{"report_id":"878dc03c-6e57-44bb-ade9-2f6b2cbc037b","version":6,"status":"done","tags":[],"date":"2026-02-14T01:41:29Z","url":{"schema":"https","addr":"erdehuui.com/","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"ip":{"addr":"89.34.219.167","port":0,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"erdehuui.com/","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"title":"Home page | eflow","dom":{"size":44788,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (998)","md5":"da34eaa39c41f03da0bb89416a37cedf","sha1":"6b78b692610ad687c12eaf9250ac74c398d8cd28","sha256":"bf399d7e4fefc1d8d5d347902d01f712cbddd689797becbc28c0a7bf222a8a15","sha512":"18b0b2dfb53e92b8276f93c2a863366a372c5d19620eb0e0bef333fdebba91b63e11e75161658278158c00fcac7b0f94611a959724a06b7c446c4a065d5fec08","ssdeep":"768:IY7Zc96ccLlJzA46v5VzD7TsW6FCtCWRohtQKDGvp92f4geK1zLfEeDuQ:3Zc96ccLlJzA46BVzgYohtQkGvp92f4m","tlshash":"7e13c51151f02227114356cd6fb9b71abf17f003da0a5644b39c4baaaf83ea19c273de","dom_hash":"domhashbc0192b9ecbbc33f2dc4ab1f80436cf8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"erdehuui.com/","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"ip":{"addr":"89.34.219.167","port":0,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T01:41:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"erdehuui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-08T22:25:44.117365Z","alert_count":0,"request_count":1,"received_data":90220,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-02-08T22:30:41.935977Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"erdehuui.com","ip":{"addr":"89.34.219.167","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-01-31","domain_rank":0,"first_seen":"2026-02-14T01:41:29.883947Z","last_seen":"2026-02-14T01:41:29.883947Z","alert_count":15,"request_count":15,"received_data":734218,"sent_data":6827,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-08T22:32:21.331091Z","alert_count":0,"request_count":2,"received_data":315910,"sent_data":915,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-07-26T07:43:07.804306Z","times_seen":29989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-07-26T04:17:08.529054Z","times_seen":337599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"erdehuui.com/","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"ip":{"addr":"89.34.219.167","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"03b478bc67a50e9df023c304508e0d49","sha1":"7b0ffc72d6f6447020697dcf5e68cb1c6650ec04","sha256":"83ef7c8bbbc2fc2875c937f1aadbaadc3ffce0d4ef41956e92000605f7e69c04","sha512":"74671697181ea387576a0186f4801c04280d8010fa7e9d02bde701a2fb84e17d9990705ceb236ba7c1fffee09911cf78e4277f490617f465be9ace345c95cd8b","ssdeep":"","tlshash":"86012d1a6372243502f7c57533dbab4c3670510756c4ce063e9dd9410f56980e0f57d4","size":805,"data":"","first_seen":"2026-02-13T11:33:42.871472Z","last_seen":"2026-02-14T01:41:34.821307Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"erdehuui.com/","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"ip":{"addr":"89.34.219.167","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"96c495941d4f3d8d4e235df05f078d0b","sha1":"281ba09fe92438d90d8731f7bf5da11cc791dbf5","sha256":"b0a7f74be9d2e1f544bc00e46100f03ba7a38c0c0e6ac1c3d7d35331d0db23cf","sha512":"ac876ac87275d2c5a19f3f0263abfdde2ead2e21a8333b403f24152815962a08c441d2c7abad8aedb38ffbb908189d0730e8ddc67394b43da9967f9cce5aeb23","ssdeep":"","tlshash":"cd41bd1598730820019ba52afbc78bc0b77da0833506d5473f0c89ab8f65e2a56e5bde","size":1973,"data":"","first_seen":"2026-02-13T11:33:42.87337Z","last_seen":"2026-02-14T01:41:34.822704Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"erdehuui.com/assets/images/logo-white.svg","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"ip":{"addr":"89.34.219.167","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://erdehuui.com/","date":"2026-02-14T01:41:07.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erdehuui.