{"report_id":"7dc0ad58-1b65-452f-9cab-fd98bc308f36","version":0,"status":"done","tags":[],"date":"2026-07-12T20:01:25Z","url":{"schema":"https","addr":"mercatorgenius.net/","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"mercatorgenius.net/","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"title":"mercatorgenius.net/","dom":{"size":151129,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (30448)","md5":"03bea9805a6b1d23d9dbfe4b1b038022","sha1":"26b223d49d35a9a205c45032188517fc3292141c","sha256":"22cacae79951369c6fb3c6cab73f292d8b20ddd772f798cc07b191b66effbb83","sha512":"17692071633c5dcc28163113aa03c5d94eac501c39bbed895058e2eb33127d15305799d8ba05825ec8a0705c0a775206f2283a6761da600c740b616869411296","ssdeep":"1536:TI8bV4CuOdHw+WmgmQ8kRAouROYNkH3U1Gb+YN9RyOH:TI8HvlgmROYNkH31b+c9IY","tlshash":"f2e3097169f5502ba24781857ba0eb0a7bd9e207ce670d14b3fccb848fc3d59ad2b254","dom_hash":"domhash9820c4c7a7e666dc015c669b49155be6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mercatorgenius.net/","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T20:01:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"52.58.184.107","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-07-10T06:27:58.602974Z","alert_count":0,"request_count":1,"received_data":370,"sent_data":539,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-07-10T06:27:58.796857Z","alert_count":0,"request_count":1,"received_data":18546,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"mercatorgenius.net","ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-07-05","domain_rank":0,"first_seen":"2026-07-10T10:02:19.468372Z","last_seen":"2026-07-10T10:02:19.468372Z","alert_count":34,"request_count":34,"received_data":6854907,"sent_data":18059,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-05T22:48:05.057169Z","alert_count":0,"request_count":1,"received_data":79930,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":1,"received_data":25189,"sent_data":555,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.gtranslate.net","ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-05-26","domain_rank":101861,"first_seen":"2022-11-07T21:49:20Z","last_seen":"2026-07-09T23:03:01.536508Z","alert_count":0,"request_count":2,"received_data":25419,"sent_data":1026,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mercatorgenius.net/js/bootstrap.min.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6ee6999d52646ea4b712969ab085ab3","sha1":"0a1c085eb967f2b1c8a508b4ce8a706cd33aafcd","sha256":"9f9c51906c056fc47d53e020c6256c8899d78ab2e8976babfb54a354bfdefd08","sha512":"bcf5714f044ae7795682792bb611bd3ff39265b0869d5a451155ad9906921fb0c26308aa19404fa0a9418c6e7d6b0bdb485ad78018f36f9dab9ed99e7ceb46d4","ssdeep":"1536:sMh1y0UrP1RnGuecKW6edl1YP3ya4SddZ6X9X7xXiBMg8vXN4H99W/wOsEoXCF6p:+rBSGgHEom6nRQE9EANlFVIMMU","tlshash":"14c3510a36e664324557b07a4e3b810bb625948b6e4afd083e5c46dc5f1d83d63f2fac","size":125556,"data":"","first_seen":"2025-03-23T06:56:42.581864Z","last_seen":"2026-07-12T20:01:33.189839Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/js/plugin.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"60a9cec0fceace419ef03230a9e42328","sha1":"9dc158742ff47c06300a38363b68ecf91ba79e40","sha256":"78252d81511cf5c162634b473918283e5498164c42da09ac5c8e0577c191abc1","sha512":"309c04a0fb9b5bfb1a3e8d9e345983d5cc2b36be7ad26ad445abb2225bb5cf229f7ead64b140e4dceac4408562900fb8b829e7c811423d7fef843656127cb466","ssdeep":"1536:P18rM/Mb9d2TfQ6UO1uLlggIQEKZpWdQdPI8gpFcL+Z81EiI+3/:1NxQdPIiI4","tlshash":"b3431a883392302657a771b6912f020bb1362469648d8498f5bdd8e97ff8d4d2277fbc","size":57043,"data":"","first_seen":"2023-03-07T13:11:56Z","last_seen":"2026-07-12T20:01:33.190447Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/js/rangle-slider.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"b432cba63b8488ea44a8f571b8218cd2","sha1":"a10388805592fe5538e265323e42c3a1fd447c2b","sha256":"0eb4c51fde2ec5916d1baee98f722c76ec4d1bed67fb096195d7807c6fd63cd8","sha512":"a1e7ba05588f19548cfaa158c17ad74976984a022a63c925749d71cf1492f2e0486fcbba875f47a2d4c59ae1165a05737d6ee8c4c43d128b0b9f3dbc2e24444a","ssdeep":"1536:vANkZ9qAUMtDnpRf9XEuHmk1KxYjoe8Zm6WjTU:tpBkeu","tlshash":"50638e4e39e31235096339792b9fa008b63582574818dd84bead43846f1593ca7fbfde","size":69902,"data":"","first_seen":"2025-04-24T10:45:17.488193Z","last_seen":"2026-07-12T20:01:33.192824Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/js/shortcodes.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fd37007e2d4ed4ff8c4691591d6f88f","sha1":"1c1a75f49ba7917e456343b8319cac7b309f2c78","sha256":"f3d3dbf03bf21c64e1f416595ce0ee0a098e4aa4e0b12b1daf23c8f403b2e06b","sha512":"07742de314f05c8aa346dab05a2356cd271a18237c95d8a4d888a1ddb7025a61260164d9546099773ce884cfd422610a6c27e900feffe547e234310413b708be","ssdeep":"192:zph3GcUojqdBvQI0Hclwl0Sy5i7VB2bMWIxYgXgRdgzR85:FBWBs0MSwWIxYwAWy5","tlshash":"4112ff08ace22042503bf4be5e9f5504fa61c01b540ace04bd9cdbd4af69d79866efed","size":9376,"data":"","first_seen":"2025-08-12T03:45:29.191742Z","last_seen":"2026-07-12T20:01:33.171462Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/js/main.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"53be4c5d51fd6691a5fcbd86f121f89b","sha1":"fc60b1770f9627b23907a7058046abd535644566","sha256":"1193a0b2562441e86c10bb56fc896c0b39b03d31ca7c580229d96707fe2c7870","sha512":"4b46ec42ac50271734198f177fc5be1492df4dcb33c9ca22f7c8177cbff46f3450126e34d96950d58871c34002852498af2d4309178d6fc6d03743c9dce6b041","ssdeep":"192:y+JO85AD0LAexvu5Okke8a+aQZCBzuex9Th223TsO5fSdHxCxBKoi1C:yIF5IexSkecaqCBpx9ThTsO540","tlshash":"d8522f09bcf615a21177f0692faf6504e532841b4505dd403ecd8bd41f98a2eaabfbec","size":13481,"data":"","first_seen":"2025-08-12T03:45:29.259243Z","last_seen":"2026-07-12T20:01:33.194853Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"cffbf66b6cdb3a9d01b302103bceb649","sha1":"ca6e54327b321562f0d4ef6dcc9bb610ac39b887","sha256":"2ae150ab37466e77b0aef8be729e678ee06e7ccc2d85fc3465077f8c4b52b37c","sha512":"9700bc9dad94e769c60ad7c6774c95083cfd98f2f5cece5b8766e158558892fcc3c20f277424b6ff71605f9bdcdfe0b87479d2c32567c7ec0809220e308c3630","ssdeep":"","tlshash":"9fe0f8bc3c744080179240b480bbf2283e2a70280040d863a8ea8c681cf2fcebd02894","size":416,"data":"","first_seen":"2026-07-10T10:02:25.056489Z","last_seen":"2026-07-12T20:01:33.213589Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"d47c24de25c984eadd01d63d0d2857ce","sha1":"e2d30568060ebf8a57fdba6e6628545b3936769d","sha256":"248f4624ccb547d864e577ddd9b718deb855638b2d07540c6c88ee46f336a880","sha512":"a92c6c74997e15ce0bfdc3ce6779348f8fa58b9ca93005cb2e09c8d78819911c6b63a27a2d2372232370a88000fa66cee6e8ef6e23b28281cb03110e3b3f5c63","ssdeep":"","tlshash":"2ff02b3cf96b482f02da504479dd0b82371ad164834fbd2e534c5e3d67cd4157e85aa1","size":630,"data":"","first_seen":"2025-08-12T03:58:21.84153Z","last_seen":"2026-07-12T20:01:33.214707Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a4cbdd50ea31b4a5698d0270347683d","sha1":"57cfd6b313c660378f1897f58168ade0bd423041","sha256":"d11181f377fe84fb994b1f0fcca0dcc62c670df67cd23e371743c6224f67ae9f","sha512":"b8b5b9b44c36cdfee320a0a8be75b777b14732dfa076cd2b42a56e6006c4906794a275c327a17509e24af72097c93d5ab29ce86255e0de417d2272b3c5d785ad","ssdeep":"","tlshash":"46012b1b26a921358033b47a575fe3802931a1c33081cc353dad824d0f055a00ce39d2","size":775,"data":"","first_seen":"2026-07-10T10:02:25.060718Z","last_seen":"2026-07-12T20:01:33.215729Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/js/jquery.min.