834355c215ca4dd2622ac65b1b1.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /a927bb739922e834355c215ca4dd2622ac65b1b1.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 376\r\nLast-Modified: Mon, 30 Mar 2026 12:39:22 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efa-178\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":376,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b9f3302685eca868a5f609aea09b0b9","sha1":"a927bb739922e834355c215ca4dd2622ac65b1b1","sha256":"06a5d2cc7fb5147c6fa0e31a9fe0afc914d79489d578342a7c6d0bd9108a36b0","sha512":"adb3ea348992c83b82874644ffd450da5eaa393ce6b52669e9eb6ecfc1660953bc7f3903fcfb35e1da351fb78ad2f4aa96f1ed86f2bdd6698f38a5308b862157","ssdeep":"","tlshash":"afe061f091d985c4d00f473a542e6c24d90ff9f131d5944ca4966305d0650575ffc76d","first_seen":"2026-04-30T10:53:39.613962Z","last_seen":"2026-04-30T10:59:29.929585Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1004,"timings":{"blocked":975,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/icon_arrow_db6dc61756.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /icon_arrow_db6dc61756.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 599\r\nLast-Modified: Mon, 30 Mar 2026 12:39:22 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efa-257\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":599,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"826d32da39ee498df56050170a3bb92b","sha1":"95415f556df1a1f8c3fc1ec73ad1398096bd731f","sha256":"7741f0db1a5e24233f81f9da5080ea97c57c029d4bcdd1c6f9321f7d3736d22a","sha512":"aa32b81408137e64914a8f09cc50e5f4c5747116c26b75f0b4b2f28ba1d0e2527396ec1f8767b9c5219ab416b10a9a000f1c0acce716adfa10dbff9a944a7dc8","ssdeep":"","tlshash":"7ff002f47391930006988780f13225e4f05e10f79fef0442a1a0eaf0f69a185dd8c806","first_seen":"2026-04-30T10:53:39.615114Z","last_seen":"2026-04-30T10:59:29.946626Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1023,"timings":{"blocked":873,"dns":0,"connect":66,"send":0,"wait":31,"receive":1,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/soc_telegram_e32beb4e9c.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /soc_telegram_e32beb4e9c.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:04 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1237\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-4d5\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1237,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0408de70cdcf2b85ce70fad0a76e7d2c","sha1":"a3adebb409e127fe8e17f585eb983d1faca98b79","sha256":"dee836b5d017e39ee8350d638ed74f796bf11aee86baacb902a287ff15a5de88","sha512":"02d487960b9fe986699e3bd3f2981c871f84bee2f63a2aaa4af7ef0b15a6119710ba36e4ed18304f104e14a8347642a1b0077837baa77b6956bacca4a6590fbc","ssdeep":"","tlshash":"4a210ca4d7ccb2d05206d7e8dd16c8ad24b629ff3e5fcb5801a20ba8d224148da5ac98","first_seen":"2026-04-30T10:53:39.616248Z","last_seen":"2026-04-30T10:59:29.947246Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1007,"timings":{"blocked":975,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/product_img_3_84906862c4.png","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /product_img_3_84906862c4.png HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69ca6efc-34a8b\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":215691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 949 x 1167, 8-bit colormap, non-interlaced","md5":"cc37daf2ba8db24bfa421bf025f9ad06","sha1":"ffb7523e1383868c51c1e4773eb25ef9a37e7cf7","sha256":"1b0903264e390cb85509daf2b0d751f41f885fb5d2065224c8e5cec6405e0e0f","sha512":"7920d07970ce13398bcd4d1956e3fa5028aa96affc9e1e054cf487ed6d483ec23fedcee3a10c4f94ad5757a77ee2d07fa05853deacc754160e132f6ffb406983","ssdeep":"6144:Z2QKPSjvubGJ8FsoMuoIx0IpAZeo/Gfga3KXmjCn:Z2q8zFCEAZ6j3KKCn","tlshash":"0c24223bdd009e9e1b47d18c6deea322ae51eb6c3001a1f407527e2ad87f1e5349295b","first_seen":"2026-04-30T10:53:39.617249Z","last_seen":"2026-04-30T10:59:29.910682Z","times_seen":2,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":226,"dns":0,"connect":0,"send":0,"wait":75,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"emcd.ink/icon-peoples.svg","fqdn":"emcd.ink","domain":"emcd.ink","tld":"ink"},"ip":{"addr":"89.124.79.217","port":443,"asn":25441,"as":"Imagine Communications Group Limited","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://emcd.ink/","date":"2026-04-30T10:53:03.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emcd.ink","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 22 Apr 2026 14:51:05 GMT","end":"Tue, 21 Jul 2026 14:51:04 GMT"},"fingerprint":{"sha1":"1D:4F:82:C0:1B:74:ED:7F:F6:8F:70:5A:72:E0:EE:22:7C:78:D7:F3","sha256":"4E:4D:25:A1:79:54:09:3E:F4:F4:99:D2:16:48:1B:72:88:1D:7C:52:AC:AD:2F:AF:16:16:1E:51:8A:35:38:59"}}},"request":{"raw":"GET /icon-peoples.svg HTTP/1.1\r\nHost: emcd.ink\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://emcd.ink/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Thu, 30 Apr 2026 10:53:03 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1596\r\nLast-Modified: Mon, 30 Mar 2026 12:39:24 GMT\r\nConnection: keep-alive\r\nETag: \"69ca6efc-63c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1596,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fa7045ef3edbf2b0be56cdb9e166ab02","sha1":"1358551fe4cc208809dd753a59a9aba0cde09e1d","sha256":"42de00681128fa908c07bad300dcfcc9dea8b2cc73fc0d84c40acc27343df255","sha512":"91a0fe4f55d77cfe45dc05237ec04a0123f9684194d321104a1d9a188f7ac5a50e7cd99e82c771e68bbef5fda09101c6bc145e49936ee04e9c237453f3917209","ssdeep":"","tlshash":"a231565be7dde131d209abbc614da47230f7a9c60b53c7e509582ca5b1024aeb9b1dc8","first_seen":"2026-04-30T10:53:39.618339Z","last_seen":"2026-04-30T10:59:29.907856Z","times_seen":2,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":386,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-30","alert":"Sinkholed","trigger":"emcd.ink","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}