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:10:40 GMT","end":"Fri, 01 May 2026 14:10:39 GMT"},"fingerprint":{"sha1":"BE:C4:56:C7:C9:61:00:9A:3B:64:6C:3B:9C:FD:91:60:D3:C0:AA:D3","sha256":"FC:05:E4:D3:EE:55:55:E3:35:B6:E6:15:DC:B0:43:B7:10:B1:03:0B:69:BD:23:D0:9E:D5:37:C9:D0:E4:E8:AF"}}},"request":{"raw":"GET /assets/images/logo-white.svg HTTP/1.1\r\nHost: erdehuui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://erdehuui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 14 Feb 2026 01:41:07 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 7031\r\nLast-Modified: Tue, 30 Sep 2025 19:12:52 GMT\r\nConnection: keep-alive\r\nETag: \"68dc2bb4-1b77\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7031,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3acb87e478347e2a5f14607d0b661f3d","sha1":"73b4b7589a6ab05adaa9735a423c044bda549a22","sha256":"b165418709598a1126178c82f91cd49dab3d756a1632ace352e5fb776c8dd36c","sha512":"31332e32be261f683172b2c1834cc0ec78395ba9dbf5405e614f7964ffb6b299d862e8368a315d59a1e94d625cac74ae26e9f8bbb4265000a0689e5ba0ea8e2e","ssdeep":"96:TQh9ONZbG352aoZcxMmu/7Z6cmwKR6rO6gmSZTjpemQdOMtHdHBTI:Y9ONQ5vXx3m7IcUR6VgXXpyddN1I","tlshash":"69e185c427bcd3e5be03f3fbd61951e6aa4e58eaab29cd54c3581c2eb84e45c8d024d1","first_seen":"2026-02-13T11:33:42.855279Z","last_seen":"2026-02-14T01:41:34.783817Z","times_seen":2,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":77,"dns":5,"connect":28,"send":0,"wait":26,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"erdehuui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"erdehuui.com/assets/images/logo_0.svg","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"ip":{"addr":"89.34.219.167","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://erdehuui.com/","date":"2026-02-14T01:41:07.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erdehuui.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:10:40 GMT","end":"Fri, 01 May 2026 14:10:39 GMT"},"fingerprint":{"sha1":"BE:C4:56:C7:C9:61:00:9A:3B:64:6C:3B:9C:FD:91:60:D3:C0:AA:D3","sha256":"FC:05:E4:D3:EE:55:55:E3:35:B6:E6:15:DC:B0:43:B7:10:B1:03:0B:69:BD:23:D0:9E:D5:37:C9:D0:E4:E8:AF"}}},"request":{"raw":"GET /assets/images/logo_0.svg HTTP/1.1\r\nHost: erdehuui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://erdehuui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 14 Feb 2026 01:41:07 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 20269\r\nLast-Modified: Tue, 30 Sep 2025 19:12:50 GMT\r\nConnection: keep-alive\r\nETag: \"68dc2bb2-4f2d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20269,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"39f71a85001878693870b844191cb941","sha1":"c48fd1f59c1438b45108eb93e5fbd53fa2d42150","sha256":"82a4d95c3f9d418c720dbc9b40441944ca7d53488b0209de2fd352945e9e4b86","sha512":"c99b235a158a6afbaf4462473da81dcff57e32857a527830a0319e4e28444b39c3acdda611e6cc4be4af0cc929e638f78d83d794cd6bb09f0e31ea099d73e538","ssdeep":"384:FVzdwxikzA+o5jg0gVWICatSVv9tVgxw+cvefFTSSs11TvYdS71:Fxdwx4mS/","tlshash":"8f92c02203f9839cb64a2b7c4d7f091f7928ecd5a288b7c094a5dd05f5b1fe90a93d46","first_seen":"2026-02-13T11:33:42.821315Z","last_seen":"2026-02-14T01:41:34.786307Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"erdehuui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://erdehuui.com/","date":"2026-02-14T01:41:07.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://erdehuui.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:41:07 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 33186\r\ncf-ray: 9cd8dc83e88032fa-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"38df4-HxOZgbm0enZu+gphu3ito1HxbEs\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230033-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 159135\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=F2HTCWXY5QH%2Bg09AHsR9kcuXdCTXzAx0VH2QUEGita7J5xKAqZOmi%2BvBQVt2JYTTrNAL2d3je3r5yJMjFIs%2BQt2%2FUzG8xQRzSsUknB78Ovpf10D2yij0VCxEDygaFVubWpk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232948,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"cd822b7fd22c8a95a68470c795adea69","sha1":"1f139981b9b47a766efa0a61bb78ada351f16c4b","sha256":"3017df4a76db5f01c2b99b603d88b03106df13bcfe18e67b7c13c2341d3a67df","sha512":"6f641c4b94ac03cb59a1d703b464442e21afe5268a4a4d6f0c70da41175ad21b4f61667ad38ea5af7909e5b00041da55da6980ff8bf4c1017d33253afe90c802","ssdeep":"1536:m9YnIWbn98fhRfvO5wlP7Qy9P3CV98IsYRElV6V6pz600I41r:pnIw98fsV986I6V6pz600I41r","tlshash":"c63482d6f590317d9ca7c1499681fefd8a6fa985cb1209a6f003776807cabd30962dcc","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-07-26T08:34:09.399802Z","times_seen":18380,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":19,"dns":5,"connect":1,"send":0,"wait":10,"receive":2,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://erdehuui.com/","date":"2026-02-14T01:41:07.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://erdehuui.