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87532,"data":"","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-07-13T06:00:20.161959Z","times_seen":29737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/js/swiper-bundle.min.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ae8b8fc2d0292caa387955580e5d47d","sha1":"7657910c6944758d10a3f81b3b0c9e2132c3fd03","sha256":"4f2c05e4e825d81a2e8172777d1d11d836014087d5a3ed8c2120ff704826bbac","sha512":"c9b8509f3594fb490221a22a14f41a5cf4cd91cd4e97a9694ee645d57a061d9cac6081c75e38a5e8ea2bd5bf8fd3be5d0418b55c87b7e40e7af7533d5e817b4e","ssdeep":"3072:ypCJW3sEmTh3qL8MIFbq3AdiKpzjv0hoyGzj3aD+FlGFc6ulZ6jT:c13sL3qL85qUiIzjv0hoyGzCy+c6iM","tlshash":"00345f0b52a2253891a3b13e4f5fc4216636940b7e09fda83e9c06589f1d83c57f9fe9","size":242044,"data":"","first_seen":"2024-08-20T14:59:40.379017Z","last_seen":"2026-07-12T20:01:33.211081Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/js/carousel.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"134f87e822e12eb59645a60c6408b67b","sha1":"27273aa15a4ed716fbd12150cef4cd00852b4f16","sha256":"cbaa75d0d52a5c5d34f4285de622d80c0b99537b88a19860f0db5d9647ec824c","sha512":"a8038ad289465f4d3dd499bf1a40bc0fcab80ce0f917ddbd9b863c365a445f6f751d5ca0c639d2661b42a78596b3c08fd71d8b3ebbc5738c5b2e5480849941be","ssdeep":"96:lurYnxrmwLu78w5WhQSEz5H89SH5Xp7av0CCt+vhYMlfQk0X9NoxUxpXVQYkdki4:lUYxG8aWhbOuGnWUxVVQYkL8cYpd","tlshash":"8e32d045957500a22077f83a6c6eb22065a721cf5d9efe3978add8449f1d12c20febf8","size":11335,"data":"","first_seen":"2025-08-12T03:45:29.23701Z","last_seen":"2026-07-12T20:01:33.181677Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/js/jquery.nice-select.min.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc033885d50c0b2feb70cbd16ea460eb","sha1":"b173481bc76483a22f57f4273390618c75d63ea2","sha256":"2d34ceda6935e679b16ccbc79f4547222cbaf1532e5e95084d045803df972384","sha512":"756eca1603be597f0667952f2ae4932ebb01a014dc2cdd2639b4ace3af0905c4cd123b724ac4d2ed7db4030410d744a8b114a3f2f07eeea7f325c21e522ca17b","ssdeep":"96:i0wizyVxIXH1sBef6XmnoT2nvn/ZVBFVvnYir+ri1YS7o:ikyDIXHKBeyXAo6vn/ZVRYi0i1YS7o","tlshash":"c7f17909b4e320710cbf34bf1f9b1585b57690578008ce21f97d9be56f84a20dea6b9e","size":7549,"data":"","first_seen":"2025-04-24T10:45:17.482198Z","last_seen":"2026-07-12T20:01:33.191732Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/js/animation_heading.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5f3ddc90f2e2aaac987f69e025ddd19","sha1":"1082598535df661973fc1780b0ac75c0b2007f3e","sha256":"a872f5aea1b5fc25a5e2b5de8201351097ffea184ac1e1ac1d12a09481a863c5","sha512":"7e254b8f78e42313354f991e0ca1db3d45422c7aab309659cc341101b63f8cf946249b4d8be7a6df11e43951b264a04d612b59f7e27726e3e1c28cebb97c7f15","ssdeep":"192:2MKMJoFTSdeJmks+LFTDxpoenUyfafEG0nUT7aqXfmrUzeT:uFTqeUkscFTDxpoenLfafEG0nO7aqXfC","tlshash":"93d1df5878f214aa2b3f6db6076f6409b531602b420acf353cde42e51f64abc1762bdd","size":6668,"data":"","first_seen":"2025-08-12T03:45:29.268279Z","last_seen":"2026-07-12T20:01:33.202266Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68ee10aa7ede43f8bb3293b220daf775","sha1":"1f26a636577ea9aaa524c0a23ae8cf342be925e9","sha256":"76e28fc0425d80422e45305464ada45c7c9b4a00132c65012c737c22814c259f","sha512":"531d2baf5f4d61c0def2c5f45fd8d9b69b143c24d0474a01291d858b086b45c233d1cca885cc722d6e6eaff3f8cb62e637df797beca8f5aec20d090f0e23fe08","ssdeep":"384:UzCKMPZATN09o0mtvwfEXMb5TZ/dDszCnfYI:UVMhAh060svwcX0T1dhh","tlshash":"10a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","size":23138,"data":"","first_seen":"2026-05-06T20:53:53.345523Z","last_seen":"2026-07-13T01:29:10.536033Z","times_seen":900,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","size":18024,"data":"","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-07-13T05:44:00.541019Z","times_seen":4465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"df4ddb0df34dfd07ba71a9689d8e86f4","sha1":"9ddbce3d72a4596c809ee2c15dbcc19152f27271","sha256":"4e86f0e22e4771b5b8aac24c613c661806a678b1afa284d03cf6ad03d3e21a0a","sha512":"4c0d69f88d40b6650dd909efa494f4d7f863bf10b18f205f5ed36e28d9efbf0c82690a5d9792547e227b81e42d327279e66ca7b53ab92703cb887de3e9edb6d8","ssdeep":"1536:Rw46gylPIZfNkROP55lOVU/SZ2DUQhI8bRZ:4gYITLlOVU/62PI8n","tlshash":"6a73f8916a00f0377ab745ae65d1e7047ae99405fcb34894f42cc8804fe7d4f2a77ab9","size":79150,"data":"","first_seen":"2026-05-23T13:15:34.758539Z","last_seen":"2026-07-13T04:27:33.191496Z","times_seen":1684,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"jQuery.Deferred exception: can't access property \"nodeName\", target is nullinitialize@https://mercatorgenius.net/js/rangle-slider.js:1899:9\n@https://mercatorgenius.net/js/rangle-slider.js:14:14\ne@https://mercatorgenius.net/js/jquery.min.js:2:27028\nDeferred/then/l/\u003c/t\u003c@https://mercatorgenius.net/js/jquery.min.js:2:27330\nsetTimeout handler*Deferred/then/l/\u003c@https://mercatorgenius.net/js/jquery.min.js:2:27594\nc@https://mercatorgenius.net/js/jquery.min.js:2:25304\nfireWith@https://mercatorgenius.net/js/jquery.min.js:2:26053\nfire@https://mercatorgenius.net/js/jquery.min.js:2:26089\nc@https://mercatorgenius.net/js/jquery.min.js:2:25304\nfireWith@https://mercatorgenius.net/js/jquery.min.js:2:26053\nready@https://mercatorgenius.net/js/jquery.min.js:2:29112\nP@https://mercatorgenius.net/js/jquery.min.js:2:28884\nEventListener.handleEvent*@https://mercatorgenius.net/js/jquery.min.js:2:29264\n@https://mercatorgenius.net/js/jquery.min.js:2:220\n@https://mercatorgenius.net/js/jquery.min.js:2:225\nmap[type:undefined]","filename":"https://mercatorgenius.net/js/jquery.min.js","line_number":2,"column_number":28648},{"level":"warn","text":"jQuery.Deferred exception: can't access property \"nodeName\", target is nullinitialize@https://mercatorgenius.net/js/rangle-slider.js:1899:9\n@https://mercatorgenius.net/js/rangle-slider.js:43:14\ne@https://mercatorgenius.net/js/jquery.min.js:2:27028\nDeferred/then/l/\u003c/t\u003c@https://mercatorgenius.net/js/jquery.min.js:2:27330\nsetTimeout handler*Deferred/then/l/\u003c@https://mercatorgenius.net/js/jquery.min.js:2:27594\nc@https://mercatorgenius.net/js/jquery.min.js:2:25304\nfireWith@https://mercatorgenius.net/js/jquery.min.js:2:26053\nfire@https://mercatorgenius.net/js/jquery.min.js:2:26089\nc@https://mercatorgenius.net/js/jquery.min.js:2:25304\nfireWith@https://mercatorgenius.net/js/jquery.min.js:2:26053\nready@https://mercatorgenius.net/js/jquery.min.js:2:29112\nP@https://mercatorgenius.net/js/jquery.min.js:2:28884\nEventListener.handleEvent*@https://mercatorgenius.net/js/jquery.min.js:2:29264\n@https://mercatorgenius.net/js/jquery.min.js:2:220\n@https://mercatorgenius.net/js/jquery.min.js:2:225\nmap[type:undefined]","filename":"https://mercatorgenius.net/js/jquery.min.js","line_number":2,"column_number":28648},{"level":"warn","text":"Request failed with status 403","filename":"https://www.smartsuppchat.com/loader.js?","line_number":2,"column_number":17930}]},"http":[{"url":{"schema":"https","addr":"mercatorgenius.net/images/common/footer-cta-bg.jpg","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:49.615Z","timestamp":1783886389615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /images/common/footer-cta-bg.jpg HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:49 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 57644\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-e12c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57644,"size_decoded":57887,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x1041, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1e1ac096560bb7a3ed76bac2ca4a1e59","sha1":"471ead1f5cdb215ec2bcee34b76cb6378b418479","sha256":"096fe3a117143e87c476b9709376bd860ffbbac45ee2725fe3b44a58a8bed12b","sha512":"a084b43dfc3baf4510b1d3c1898790a3bbefab64d58f2fa41c92c98f6044f9d058273c19331adeb12f4e15add55a4c878dea6e46dce40ce121523ee6224a316e","ssdeep":"1536:amo9yXI9cvlZdkZ57eSscndRBz1qGPCaLyMQmG7VT7T7ab1Dyhs:aL9M/ufscz6GaaLLPA7T781Dyhs","tlshash":"b943f229f8c12c60de6eaf9311061abe45fb7f9eeffcf7975e40061811a46381a10c96","first_seen":"2025-08-12T03:45:29.288553Z","last_seen":"2026-07-12T20:01:33.163407Z","times_seen":5,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/js/shortcodes.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.757Z","timestamp":1783886388757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /js/shortcodes.js HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 9376\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-24a0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9376,"size_decoded":9630,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"5fd37007e2d4ed4ff8c4691591d6f88f","sha1":"1c1a75f49ba7917e456343b8319cac7b309f2c78","sha256":"f3d3dbf03bf21c64e1f416595ce0ee0a098e4aa4e0b12b1daf23c8f403b2e06b","sha512":"07742de314f05c8aa346dab05a2356cd271a18237c95d8a4d888a1ddb7025a61260164d9546099773ce884cfd422610a6c27e900feffe547e234310413b708be","ssdeep":"192:zph3GcUojqdBvQI0Hclwl0Sy5i7VB2bMWIxYgXgRdgzR85:FBWBs0MSwWIxYwAWy5","tlshash":"4112ff08ace22042503bf4be5e9f5504fa61c01b540ace04bd9cdbd4af69d79866efed","first_seen":"2025-08-12T03:45:29.191742Z","last_seen":"2026-07-12T20:01:33.171462Z","times_seen":5,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/images/project/07.jpg","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.771Z","timestamp":1783886388771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /images/project/07.jpg HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 194026\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-2f5ea\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":194026,"size_decoded":194271,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1920x950, components 3","md5":"033b80b81b08f2b9a8b7f1c3aa7bf262","sha1":"84c128e1ef86d5f3a669cea319e34664771ec8ee","sha256":"493b3ddedccce2873767868e354780a69777e70c1148d720e9f50bec147da85a","sha512":"0fb3be023210f4da03480da9290a1877eb3aa8dbd68c2143333de393426539bc95df1b57bb7eca5e437171b452aea29b156df6c9b911f3b85a473159f66a18ec","ssdeep":"3072:m33zuCKhk27ecJZI8qNvu390zskyQwhHMVWHa449RMA+pfHw13FSdk96Z6STOamt:+K2ueIZI8qNvuN0gkyDHVy7+pomdxZ6n","tlshash":"4414f1230c3402a2eb5dc6f4fa134ddb962393bdbad04d9e86011e8f7a85572fe6911d","first_seen":"2025-08-12T03:45:29.254343Z","last_seen":"2026-07-12T20:01:33.173765Z","times_seen":5,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/assets/images/banner/6.jpg","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.773Z","timestamp":1783886388773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /assets/images/banner/6.jpg HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 86362\r\nlast-modified: Sun, 28 Dec 2025 01:42:06 GMT\r\netag: \"69508aee-1515a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":86362,"size_decoded":86606,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1800x1168, components 3","md5":"f9fe4c84421689de582ba6f5aac18acd","sha1":"ddd623cf8c372617b4258670450c43d12fc78101","sha256":"5820a2d3e61f44ff200111a91853a0f4780c921bbb49d70afb329069543df7d3","sha512":"2b31a6f4dcce4a233337c1a8fb63fe7e426aeef4ca59903db3403be2f8442a8e41fc24f8baee819b62938a0ca9a838ed9c827eb4625ce005e0933139bc825b5a","ssdeep":"1536:/87OxF0l1fzATax8Kqy9B5oluXJhRkj93iysRwIKoW8nJEDGvrWQc4YjwbyBb0nD:oOy1fzATy8e9B1u3SRwIKoWsJE0tabyD","tlshash":"ca83022733a42d22bb1de6b1451c1e0ab8d8fec927fe1076c4173f611b7dca088a5d95","first_seen":"2025-08-12T03:45:29.286379Z","last_seen":"2026-07-12T20:01:33.17512Z","times_seen":5,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/images/project/banner-2.jpg","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.779Z","timestamp":1783886388779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /images/project/banner-2.jpg HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 141280\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-227e0\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":141280,"size_decoded":141525,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 960x872, components 3","md5":"e9ab4b44b2cdd8d415e76db5786ce88b","sha1":"2cdcba327d6fe89bea050fdb1e05880d723d06cd","sha256":"9011639a22e011c88f3e732d557ed5fa2d034e46628a8186ac09c693f1e6f306","sha512":"3aae4da084f55e49545d854d14cd9a59f6a9a16b6a6d66a05ed4de2f19954af0081f16c67db0f713630f15f22c1726221780c859e06c034a19fb029a3e83b6b3","ssdeep":"3072:jsTI7DWgnuXDx3HH9F8AFmVKw2PfDMSXRBVH6TPd1Cz2:jsEf5nE3rQwlPfQSXlaTPez2","tlshash":"39d31246772efa12d8130e0052f2e4a6d1884e9cfca5cca293bbd181f6e16935e1dd4f","first_seen":"2023-09-24T09:12:35Z","last_seen":"2026-07-12T20:01:33.176578Z","times_seen":22,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/dashboard/assets/js/vendor/jquery-3.5.1.min.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:49.257Z","timestamp":1783886389257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /dashboard/assets/js/vendor/jquery-3.5.1.min.js HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:49 GMT\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":162,"size_decoded":275,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-07-13T04:43:39.449034Z","times_seen":26691,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/images/logo/logo.png","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:51.548Z","timestamp":1783886391548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /images/logo/logo.png HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:51 GMT\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162,"size_decoded":275,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-07-13T04:43:39.449034Z","times_seen":26691,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T19:59:47.891Z","timestamp":1783886387891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":102285,"size_decoded":23944,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1139)","md5":"76179be1f93acb7cfc35b28c6f61f3a6","sha1":"3440f930852879a8290798198bfc5d4ee55f08e9","sha256":"513043694a48c5b4877dc641370332d596a1f4aed5455fb8baa78f670f8f2ba0","sha512":"bb3b5bec8866ae0df3579ec3232f85536788f223bb7e0e7fd8f82bd370950a4c6133b4abee7b0e0738de49754729bf06ef1e163d34b5db13e83eef856b005a97","ssdeep":"768:S/LT+0HPdBLblyOJvQWkRAoijF8F6N1TMHV1TU/rXjp8+5Q7NP4XOFDjbTmmV:SThHnbgOJlkRAoijOYNqH3U/S7N5nymV","tlshash":"afa3613169fa2127028b82917a715b1bbf94e907d74b8a2032fc0bdc5fc7d86dd97249","first_seen":"2026-07-10T10:02:25.008549Z","last_seen":"2026-07-12T20:01:33.1789Z","times_seen":2,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":161,"connect":27,"send":0,"wait":52,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/css/animate.css","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.731Z","timestamp":1783886388731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /css/animate.css HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 63768\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-f918\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63768,"size_decoded":64009,"mime_type":"text/css","magic":"ASCII text","md5":"06089695fbf857ad4eb22159cb77ffcd","sha1":"214712d6fc1906be526bf33c50dc735f31d5312a","sha256":"80472b0833e3aed6dbcd34a543186c8b76104842f5853c407028ee515e465b87","sha512":"73aaa3acd462a9af7a6b557e342871caebca586298991b984a63a566652d45330c7f4c4ed88d00b6ed3499b1ca8f6e4c904e40834b03ae7f7992f272580577f2","ssdeep":"192:hWIzKhWSIG80FhZt8vYIKApNmWr/yBe0/YiB3bzXQgtPWVO+obNiTGQwE7CRj7CG:SnKr2","tlshash":"0053e96528a111445737461987df4a78663cf6a31826acfbb3ce588f8f41fac23cd627","first_seen":"2025-08-12T03:45:29.200223Z","last_seen":"2026-07-12T20:01:33.179966Z","times_seen":8,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/dashboard/assets/js/vendor/jquery-3.5.1.min.