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:41:07 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 15248\r\ncf-ray: 9cd8dc83ed8cc272-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"620188b3-3b90\"\r\nlast-modified: Mon, 07 Feb 2022 21:01:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 75016\r\nexpires: Thu, 04 Feb 2027 01:41:07 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=syw56wggMviBhT0Dt25nGNvqrVCIhppUH19GFqSrFP0NjvXeRfRJtJIIlH8JBkX1QIHymRjpoC0Mhj1DrgeRVjTJjPvbZLA2m%2BFBXhYLvWz%2BYPhwjEkuYNXIvvJWToELRAV6ov5E\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89220,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65317)","md5":"dfb8fc36e102730fddf78b5494eb0035","sha1":"b513d9a39af2ee145f12c1ba03f9982960c47029","sha256":"8d321d88cb97fdedc3189506c25de9292c6e73a60ebaab496243346c6404480e","sha512":"f6eb006b5d0844ed078689e9c80215a63af294fbe80f088f52229d5a4e6ddcfca8958d5c39de03484d066beae2e00b93ae83d1e5a42f5d4f710baa8e3e7cc57a","ssdeep":"1536:iUMVM6MVMkMVM9MVMNMVMispxd1zJJ29Nll3IV7UHsR+z:Dd1NY95IV7UMR+z","tlshash":"8a93a9e9e04c05d56732c44baf99b37ca5b6f73cd5810da9f02f580c19d26a822c6f7a","first_seen":"2023-04-06T16:57:15Z","last_seen":"2026-07-26T05:42:16.564076Z","times_seen":13097,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":20,"dns":1,"connect":6,"send":0,"wait":15,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"erdehuui.com/assets/fonts/MyriadPro-Regular.woff","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"ip":{"addr":"89.34.219.167","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://erdehuui.com/","date":"2026-02-14T01:41:07.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erdehuui.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:10:40 GMT","end":"Fri, 01 May 2026 14:10:39 GMT"},"fingerprint":{"sha1":"BE:C4:56:C7:C9:61:00:9A:3B:64:6C:3B:9C:FD:91:60:D3:C0:AA:D3","sha256":"FC:05:E4:D3:EE:55:55:E3:35:B6:E6:15:DC:B0:43:B7:10:B1:03:0B:69:BD:23:D0:9E:D5:37:C9:D0:E4:E8:AF"}}},"request":{"raw":"GET /assets/fonts/MyriadPro-Regular.woff HTTP/1.1\r\nHost: erdehuui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://erdehuui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 14 Feb 2026 01:41:07 GMT\r\nContent-Type: font/woff\r\nContent-Length: 59880\r\nLast-Modified: Tue, 30 Sep 2025 19:12:52 GMT\r\nConnection: keep-alive\r\nETag: \"68dc2bb4-e9e8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59880,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 59880, version 0.0","md5":"7ebe7928b487a38c9c718e8e8cdda000","sha1":"bb439f9726c279e8b690d764c1c8199ee88f5e23","sha256":"3afa7bc686ee0f9ead0e5611ca82a3f2d40753b376579d7a74b455f4182e69bb","sha512":"03bbd7cca235ba28a77e6612fc4337b82e7c3f3e54349c2a98cc2b04997f9d46d8260da3811ba320023254f90882693a3e4dc85680cd32e6e09064372b2ea141","ssdeep":"1536:TTvS8BQo4prsO7Metc3LFzlIsfPlrqlpO8a0CT:T28oprsO7Metc3LFza+lrqDzGT","tlshash":"9e430210975466ebf19c92a1813f54d8eb29ef8fbdea4e7a7d7a192894011c40ef01cf","first_seen":"2026-02-13T11:33:42.861609Z","last_seen":"2026-02-14T01:41:34.791455Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"erdehuui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"erdehuui.com/assets/fonts/MyriadPro-SemiboldIt.woff","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"ip":{"addr":"89.34.219.167","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://erdehuui.com/","date":"2026-02-14T01:41:08.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erdehuui.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:10:40 GMT","end":"Fri, 01 May 2026 14:10:39 GMT"},"fingerprint":{"sha1":"BE:C4:56:C7:C9:61:00:9A:3B:64:6C:3B:9C:FD:91:60:D3:C0:AA:D3","sha256":"FC:05:E4:D3:EE:55:55:E3:35:B6:E6:15:DC:B0:43:B7:10:B1:03:0B:69:BD:23:D0:9E:D5:37:C9:D0:E4:E8:AF"}}},"request":{"raw":"GET /assets/fonts/MyriadPro-SemiboldIt.woff HTTP/1.1\r\nHost: erdehuui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://erdehuui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 14 Feb 2026 01:41:08 GMT\r\nContent-Type: font/woff\r\nContent-Length: 59808\r\nLast-Modified: Wed, 19 Nov 2025 00:08:24 GMT\r\nConnection: keep-alive\r\nETag: \"691d0a78-e9a0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59808,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 59808, version 0.0","md5":"6da32090d732d4227673885e7485a77c","sha1":"7b1ab93163038713515d1bb567f72660cf9e660a","sha256":"ce339533d63110ea60452edc27169affae38c2c6397ffb4c431f9c39300821a1","sha512":"42e59305b4c4279c446d29e7cccaacc508101c459a16f33b7ceca85edb1f63c0a87df2b2b3a3c86cbb67f1c7bc4895bc032b8a51fcdc83b9d810c416e78c8c34","ssdeep":"1536:9V7BnNWTTSdJTPo7s9Rmcrj8gLVdDk9Nl4xBYCT:L2TTUJTPwymchu9WnT","tlshash":"e843f175b0736563c9c37abd717618eaf4e6b2013dacda2e741ee415424b3f86215122","first_seen":"2026-02-13T11:33:42.832738Z","last_seen":"2026-02-14T01:41:34.794396Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"erdehuui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"erdehuui.com/assets/images/header-bg-2.png","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"ip":{"addr":"89.34.219.167","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://erdehuui.com/","date":"2026-02-14T01:41:08.