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.735Z","timestamp":1783886388735,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /dashboard/assets/js/vendor/jquery-3.5.1.min.js HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":162,"size_decoded":275,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-07-13T04:43:39.449034Z","times_seen":26691,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/js/carousel.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.748Z","timestamp":1783886388748,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /js/carousel.js HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 11335\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-2c47\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11335,"size_decoded":11590,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"134f87e822e12eb59645a60c6408b67b","sha1":"27273aa15a4ed716fbd12150cef4cd00852b4f16","sha256":"cbaa75d0d52a5c5d34f4285de622d80c0b99537b88a19860f0db5d9647ec824c","sha512":"a8038ad289465f4d3dd499bf1a40bc0fcab80ce0f917ddbd9b863c365a445f6f751d5ca0c639d2661b42a78596b3c08fd71d8b3ebbc5738c5b2e5480849941be","ssdeep":"96:lurYnxrmwLu78w5WhQSEz5H89SH5Xp7av0CCt+vhYMlfQk0X9NoxUxpXVQYkdki4:lUYxG8aWhbOuGnWUxVVQYkL8cYpd","tlshash":"8e32d045957500a22077f83a6c6eb22065a721cf5d9efe3978add8449f1d12c20febf8","first_seen":"2025-08-12T03:45:29.23701Z","last_seen":"2026-07-12T20:01:33.181677Z","times_seen":10,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/assets/images/logo/logo.svg","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.768Z","timestamp":1783886388768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /assets/images/logo/logo.svg HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3811742\r\nlast-modified: Sun, 28 Dec 2025 01:42:06 GMT\r\netag: \"69508aee-3a299e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3811742,"size_decoded":3811992,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f69aea89a6deeb463053e46997f9096f","sha1":"93e5610d4c8f91152467e039cfbd5548b570d113","sha256":"937bcbb0b4b3cd40eb041e06749b06e7bdd3f9fbb1bc79a78217a92a94962998","sha512":"15e3a2b255104687fa3d14f00f1839db83a2a7f0346e95602216fc20766a35bae4807480efbff5a9ee71bcb9bc54465e994e73fe09d3c1d5504cc78220f66df7","ssdeep":"24576:SD54S7FvhHjcj7MsD54S7FvhHjcj7MvTP2m3psrjWzn:SvDcjAsvDcjArPpUSn","tlshash":"ad2523b1cf6e5e6a0d2c5421506cabca2df21aa3df0fd8d653257a9f01de391c87680c","first_seen":"2026-07-10T10:02:25.033968Z","last_seen":"2026-07-12T20:01:33.182889Z","times_seen":2,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":588,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/fonts/icomoon.ttf","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:49.677Z","timestamp":1783886389677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /fonts/icomoon.ttf HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/fonts/font-icons.css\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:49 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 93432\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-16cf8\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":93432,"size_decoded":93690,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"5b944a5dfcd2caf8bf22006f630f8145","sha1":"7a21e98965de176a2c9991461d6fb26324ae5ba9","sha256":"c975de35e2d103c6e11778e3292d576756241316bd050a07dc07ad5239f55e88","sha512":"6270918bc8f2e61bd6fd9da5253114fd40157cf6a199920111a436e0f42367c585866a4a8fafeb7a055c93bed04bae3d701834d806fb8c7fa6d5c884c3ef8e97","ssdeep":"1536:B55E55uEEtttnLUS+EYBd7jVEuuy3Ohwn35iETyKaBhnWStpiP3Tgn:p7+Bd7jGG3HnJi/KaeStpir","tlshash":"d593e607631bffcde00268ab0c0981674de6e1115732e6a3ad4e9d69d701af14b69b3f","first_seen":"2025-08-12T03:45:29.232681Z","last_seen":"2026-07-12T20:01:33.184073Z","times_seen":13,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/images/project/09.jpg","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.772Z","timestamp":1783886388772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /images/project/09.jpg HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 199503\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-30b4f\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":199503,"size_decoded":199748,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 900x1000, components 3","md5":"79c3159cef5fbdcee0e99a03c386bafc","sha1":"abae46e985a195960309d3021127edda2f735f87","sha256":"117680e57954ecc6dad7fbde3a3e22d7c2a1f2a9c44726b3f1bb56495bd9caa7","sha512":"a22db1b74190824e34f9a5eab82a994162d42a67f31adce5924a0b9d55adb98e58fabf6217b4493ba70c8180b80fecf42a87983f953d5f7659432c23005b1da4","ssdeep":"6144:AJIpgoQpZ/UQhY/1OniZjHDMnCrZHqa9T3d:3pREZMApnid9rZKadd","tlshash":"651412929c58c6f19b1ea13281cf781d06929fb7fed98593b2791cc2f7ca002692219d","first_seen":"2025-08-12T03:45:29.239137Z","last_seen":"2026-07-12T20:01:33.185817Z","times_seen":5,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/images/project/01.jpg","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.775Z","timestamp":1783886388775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /images/project/01.jpg HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 69220\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-10e64\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69220,"size_decoded":69464,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x1000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d6b13bd24b911a64d999eca6befbe92c","sha1":"9f233ef4fcec8562d9127c7fd2002ee800c5cf5e","sha256":"5d104d462e6bd7b71dd316cb6a0c13e3e7abfb2b5e33f7244d6f702f12873bfa","sha512":"503d9a0a87eb5b6922f2e6bf60836d2e79c78d0f95e236a971d819d76f3894701e7053f8df5689f715367d370773fda645be582238b5a36521fae6fa501d130a","ssdeep":"768:awCLtpmINZym+XLIEBQDQlxCoPA6um4+l1kUkxu7uPzHovDW8OnahSVBYmqXrQOl:bozNKLdA6u7+U1xubDAnYqY5XVb/Dxd","tlshash":"ff63025330f834cae09a29e32115dd3e6a83344d7badc0c77e5e3ff608546b5a4e5889","first_seen":"2025-08-12T03:45:29.217809Z","last_seen":"2026-07-12T20:01:33.186901Z","times_seen":5,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/fonts/font-icons.css","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.724Z","timestamp":1783886388724,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /fonts/font-icons.css HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 8411\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-20db\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8411,"size_decoded":8651,"mime_type":"text/css","magic":"ASCII text","md5":"d254e4d607b0e6210db028ef231c77fd","sha1":"6dc0f4b56def8947d5c37f7c1ca8277287ecb6da","sha256":"7125afe1d7537c367bd11769e974318c676f36aa9a49ff2c4b1db901e0c039cc","sha512":"9b0a1fedc567b555b32a0283dff6261dddd8c564b8849c3b7f1eb1255959ed4c5e19acb37bdaaf284ca2f71c5a78176c8a30f877ca2a2a08fae36c0ad46a8f12","ssdeep":"96:QMxoOrO8A+OrMYG0atovCmcCZSbc7hSw78t/w/8TDw9:QMxVAIY4tyNNrcwa/wmw9","tlshash":"f502b0e4a9bd18841300e4d063426661ff1da3689d9f2d1af6b3b88cb6e3315d5d63ec","first_seen":"2025-08-12T03:45:29.29143Z","last_seen":"2026-07-12T20:01:33.188143Z","times_seen":5,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.734Z","timestamp":1783886388734,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/sweetalert2@11 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.26.25\r\nx-jsd-version-type: version\r\netag: W/\"1352e-ndvOPXKkWWyAnuLBXbzBkVLycnE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\nage: 30669\r\nx-served-by: cache-fra-etou8220138-FRA, cache-bma-essb1270066-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 21297\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79150,"size_decoded":22077,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48577)","md5":"df4ddb0df34dfd07ba71a9689d8e86f4","sha1":"9ddbce3d72a4596c809ee2c15dbcc19152f27271","sha256":"4e86f0e22e4771b5b8aac24c613c661806a678b1afa284d03cf6ad03d3e21a0a","sha512":"4c0d69f88d40b6650dd909efa494f4d7f863bf10b18f205f5ed36e28d9efbf0c82690a5d9792547e227b81e42d327279e66ca7b53ab92703cb887de3e9edb6d8","ssdeep":"1536:Rw46gylPIZfNkROP55lOVU/SZ2DUQhI8bRZ:4gYITLlOVU/62PI8n","tlshash":"6a73f8916a00f0377ab745ae65d1e7047ae99405fcb34894f42cc8804fe7d4f2a77ab9","first_seen":"2026-05-23T13:15:34.758539Z","last_seen":"2026-07-13T04:27:33.191496Z","times_seen":1684,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":9,"receive":2,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/js/bootstrap.min.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.740Z","timestamp":1783886388740,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 125556\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-1ea74\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":125556,"size_decoded":125813,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f6ee6999d52646ea4b712969ab085ab3","sha1":"0a1c085eb967f2b1c8a508b4ce8a706cd33aafcd","sha256":"9f9c51906c056fc47d53e020c6256c8899d78ab2e8976babfb54a354bfdefd08","sha512":"bcf5714f044ae7795682792bb611bd3ff39265b0869d5a451155ad9906921fb0c26308aa19404fa0a9418c6e7d6b0bdb485ad78018f36f9dab9ed99e7ceb46d4","ssdeep":"1536:sMh1y0UrP1RnGuecKW6edl1YP3ya4SddZ6X9X7xXiBMg8vXN4H99W/wOsEoXCF6p:+rBSGgHEom6nRQE9EANlFVIMMU","tlshash":"14c3510a36e664324557b07a4e3b810bb625948b6e4afd083e5c46dc5f1d83d63f2fac","first_seen":"2025-03-23T06:56:42.581864Z","last_seen":"2026-07-12T20:01:33.189839Z","times_seen":68,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/js/plugin.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.750Z","timestamp":1783886388750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /js/plugin.js HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 57043\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-ded3\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57043,"size_decoded":57298,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9642)","md5":"60a9cec0fceace419ef03230a9e42328","sha1":"9dc158742ff47c06300a38363b68ecf91ba79e40","sha256":"78252d81511cf5c162634b473918283e5498164c42da09ac5c8e0577c191abc1","sha512":"309c04a0fb9b5bfb1a3e8d9e345983d5cc2b36be7ad26ad445abb2225bb5cf229f7ead64b140e4dceac4408562900fb8b829e7c811423d7fef843656127cb466","ssdeep":"1536:P18rM/Mb9d2TfQ6UO1uLlggIQEKZpWdQdPI8gpFcL+Z81EiI+3/:1NxQdPIiI4","tlshash":"b3431a883392302657a771b6912f020bb1362469648d8498f5bdd8e97ff8d4d2277fbc","first_seen":"2023-03-07T13:11:56Z","last_seen":"2026-07-12T20:01:33.190447Z","times_seen":168,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/js/jquery.nice-select.min.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.753Z","timestamp":1783886388753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /js/jquery.nice-select.min.js HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7549\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-1d7d\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":7549,"size_decoded":7803,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"fc033885d50c0b2feb70cbd16ea460eb","sha1":"b173481bc76483a22f57f4273390618c75d63ea2","sha256":"2d34ceda6935e679b16ccbc79f4547222cbaf1532e5e95084d045803df972384","sha512":"756eca1603be597f0667952f2ae4932ebb01a014dc2cdd2639b4ace3af0905c4cd123b724ac4d2ed7db4030410d744a8b114a3f2f07eeea7f325c21e522ca17b","ssdeep":"96:i0wizyVxIXH1sBef6XmnoT2nvn/ZVBFVvnYir+ri1YS7o:ikyDIXHKBeyXAo6vn/ZVRYi0i1YS7o","tlshash":"c7f17909b4e320710cbf34bf1f9b1585b57690578008ce21f97d9be56f84a20dea6b9e","first_seen":"2025-04-24T10:45:17.482198Z","last_seen":"2026-07-12T20:01:33.191732Z","times_seen":30,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/js/rangle-slider.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.755Z","timestamp":1783886388755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /js/rangle-slider.js HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 69902\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-1110e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69902,"size_decoded":70158,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"b432cba63b8488ea44a8f571b8218cd2","sha1":"a10388805592fe5538e265323e42c3a1fd447c2b","sha256":"0eb4c51fde2ec5916d1baee98f722c76ec4d1bed67fb096195d7807c6fd63cd8","sha512":"a1e7ba05588f19548cfaa158c17ad74976984a022a63c925749d71cf1492f2e0486fcbba875f47a2d4c59ae1165a05737d6ee8c4c43d128b0b9f3dbc2e24444a","ssdeep":"1536:vANkZ9qAUMtDnpRf9XEuHmk1KxYjoe8Zm6WjTU:tpBkeu","tlshash":"50638e4e39e31235096339792b9fa008b63582574818dd84bead43846f1593ca7fbfde","first_seen":"2025-04-24T10:45:17.488193Z","last_seen":"2026-07-12T20:01:33.192824Z","times_seen":11,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/images/project/05.jpg","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.770Z","timestamp":1783886388770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /images/project/05.jpg HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 48268\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-bc8c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48268,"size_decoded":48511,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x1001, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9529c12698cb7e4dfa58365c3f0a7ffc","sha1":"0e16950e1d3938b2f98cea3dc1dd6fbd63e6e99c","sha256":"7e2b119b77b9a9cb663f4a970128125d71bcb6ce3e5b12c4d790ba4d23a4be72","sha512":"fd5e879c2ae45e8abd34cf1c2269387ff14b50eeb9610d9c94496a4b74324126b58db87e16e98d0f38a6960c204d5bea8e8212584542f0a83fe49787deaf550f","ssdeep":"768:XC+xF9aLgEvHLtwhQwaLV42+07FK315To0pTz66VQe1l1LdpgMzIs:d9g/KkZ4tmK3I011VDB","tlshash":"b8230241badcfabb46ccf4e72b2491ac90761b8f20d2d7a6ec94aa77c100471150cfe9","first_seen":"2025-08-12T03:45:29.223967Z","last_seen":"2026-07-12T20:01:33.193861Z","times_seen":5,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/js/main.