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erdehuui.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:10:40 GMT","end":"Fri, 01 May 2026 14:10:39 GMT"},"fingerprint":{"sha1":"BE:C4:56:C7:C9:61:00:9A:3B:64:6C:3B:9C:FD:91:60:D3:C0:AA:D3","sha256":"FC:05:E4:D3:EE:55:55:E3:35:B6:E6:15:DC:B0:43:B7:10:B1:03:0B:69:BD:23:D0:9E:D5:37:C9:D0:E4:E8:AF"}}},"request":{"raw":"GET /assets/images/header-bg-2.png HTTP/1.1\r\nHost: erdehuui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://erdehuui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 14 Feb 2026 01:41:08 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 30 Sep 2025 19:12:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68dc2bb2-a194\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41364,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 1300, 8-bit/color RGBA, non-interlaced","md5":"0d8a74003e4ef3bb6e661f373ebcb087","sha1":"25b14c74636eb7397ab9c8866cbe015b7715d4a5","sha256":"45b908a664ac1c76567ad6c8369ee43ce7bc0bd49dc251e04c8806a0db47386d","sha512":"18b8cf94fa0a478cc9802a41ded752eebdfaf0d4933c3c27e978da0279d9f3a72043f1e8669649f2d5d7b37541a32c4102cc86bb79cdf05522ae53ffcc04b71a","ssdeep":"768:0Vlv6c72+0pLEraFnC+w8U1KHM4uBh6yjfVTvCPNiKQctmOJA+IAM:0Vr4K0nCVKHXS6QWQKrvOz","tlshash":"2b03c0a0a4734be2efd892b380332b9157f6155098b2cb6f9311b2459df771abe59c80","first_seen":"2026-02-13T11:33:42.836853Z","last_seen":"2026-02-14T01:41:34.797353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"erdehuui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"erdehuui.com/assets/images/header-bg-3.png","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"ip":{"addr":"89.34.219.167","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://erdehuui.com/","date":"2026-02-14T01:41:08.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erdehuui.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:10:40 GMT","end":"Fri, 01 May 2026 14:10:39 GMT"},"fingerprint":{"sha1":"BE:C4:56:C7:C9:61:00:9A:3B:64:6C:3B:9C:FD:91:60:D3:C0:AA:D3","sha256":"FC:05:E4:D3:EE:55:55:E3:35:B6:E6:15:DC:B0:43:B7:10:B1:03:0B:69:BD:23:D0:9E:D5:37:C9:D0:E4:E8:AF"}}},"request":{"raw":"GET /assets/images/header-bg-3.png HTTP/1.1\r\nHost: erdehuui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://erdehuui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 14 Feb 2026 01:41:08 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 30 Sep 2025 19:12:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68dc2bb2-da52\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 1300, 8-bit/color RGBA, non-interlaced","md5":"9716cbe0ace465fa9d7ebd73603f4ded","sha1":"2b9c53eb7efd3e31d2e1732c684c2218f35576d7","sha256":"3d86ba61e57caf6962766f1ccdf8aabae557ca05ab4d6bac7a31c6cfae9914c1","sha512":"df82c89ce8ecf3786d81fc5b6f30a210026b2eac69cc3bd68b7e22719f1109df632f5bd16be875c2adfcd57f868150537cbe903768f4e3b5468cfd94c12b3533","ssdeep":"768:hR+n7x95BOdOpdMGJTcON/O/SwAF0L69PIgn868ZyewQ3B/vi5qb:GNi2dMGJt/Pr9PIohCytQdvi5w","tlshash":"2943e1c8a5b4c396ccab8372558b1f357bb68ad3c2e11043c7617508eed5f04ada993a","first_seen":"2026-02-13T11:33:42.842526Z","last_seen":"2026-02-14T01:41:34.800001Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"erdehuui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"erdehuui.com/assets/images/q.png","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"ip":{"addr":"89.34.219.167","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://erdehuui.com/","date":"2026-02-14T01:41:08.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erdehuui.