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.761Z","timestamp":1783886388761,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 13481\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-34a9\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":13481,"size_decoded":13736,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"53be4c5d51fd6691a5fcbd86f121f89b","sha1":"fc60b1770f9627b23907a7058046abd535644566","sha256":"1193a0b2562441e86c10bb56fc896c0b39b03d31ca7c580229d96707fe2c7870","sha512":"4b46ec42ac50271734198f177fc5be1492df4dcb33c9ca22f7c8177cbff46f3450126e34d96950d58871c34002852498af2d4309178d6fc6d03743c9dce6b041","ssdeep":"192:y+JO85AD0LAexvu5Okke8a+aQZCBzuex9Th223TsO5fSdHxCxBKoi1C:yIF5IexSkecaqCBpx9ThTsO540","tlshash":"d8522f09bcf615a21177f0692faf6504e532841b4505dd403ecd8bd41f98a2eaabfbec","first_seen":"2025-08-12T03:45:29.259243Z","last_seen":"2026-07-12T20:01:33.194853Z","times_seen":6,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v15/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:49.675Z","timestamp":1783886389675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/manrope/v15/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://mercatorgenius.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24376\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 13:58:59 GMT\r\nexpires: Fri, 09 Jul 2027 13:58:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 280850\r\nlast-modified: Wed, 13 Sep 2023 23:22:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24376,"size_decoded":25189,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24376, version 1.0","md5":"fc03edc2c67353b7608b593ee05565c6","sha1":"72106071998b0ef5f145ea4f9d53459e52a33e9f","sha256":"14be4114dcfde74652f19f9ffae8c9bb50707e9e88bd2b1fcd86fb50224109e7","sha512":"444759b488bd8724b40429e1b0e05c5e11a4a1b9a2defc03cde8e9156e237510a943c4d24fe312e0c7a5fb3929f47222fe1d44027ec242a58087a0a57be388d2","ssdeep":"384:t7xtNx1nP7nxzKxS93jTnjRBAb37o/YkoqNkyeMNCVZN6iAwOUoD+AilTeC:Zxt1DnxzTTFab3aoqhNCo/X+lB","tlshash":"62b2d01c899113dbeb45f6f46089e0104670f53062cb86c7583aa4e62b6673ebf72d5f","first_seen":"2023-05-04T01:28:06Z","last_seen":"2026-07-13T05:32:07.397686Z","times_seen":5828,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":3,"connect":33,"send":0,"wait":17,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/flags/svg/en.svg","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:51.932Z","timestamp":1783886391932,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 02:04:42 GMT","end":"Wed, 23 Sep 2026 03:04:28 GMT"},"fingerprint":{"sha1":"7E:41:C7:FB:AD:E5:FE:5D:B3:02:94:54:88:D4:EE:DD:EA:46:BC:9C","sha256":"0F:62:03:25:71:9E:01:C5:E5:A6:FD:62:89:4B:D6:28:CC:04:66:24:A5:08:2F:E1:17:68:AA:E7:51:AA:E9:A3"}}},"request":{"raw":"GET /flags/svg/en.svg HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:59:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Fri, 16 Dec 2022 23:34:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Fri, 02 Jul 2027 04:36:02 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WHVdfUHhoYPpaQqr1S7x4gS1lqEiWfbn8rL8OBi6nG1PjbbeyUjiZA7ZAMjeMxz7YBvj502H17doXxJKXg3Khk95cVvfcStvcnr972BG3xYgaytpvs%2FFvxuzGox77ezVDH%2B8ow%3D%3D\"}]}\r\nage: 919429\r\ncf-cache-status: HIT\r\netag: W/\"639d0089-35e\"\r\ncontent-encoding: br\r\ncf-ray: a1a2a17d9b61b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":862,"size_decoded":1171,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9bbc4885a348eff84e4ef4155121fae","sha1":"afaa1646576b96aa105a66c3273f13f0cb30e0c3","sha256":"de46013c87c1d6b0e4804a6bd8be50f2c5f961c5adbc42ba40b8913af33afe75","sha512":"b0e944509060a802c1b2d4c014070e41bd9b8af4d1969670094cecdff21b537b14a2d64e3368881f49694bd9582f10ee58674b90e0e7acf36e70d51c0b08b664","ssdeep":"","tlshash":"5211a384996a505c2c86c6cbfed46e8443ff72cef6650984644d229c7149d9f47c4b1d","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-07-13T05:33:11.312701Z","times_seen":13017,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/css/swiper-bundle.min.css","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.729Z","timestamp":1783886388729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /css/swiper-bundle.min.css HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 16471\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-4057\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":16471,"size_decoded":16712,"mime_type":"text/css","magic":"ASCII text, with very long lines (16214)","md5":"a2431bc290cf34e330e11ec4cfce1247","sha1":"32a53342901fef5f4f4dbb26a555e730f84437a4","sha256":"c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196","sha512":"87aef045472db25020faead697ec02813ba38d4e313caf437b4ca5cadbb7a7495805ac0b74e5de60cd84ccecab290b76d003eb1fadfcdaa70e650a597658ada9","ssdeep":"192:IbgmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IdUbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"fa7234681340282753274f374b71cbb9d9b444d24b93896e91c0ee88d7b6cbd236f6e9","first_seen":"2023-04-05T10:48:11Z","last_seen":"2026-07-13T06:10:26.016822Z","times_seen":134412,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/assets/images/logo/logo.png","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:51.551Z","timestamp":1783886391551,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /assets/images/logo/logo.png HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 102709\r\nlast-modified: Sun, 28 Dec 2025 01:42:06 GMT\r\netag: \"69508aee-19135\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":102709,"size_decoded":102953,"mime_type":"image/png","magic":"PNG image data, 553 x 300, 8-bit/color RGBA, non-interlaced","md5":"e620a6d6260ec6351cff3074550eea74","sha1":"81beda47b712a84371c04ac618df5b8d11d0d9f0","sha256":"ea6efaf20f7a0f53a9121b456d025d88a535b989ac665c9ab1f634af4ec533a9","sha512":"661c65e7212aedee2a26b8994fa1864ecf85d7cd6effeec4b88af0f4593445ffbf98c643ece572c915a22a32b01b0c6a484bafac0823c35e96c023ac10c8d61f","ssdeep":"3072:YtVtpSsiA9qqXL9v7jRMqZO9qTTGVdFRm:YR06fVBG0","tlshash":"d4a3122ae714a32e9abf7283619e1a64cf41c6248b56b6cccd5f787abe0f04355d408d","first_seen":"2026-07-10T10:02:25.04521Z","last_seen":"2026-07-12T20:01:33.1982Z","times_seen":2,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/49c03e902c1ca9815d7af52a8f89cd265ed1d048.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"52.58.184.107","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:52.924Z","timestamp":1783886392924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/49c03e902c1ca9815d7af52a8f89cd265ed1d048.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nOrigin: https://mercatorgenius.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\ndate: Sun, 12 Jul 2026 19:59:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 57\r\nx-version: 6cb79abf75047496934c7756b55ec6f26e7d2373\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":null,"data":{"size":57,"size_decoded":370,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"471ad8674b65ae0302f71602143789ca","sha1":"8cbb927ffa584a95af053f00149b47d8295719f3","sha256":"1e3f60d29de08e299aa39aadee4c5c47414c0e6108298deb9ec78d14d62ed238","sha512":"717b067945c9b8d6fed624f98c70d1e534d76801934db5975cc13ebd86b1f1b592fb4e7f377e996893b4a7e78cd111044f49990a427bc5c42f2ebce6fa6bf7a9","ssdeep":"","tlshash":"fe90022f05291cba7f3245053c6851cc025404a1518074d6ccec917d064f540c022112","first_seen":"2023-04-19T00:11:12Z","last_seen":"2026-07-13T05:39:22.579595Z","times_seen":3201,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":4,"connect":21,"send":0,"wait":24,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/fonts/fonts.css","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.722Z","timestamp":1783886388722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /fonts/fonts.css HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 21457\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-53d1\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21457,"size_decoded":21698,"mime_type":"text/css","magic":"ASCII text, with very long lines (634)","md5":"4edee17ae3948ed01fa7bfd6261a43f7","sha1":"ab5034e21b0a0860b751bfd2ef08f1ca96b23b09","sha256":"1f7cc1199af7af5a23d2e97de0ac7043d59bd985a96a78816982799591ff4084","sha512":"89006a670a80021f5f28b56b2e754cebe124238393fc5e24a45c2947315eb9d051312fe39f4e64e50b83b88fbfbfecdbe980434939695dcf15371d6ca8e4c7c2","ssdeep":"384:iIKvlknsv+gil9e3t3RIf5WpSaFR+rE4PFzpy:c645cpy","tlshash":"4da276d1082ba604eb875cc263cf7e36ee0ea1157450d5b8abfd1cd8ac9bc56236472d","first_seen":"2025-08-12T03:45:29.197308Z","last_seen":"2026-07-12T20:01:33.199827Z","times_seen":7,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/css/bootstrap.min.css","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.728Z","timestamp":1783886388728,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 298775\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-48f17\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":298775,"size_decoded":299018,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"001c128c41769f604a8b2fe704e3efe4","sha1":"754e20881bed7a1c76058e679e42a6f92a3816ca","sha256":"d017502a3b15b8f828b37d6ac4eb275939446ccd462f759e5d15a9934f1111d6","sha512":"8ddcb134eed4c9a659397cdc7b4997838ab2191f2e8bfa67c5e669b9b00ca0884bac2ec56c07612c7639783b92f3e2f787fb30348a2b4c9cb311e4574bb90425","ssdeep":"1536:8XvrWwubnd9ZNevsO/WRsZHfJl1LI12relt4zleSQmud:8SndzNevolt4zleSQmud","tlshash":"e454531ae8f239bc0c57916967deaee9b27c5083c719dc64b8cf33148f492e15961ec8","first_seen":"2025-08-12T03:45:29.266713Z","last_seen":"2026-07-12T20:01:33.200743Z","times_seen":6,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.gtranslate.net/widgets/latest/float.js","fqdn":"cdn.gtranslate.net","domain":"gtranslate.net","tld":"net"},"ip":{"addr":"172.67.68.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.738Z","timestamp":1783886388738,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gtranslate.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Jun 2026 02:04:42 GMT","end":"Wed, 23 Sep 2026 03:04:28 GMT"},"fingerprint":{"sha1":"7E:41:C7:FB:AD:E5:FE:5D:B3:02:94:54:88:D4:EE:DD:EA:46:BC:9C","sha256":"0F:62:03:25:71:9E:01:C5:E5:A6:FD:62:89:4B:D6:28:CC:04:66:24:A5:08:2F:E1:17:68:AA:E7:51:AA:E9:A3"}}},"request":{"raw":"GET /widgets/latest/float.js HTTP/1.1\r\nHost: cdn.gtranslate.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:59:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Wed, 06 May 2026 19:42:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Thu, 01 Jul 2027 02:02:58 GMT\r\ncache-control: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o0F7gDPTlBnK3LLImUubE0SPQXPebWHAtq0yplq%2B0PwOxLLLCEAR%2BIQSOCyOF%2FhlhBsR0U1yDC6wPXEu%2FqBw2tKYM8wpHVjOFlWn2R%2FZUelTqFMZMLy3jNKoNp3qFTAaazqYEw%3D%3D\"}]}\r\nage: 1015013\r\ncf-cache-status: HIT\r\netag: W/\"69fb99bb-5a62\"\r\ncontent-encoding: br\r\ncf-ray: a1a2a17d5a93b1b8-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23138,"size_decoded":7464,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"68ee10aa7ede43f8bb3293b220daf775","sha1":"1f26a636577ea9aaa524c0a23ae8cf342be925e9","sha256":"76e28fc0425d80422e45305464ada45c7c9b4a00132c65012c737c22814c259f","sha512":"531d2baf5f4d61c0def2c5f45fd8d9b69b143c24d0474a01291d858b086b45c233d1cca885cc722d6e6eaff3f8cb62e637df797beca8f5aec20d090f0e23fe08","ssdeep":"384:UzCKMPZATN09o0mtvwfEXMb5TZ/dDszCnfYI:UVMhAh060svwcX0T1dhh","tlshash":"10a2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","first_seen":"2026-05-06T20:53:53.345523Z","last_seen":"2026-07-13T01:29:10.536033Z","times_seen":900,"resource_available":true,"data":null}},"time_used":3159,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":8,"receive":0,"ssl":3146},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/js/animation_heading.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.759Z","timestamp":1783886388759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /js/animation_heading.js HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6668\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-1a0c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6668,"size_decoded":6922,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e5f3ddc90f2e2aaac987f69e025ddd19","sha1":"1082598535df661973fc1780b0ac75c0b2007f3e","sha256":"a872f5aea1b5fc25a5e2b5de8201351097ffea184ac1e1ac1d12a09481a863c5","sha512":"7e254b8f78e42313354f991e0ca1db3d45422c7aab309659cc341101b63f8cf946249b4d8be7a6df11e43951b264a04d612b59f7e27726e3e1c28cebb97c7f15","ssdeep":"192:2MKMJoFTSdeJmks+LFTDxpoenUyfafEG0nUT7aqXfmrUzeT:uFTqeUkscFTDxpoenLfafEG0nO7aqXfC","tlshash":"93d1df5878f214aa2b3f6db6076f6409b531602b420acf353cde42e51f64abc1762bdd","first_seen":"2025-08-12T03:45:29.268279Z","last_seen":"2026-07-12T20:01:33.202266Z","times_seen":9,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/images/project/03.jpg","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.769Z","timestamp":1783886388769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /images/project/03.jpg HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 58316\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-e3cc\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":58316,"size_decoded":58559,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x841, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1088fe4b9e595bb6d3353a2fcbd8144f","sha1":"f9fb970357f63b825d61fff4b3a7df31e4f41041","sha256":"1e4c982fcc1b63e15a07b7057dceeabfe9bbb6f8e4cf46048fb6495fe3354f3f","sha512":"d39d4346777559a0904744d7d7e174ceea08931745cdc471fed04357817b0db6c0984d30dcdd3b85eb5ca932918b964a3e605b4aca408a1972d9697de691a7ab","ssdeep":"1536:l1HNug68zFt3xDV0k5x8Bb+jxdEn7k0eLD:l1HNpz3X0oxBdEReLD","tlshash":"6e4302c991dd50a93ad4dfe8dd54d2982a8c4d6c53c4d4e6b442edc04b9f23087abe3a","first_seen":"2025-08-12T03:45:29.208492Z","last_seen":"2026-07-12T20:01:33.203276Z","times_seen":5,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/images/project/banner-04.jpg","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.777Z","timestamp":1783886388777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /images/project/banner-04.jpg HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 545965\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-854ad\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":545965,"size_decoded":546210,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1280, components 3","md5":"a359bd9f91841d4779480cfbb85b3beb","sha1":"57849ab26aa2c01d8f3e087122053045808513a4","sha256":"a2a886fff2a12c1c3832285d1e50fbcc5f919e45dd175d869bb717b1e7df1e3d","sha512":"52d317a6add5bfbdd905f3cad72d658abb209daea0079f84268cd3f850dcb68596a8ae5a086c17aefda728fe607c8c368d3b4c677f5818b910fdbd9bc47be67b","ssdeep":"12288:SCy+DDbFygxhfU6heu063kuTqDrRAkvbyLYMYueeXm6maoi:pLDhygxh8zuTqvRAkvybVDXrJL","tlshash":"ebc423d0e7eb191307d0dc4710699d3820bf22c2b978b6761e8c9188af75b3d466d3a7","first_seen":"2024-08-19T14:16:39.29189Z","last_seen":"2026-07-12T20:01:33.204179Z","times_seen":6,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:49.570Z","timestamp":1783886389570,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 04 Jun 2026 14:34:49 GMT","end":"Wed, 02 Sep 2026 14:34:48 GMT"},"fingerprint":{"sha1":"77:06:42:CE:73:9F:CA:05:A3:6E:99:99:F2:3F:B7:EE:E4:60:E9:29","sha256":"E7:6E:68:C5:CD:6C:F6:14:84:A0:18:1A:D7:94:77:7A:28:F6:67:8E:90:58:94:AE:3A:65:6A:B7:95:0F:5D:1B"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 