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:10:40 GMT","end":"Fri, 01 May 2026 14:10:39 GMT"},"fingerprint":{"sha1":"BE:C4:56:C7:C9:61:00:9A:3B:64:6C:3B:9C:FD:91:60:D3:C0:AA:D3","sha256":"FC:05:E4:D3:EE:55:55:E3:35:B6:E6:15:DC:B0:43:B7:10:B1:03:0B:69:BD:23:D0:9E:D5:37:C9:D0:E4:E8:AF"}}},"request":{"raw":"GET /assets/images/q.png HTTP/1.1\r\nHost: erdehuui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://erdehuui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 14 Feb 2026 01:41:08 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 30 Sep 2025 19:12:52 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68dc2bb4-6b7\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1719,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"a8c86b0ce5196cd06a6718957ae1b339","sha1":"566ab665acb25177c31b242817f222c0984b0f6d","sha256":"4e17dbdd9adb9b4b05dd175506c2d89e77e079507280d7fc2770cf1c5ac3d9e6","sha512":"a319ae131aa8f50fb36b7ae73bb83170ecaa02270ddfdabf889ebf3a0c7c6b4fbdceebb9457f5e152daeb51f6f4f04c34959ea973b2528ece06b4a498177c4cd","ssdeep":"","tlshash":"d7313a37a3fd76802ea40a2f3880b488f98cd14c65f9702042712d4aef68a74559f2ff","first_seen":"2026-02-13T11:33:42.85957Z","last_seen":"2026-02-14T01:41:34.802431Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"erdehuui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://erdehuui.com/","date":"2026-02-14T01:41:07.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://erdehuui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:41:07 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 24464\r\ncf-ray: 9cd8dc83f89532fa-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"13b51-3cbp6tbRaukjc5nOQejBYgzFnDY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220144-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 11433\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4Jyp0K%2Bdn%2F524fCODYwdTBkgpFqxhZ%2F9dDMOG4aFBi8ffy9NCfV%2FqI%2FQPqxp5v3ItyejBe417B6B%2FS%2B99jxPK0B9mKb%2Fqh6NDXAPkOzs7bwqcgrx0%2Fwz21V2tvt2Q95PCZY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-07-26T07:43:07.804306Z","times_seen":29989,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":11,"dns":4,"connect":1,"send":0,"wait":11,"receive":1,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"erdehuui.com/assets/css/1.css","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"ip":{"addr":"89.34.219.167","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://erdehuui.com/","date":"2026-02-14T01:41:07.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erdehuui.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:10:40 GMT","end":"Fri, 01 May 2026 14:10:39 GMT"},"fingerprint":{"sha1":"BE:C4:56:C7:C9:61:00:9A:3B:64:6C:3B:9C:FD:91:60:D3:C0:AA:D3","sha256":"FC:05:E4:D3:EE:55:55:E3:35:B6:E6:15:DC:B0:43:B7:10:B1:03:0B:69:BD:23:D0:9E:D5:37:C9:D0:E4:E8:AF"}}},"request":{"raw":"GET /assets/css/1.css HTTP/1.1\r\nHost: erdehuui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://erdehuui.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 14 Feb 2026 01:41:07 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 19 Nov 2025 00:25:54 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"691d0e92-492f2\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":299762,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (33758)","md5":"4516764083ce244087534edd6e77bdcd","sha1":"af2b38f3fba60feb76b1f6639c68cee40b925f8b","sha256":"b796f34099e1fd720a005abfa68f65b27a8d24b7f427b5fa0bcdc66d888d5fc8","sha512":"5324c1b9bdcf4acfec2f924a6b87f979d34baa15cd09d76942cb5bfd8a00accf428c43c0c4173398c353f9a9f08920b505f41f733519f82e7928e628b00b3e6d","ssdeep":"1536:WSBQc5UdObN98fVtIv0rLlzjdKdsYiVbZz600I4J4KfPf65f6E6BMT6/gCm/a/KJ:WS2OUE98fvVbZz600I4kb","tlshash":"a75484abf091325c9457890956d57fbd4a7f9419db020afaf0137b684bcb7c309a3a8c","first_seen":"2026-02-13T11:33:42.864835Z","last_seen":"2026-02-14T01:41:34.805571Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"erdehuui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://erdehuui.com/","date":"2026-02-14T01:41:07.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://erdehuui.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://erdehuui.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:41:07 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 22 Jan 2026 17:06:04 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd8dc840f7d0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-07-26T04:17:08.529054Z","times_seen":337599,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":4,"connect":3,"send":0,"wait":14,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"erdehuui.com/assets/fonts/icomoon.woff","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"ip":{"addr":"89.34.219.167","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://erdehuui.com/","date":"2026-02-14T01:41:07.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erdehuui.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:10:40 GMT","end":"Fri, 01 May 2026 14:10:39 GMT"},"fingerprint":{"sha1":"BE:C4:56:C7:C9:61:00:9A:3B:64:6C:3B:9C:FD:91:60:D3:C0:AA:D3","sha256":"FC:05:E4:D3:EE:55:55:E3:35:B6:E6:15:DC:B0:43:B7:10:B1:03:0B:69:BD:23:D0:9E:D5:37:C9:D0:E4:E8:AF"}}},"request":{"raw":"GET /assets/fonts/icomoon.woff HTTP/1.1\r\nHost: erdehuui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://erdehuui.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 14 Feb 2026 01:41:07 GMT\r\nContent-Type: font/woff\r\nContent-Length: 9660\r\nLast-Modified: Tue, 30 Sep 2025 19:12:50 GMT\r\nConnection: keep-alive\r\nETag: \"68dc2bb2-25bc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9660,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 9660, version 1.0","md5":"e50ab9db450d3e1417b4ec28a9c79a99","sha1":"fb0d0b9573d27ff63ee6d14bace973689c1f11f4","sha256":"4a387357e2226bfdb66d0e76efe0e1dbf8736194042f82c4668f4f46378a5fc5","sha512":"9cbff03510f7b93502c1148886b224d0d49fffe7a92c054814087a7e4c7bc73ca088e81ff9bb56d9d81c9904619def3bcfbff63606221eb77f6bc3344a06e596","ssdeep":"192:rybJN5E1CQPHSRCK7VbtfHvPXxKxIg6q7ZD4kENNhbHui+/lPV2K:2bJLIhy0UVbtfvPXxiIg6q7F4rNNhbYL","tlshash":"7412082b967aeecec925c639085352349ef6e801c139d3cb60d92cc5291acfc4e34b1d","first_seen":"2026-02-13T11:33:42.869605Z","last_seen":"2026-02-14T01:41:34.808852Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"erdehuui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"erdehuui.com/cdn-cgi/rum?","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"ip":{"addr":"89.34.219.167","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://erdehuui.com/","date":"2026-02-14T01:41:08.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erdehuui.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:10:40 GMT","end":"Fri, 01 May 2026 14:10:39 GMT"},"fingerprint":{"sha1":"BE:C4:56:C7:C9:61:00:9A:3B:64:6C:3B:9C:FD:91:60:D3:C0:AA:D3","sha256":"FC:05:E4:D3:EE:55:55:E3:35:B6:E6:15:DC:B0:43:B7:10:B1:03:0B:69:BD:23:D0:9E:D5:37:C9:D0:E4:E8:AF"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: erdehuui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1008\r\nOrigin: https://erdehuui.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://erdehuui.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1008,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":458,\"startTime\":1771033267537,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"009741e9-692f-457f-81c0-42cf41cb9bd9\",\"location\":\"https://erdehuui.com/\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":461,\"domContentLoadedEventStart\":498,\"domContentLoadedEventEnd\":506,\"domComplete\":548,\"loadEventStart\":548,\"loadEventEnd\":549,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"http/1.1\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":0,\"domainLookupStart\":11,\"domainLookupEnd\":26,\"connectStart\":27,\"connectEnd\":85,\"secureConnectionStart\":55,\"requestStart\":85,\"responseStart\":110,\"responseEnd\":116,\"transferSize\":8597,\"encodedBodySize\":8285,\"decodedBodySize\":45559,\"name\":\"https://erdehuui.com/\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":549},\"siteToken\":\"af76c7a0289d47b380625413b616c4c5\",\"st\":2}"}},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nDate: Sat, 14 Feb 2026 01:41:08 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 275\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":275,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"e3e2f44ea310a1a5a5ae80d3854b9036","sha1":"35997ef58d3848bcc6626e418f55b3b58989388a","sha256":"6e66b6dfafcee453604a8d6a31e6bde7930844e32da7caffd65a18d176b8a496","sha512":"30344d2a4f48e8120954b52f53761bd7aac15cf956510a474e4f92a90d20c598c6f6ff156b186ed5d0791e6b20d99dee3e6fa11aa53f743504433dfead6a1c16","ssdeep":"","tlshash":"1cd02b9e5043739b4911156039c115d2268d13e6a47a95e82dc6d48752a863ecd9aa8c","first_seen":"2026-02-13T11:33:42.858242Z","last_seen":"2026-02-14T01:41:34.810948Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"erdehuui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"erdehuui.com/","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"ip":{"addr":"89.34.219.167","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T01:41:07.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erdehuui.