19:59:52 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6a2663cd-4668\"\r\nexpires: Mon, 08 Jun 2026 06:46:12 GMT\r\nlast-modified: Mon, 08 Jun 2026 06:40:13 GMT\r\nx-77-nzt: kzsmkU8J3gNSHApUX2dmVEaZkCSwY7eeh0Qme322vUe08p89so03bWlPoyZt6xiSGvIJZZw\r\nx-77-nzt-ray: e2f7542056688add38f2536ac6f29134\r\nx-77-cache: HIT\r\nx-77-age: 3\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18024,"size_decoded":6041,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17951)","md5":"218d24439d4e2c0990f35338a7ac220c","sha1":"5a7b913584c1244bf61beab9dc644204d130101c","sha256":"efb497f7159de26ea5e0521d675d909dc063e36d0d23c2ad96fa9109b73ee263","sha512":"17af39bfdc350c9d1f8dd74652641d0c028881ecb3935d2d9fdb763d24136665d135d00219aabac57693112e2314d4fa91b802ba2662a1580aa35c5e0b6e624b","ssdeep":"384:2/xzy2A3wyxNeBWbEgl/EuVaBWbE0rIcvqSI/aQ/UpG:2/xzy2A3wXscuVaAxka05","tlshash":"4182b7cc7691b16543ab61b4843f620ff1376929740d8865b965eae13cb8c8ed037fb8","first_seen":"2026-03-30T19:01:55.527327Z","last_seen":"2026-07-13T05:44:00.541019Z","times_seen":4465,"resource_available":true,"data":null}},"time_used":3317,"timings":{"blocked":0,"dns":33,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/assets/images/cream.png","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:49.611Z","timestamp":1783886389611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /assets/images/cream.png HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 18518\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-4856\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":18518,"size_decoded":18760,"mime_type":"image/png","magic":"PNG image data, 962 x 422, 8-bit/color RGBA, non-interlaced","md5":"2ea3e3a37612a1192933a376f814c753","sha1":"a980f6adf21e94fe11befe6af0e1e4ae50c6c1df","sha256":"f5cd3a23c9ee54713f51813d1f88bd8bcde4a36b0eb5d2c6736f341dc0da8cb8","sha512":"b8ceff5cfff90a5fb684ab735449083e0cdc09cd0476422d5374ee672905ebfa23853374871a8a9a88f22325678d8cc7a1bae534123472691d1aba0a9a9522cb","ssdeep":"384:ScakgWVrpXJfaWl0/cvLQBqTGcMvxsYFp2+ffffffffffffffnwFjgzTRmGQ6eMt:SjLIJJfeEjQkTGckPb2+fffffffffffD","tlshash":"c6823932ca5a9037f6118c79b822141349509c7bb964dd2a25cf789f7b4bffa0e70ca4","first_seen":"2025-08-12T03:45:29.177649Z","last_seen":"2026-07-12T20:01:33.205571Z","times_seen":5,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/css/style.css","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.732Z","timestamp":1783886388732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 230478\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-3844e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":230478,"size_decoded":230721,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"df22b5188e4cbabb73b123480f97343b","sha1":"dce4713b15a17ef3e4fbef80417928f2e12178cd","sha256":"b6bc767ae6b24fed5cb17aca54105f6a1a850e1487f6e19de0e5a72f7cc2af6c","sha512":"3ef3cb6862fc4698886b9515c743341cc59cc539835d7fa4ccbbf7b7b205c52e18ae4df35f02e96e9cc8e4bc4daec8f5175c66e2f1c5098c1bf23090e88415f1","ssdeep":"6144:laGggwrCIEzIE0IEU+O24nGMs7UPZ4oGSludkNHuOaF+QXgtLsmyCnD2KrkyZzoZ:laGggwrCIEzIE0IEU+O28GMs7UPZ4oGT","tlshash":"d73483da6ab11504341be678adda7b56b33cc013e61edcadb7d2612ccec52c88073b59","first_seen":"2025-08-12T03:58:21.814295Z","last_seen":"2026-07-12T20:01:33.206558Z","times_seen":4,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/js/jquery.min.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.742Z","timestamp":1783886388742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 87532\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-155ec\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87532,"size_decoded":87788,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"c9771cc3e90e18f5336eedbd0fffb2cf","sha1":"6ee8aaa3ac1f4e0ae18717a3fd26892e9f0e4cc5","sha256":"3e7501d15c3630e791c8b20392eb9dee31a9f65ce3efdde76cef5c710141ab24","sha512":"c503341fa3a7176fd10bd8cd7a5717c8faf971f87fa0c158f2d94fcd484ae3ed5031f49414dae833fb806b7365b5699c21d2e655376f69adb052b22f6f6982a7","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:sHNwcv9VBQpLl88SMBQ47GK7","tlshash":"8083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-13T22:05:06Z","last_seen":"2026-07-13T06:00:20.161959Z","times_seen":29737,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/js/swiper-bundle.min.js","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.745Z","timestamp":1783886388745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /js/swiper-bundle.min.js HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 242044\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-3b17c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":242044,"size_decoded":242301,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"4ae8b8fc2d0292caa387955580e5d47d","sha1":"7657910c6944758d10a3f81b3b0c9e2132c3fd03","sha256":"4f2c05e4e825d81a2e8172777d1d11d836014087d5a3ed8c2120ff704826bbac","sha512":"c9b8509f3594fb490221a22a14f41a5cf4cd91cd4e97a9694ee645d57a061d9cac6081c75e38a5e8ea2bd5bf8fd3be5d0418b55c87b7e40e7af7533d5e817b4e","ssdeep":"3072:ypCJW3sEmTh3qL8MIFbq3AdiKpzjv0hoyGzj3aD+FlGFc6ulZ6jT:c13sL3qL85qUiIzjv0hoyGzCy+c6iM","tlshash":"00345f0b52a2253891a3b13e4f5fc4216636940b7e09fda83e9c06589f1d83c57f9fe9","first_seen":"2024-08-20T14:59:40.379017Z","last_seen":"2026-07-12T20:01:33.211081Z","times_seen":52,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercatorgenius.net/images/project/about-1.jpg","fqdn":"mercatorgenius.net","domain":"mercatorgenius.net","tld":"net"},"ip":{"addr":"2.24.15.218","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercatorgenius.net/","date":"2026-07-12T19:59:48.780Z","timestamp":1783886388780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mercatorgenius.net","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:05:31 GMT","end":"Sat, 03 Oct 2026 15:05:30 GMT"},"fingerprint":{"sha1":"55:5A:D3:0E:2A:DE:B5:48:34:94:85:2A:26:60:E4:D4:5A:2B:88:29","sha256":"6E:55:46:C0:80:50:09:3E:03:07:84:DA:C2:89:A0:35:95:41:3E:05:0B:C7:C7:14:4B:60:4D:DD:73:6B:87:11"}}},"request":{"raw":"GET /images/project/about-1.jpg HTTP/1.1\r\nHost: mercatorgenius.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mercatorgenius.net/\r\nCookie: PHPSESSID=7259pdhu69epvanjea8dhte6qn\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.24.0 (Ubuntu)\r\ndate: Sun, 12 Jul 2026 19:59:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 47078\r\nlast-modified: Sun, 28 Dec 2025 01:42:05 GMT\r\netag: \"69508aed-b7e6\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":47078,"size_decoded":47321,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 950x700, components 3","md5":"123e89959c69d2f43487969a2cb05e02","sha1":"611cb78f8cfc49463e34d489efdf521b0c0eeadf","sha256":"3543fff299ed35d6d746fe9dfeb59f8c17b5bfca5009d9137b9d31db39e754ad","sha512":"ef744351232ae5632c62287bd560e261da2fd530bd1327ab1829dce45cc1e27455d4c629460a8cac2a6e614d293d83b630b32b4a8382caaf6f31d1e1045abc70","ssdeep":"768:1P7oQ3v5dLWMAqE/8TeWyJIpSOakjFokbKLTq/8FxwaSrb1lhgBdLFzyK4w7nDqi:1P1MDUTHy+ArkjFok8Tq/CxKrb1/gBdj","tlshash":"aa23020ac944c5f0b438b91da2f326b7bb29329a2f0deddbf5074e05d115ac51ea9c83","first_seen":"2023-11-21T15:12:42Z","last_seen":"2026-07-12T20:01:33.212162Z","times_seen":15,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"mercatorgenius.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