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:10:40 GMT","end":"Fri, 01 May 2026 14:10:39 GMT"},"fingerprint":{"sha1":"BE:C4:56:C7:C9:61:00:9A:3B:64:6C:3B:9C:FD:91:60:D3:C0:AA:D3","sha256":"FC:05:E4:D3:EE:55:55:E3:35:B6:E6:15:DC:B0:43:B7:10:B1:03:0B:69:BD:23:D0:9E:D5:37:C9:D0:E4:E8:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: erdehuui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 14 Feb 2026 01:41:07 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 8285\r\nConnection: keep-alive\r\nLast-Modified: Wed, 19 Nov 2025 00:13:10 GMT\r\nETag: \"b1f7-643e772099180-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap:5.3.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":45559,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (998), with CRLF line terminators","md5":"5160eaad13f9b27bd0dcce6f02d16476","sha1":"3a59c6b9e25290dc6e6a36df5f2f7cea67f4d574","sha256":"f39757429afc9d28158be35a90937c8c2242c75f99bc0773742e8a34af84acb2","sha512":"d679af9c3b1299ff95e52e62abf649599def11e3ed6332ae51c5127b823a8fd1dfd14e868d4bd2353458c5454a26d0bfc9442da7c4a469d3260fb94f5d8c32bf","ssdeep":"768:QEysIwoCMlpbAihek/9PkSkKoJCqTHscwPuA4GvpVPvuAYpEWOC3gmLe:+sIwoCMlpbAihB/9eucwPuhGvpVPvuA9","tlshash":"bc13921051c12227113346ccaf65b799ff57e143db060285b2dd5babafb3e508827aee","first_seen":"2026-02-13T11:33:42.80198Z","last_seen":"2026-02-14T01:41:34.812643Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":69,"dns":15,"connect":25,"send":0,"wait":30,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"erdehuui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"erdehuui.com/assets/css/f1.css","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"ip":{"addr":"89.34.219.167","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://erdehuui.com/","date":"2026-02-14T01:41:07.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erdehuui.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:10:40 GMT","end":"Fri, 01 May 2026 14:10:39 GMT"},"fingerprint":{"sha1":"BE:C4:56:C7:C9:61:00:9A:3B:64:6C:3B:9C:FD:91:60:D3:C0:AA:D3","sha256":"FC:05:E4:D3:EE:55:55:E3:35:B6:E6:15:DC:B0:43:B7:10:B1:03:0B:69:BD:23:D0:9E:D5:37:C9:D0:E4:E8:AF"}}},"request":{"raw":"GET /assets/css/f1.css HTTP/1.1\r\nHost: erdehuui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://erdehuui.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 14 Feb 2026 01:41:07 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 19 Nov 2025 00:26:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"691d0eaa-b943\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47427,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1044)","md5":"bb4500634707d7a7c40909618ce36c00","sha1":"24ec393cc3add1baaa20b8aac2cf7a5e9d9e81f6","sha256":"f0e7854b7c4537be2454ea386abea51f0fbe411937b86feac36b0bc76b46ed17","sha512":"3ec5b95936945241c5154186f9596e069fd6ee32e28603b1eb2e938a7c99da944cab3a8dac549593227c305c1bb0b41cfa7036d622d59631eff0d4d34824c0ee","ssdeep":"768:RaFivVxmqq96DtcJNzkL9P7v0Fnu7jCYfygIFhAHuHXLnQhG:AFitxmL96RcJNI9zv0Ju7jaLnz","tlshash":"1223c936e0943b1c501bcc4db6da6b789e3e8479a90605fee4736a18c7cb2d60571ece","first_seen":"2026-02-13T11:33:42.85268Z","last_seen":"2026-02-14T01:41:34.814417Z","times_seen":2,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":56,"dns":1,"connect":25,"send":0,"wait":25,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"erdehuui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"erdehuui.com/assets/css/menu.css","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"ip":{"addr":"89.34.219.167","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://erdehuui.com/","date":"2026-02-14T01:41:07.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erdehuui.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:10:40 GMT","end":"Fri, 01 May 2026 14:10:39 GMT"},"fingerprint":{"sha1":"BE:C4:56:C7:C9:61:00:9A:3B:64:6C:3B:9C:FD:91:60:D3:C0:AA:D3","sha256":"FC:05:E4:D3:EE:55:55:E3:35:B6:E6:15:DC:B0:43:B7:10:B1:03:0B:69:BD:23:D0:9E:D5:37:C9:D0:E4:E8:AF"}}},"request":{"raw":"GET /assets/css/menu.css HTTP/1.1\r\nHost: erdehuui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://erdehuui.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 14 Feb 2026 01:41:07 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 19 Nov 2025 00:26:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"691d0eaa-cbc8\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52168,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1532)","md5":"a5af25fee51c8c690edd2a7c464defac","sha1":"f56e67b5d5f0e233d3e0146ae1d457e567ca86e9","sha256":"71cd4541254b771e5c6118e4b3c17623c64360199209fd829e73e5935e6a9e15","sha512":"879abf1da87045f748021b6686b025e31cea3fb0fedfd45b6422ddbf0ed3b0e8b7d4e28b9ab1f23b7d5c90e2e660268c5aaa1beff5f131d7100dcfdb48b3fde0","ssdeep":"768:RaFivVxmqq96DtcJNzkL9P7v0Fnu7vyi4k4mtQM:AFitxmL96RcJNI9zv0Ju7vHtQM","tlshash":"af33a866e0d03b6c081bcd18a7da3bbcca2d8175ae4505fef5536e24c3cb6e21561d8a","first_seen":"2026-02-13T11:33:42.866097Z","last_seen":"2026-02-14T01:41:34.816133Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":54,"dns":1,"connect":24,"send":0,"wait":25,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"erdehuui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"erdehuui.com/assets/images/logo1.svg","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"ip":{"addr":"89.34.219.167","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://erdehuui.com/","date":"2026-02-14T01:41:07.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erdehuui.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:10:40 GMT","end":"Fri, 01 May 2026 14:10:39 GMT"},"fingerprint":{"sha1":"BE:C4:56:C7:C9:61:00:9A:3B:64:6C:3B:9C:FD:91:60:D3:C0:AA:D3","sha256":"FC:05:E4:D3:EE:55:55:E3:35:B6:E6:15:DC:B0:43:B7:10:B1:03:0B:69:BD:23:D0:9E:D5:37:C9:D0:E4:E8:AF"}}},"request":{"raw":"GET /assets/images/logo1.svg HTTP/1.1\r\nHost: erdehuui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://erdehuui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 14 Feb 2026 01:41:07 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 6737\r\nLast-Modified: Tue, 30 Sep 2025 19:12:52 GMT\r\nConnection: keep-alive\r\nETag: \"68dc2bb4-1a51\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6737,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c99c32dfd492dad6dcffd3e326e1ed7a","sha1":"986914842c644d148661d59a86f6950610b69267","sha256":"3bc6dcda2a41dce82e0dc19434fbdd8895e7d50405842816d4d2c2c5d218bf56","sha512":"533667b9282e1281ee76a467427ecb1e17970704219e0455c66ff5505ff19db0e3b8a84ab5bb7ed188e0697669d8d4d9a271a7ba490fe14c4899e8fcbcd59b3e","ssdeep":"96:tg3iT+MKiwtC3avHWLNmETvdyQ1tz1FNF7r+MTaXqUe0FvKnTEFhA0qGkWUQyQrT:KdMKLC3OCHTw0flr++yKpRKNWcJ76a","tlshash":"abd1a8c8677551e0f44af7e9ce2b76febe2b30fa66118840c3592e05b85162ecd56cc4","first_seen":"2026-02-13T11:33:42.806407Z","last_seen":"2026-02-14T01:41:34.817801Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"erdehuui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"erdehuui.com/assets/images/header-bg-1.png","fqdn":"erdehuui.com","domain":"erdehuui.com","tld":"com"},"ip":{"addr":"89.34.219.167","port":443,"asn":212042,"as":"Istqrar for Servers Services Ltd","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://erdehuui.com/","date":"2026-02-14T01:41:07.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"erdehuui.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:10:40 GMT","end":"Fri, 01 May 2026 14:10:39 GMT"},"fingerprint":{"sha1":"BE:C4:56:C7:C9:61:00:9A:3B:64:6C:3B:9C:FD:91:60:D3:C0:AA:D3","sha256":"FC:05:E4:D3:EE:55:55:E3:35:B6:E6:15:DC:B0:43:B7:10:B1:03:0B:69:BD:23:D0:9E:D5:37:C9:D0:E4:E8:AF"}}},"request":{"raw":"GET /assets/images/header-bg-1.png HTTP/1.1\r\nHost: erdehuui.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://erdehuui.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Sat, 14 Feb 2026 01:41:07 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 30 Sep 2025 19:12:50 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68dc2bb2-59c4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22980,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 1300, 8-bit/color RGBA, non-interlaced","md5":"942177069348fee498e49fdad21e5f5d","sha1":"16f5069da5ed8d1e0ff31dc5d34da202853072d0","sha256":"b3700176183bca3da134ccd065645849bbcba6feb274ab3e4268b63699ecf3db","sha512":"b503c7d7971550330a7f01828897e8002a58f486d9b8ee762e204652a58fddf8128fca2f27e297aeea54ffd583c025dd1232751341fba30a787a9222d73e36de","ssdeep":"384:a6V/76ttZ+VkcGdZOKscXISsPU4Cj30kwyZOdqKVH54UWTX:a6Vz6/Zekhf5susPJCjEwOpBWj","tlshash":"1aa28f71a4826a98cd4189f0966f0f15be220c69c425174e1771f9749dfe306bc8b6de","first_seen":"2026-02-13T11:33:42.860601Z","last_seen":"2026-02-14T01:41:34.819781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":78,"dns":4,"connect":28,"send":0,"wait":31,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"erdehuui.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
