{"report_id":"8afae0f8-be92-433c-ac08-826b661152fc","version":6,"status":"done","tags":[],"date":"2026-01-16T02:52:12Z","url":{"schema":"http","addr":"www.exoticdrc.com/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.exoticdrc.com/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"title":"Exotic DRC | Liste des escortes en RDC, Kinshasa et plus","dom":{"size":291190,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30451)","md5":"e03893df248d734565c5db52aba8016a","sha1":"f5f736c542a057bd3e13f94645fd35abae429535","sha256":"2b03e24e946a392de5f03c64f7b8dc189a3cb8ea58ab7795ac5bb9b607111dfd","sha512":"e2f90c3fc2fe70ce7424bf49a8e9304fade19e5c089b034e79872bc9c11f0bbc226c5b2c03849b40c5c5869243ca0c0ed698145391a8ddc4bbe03544faca9ba3","ssdeep":"3072:WJzAl79G/lHsVAIYN5clT9NI3xqugxMsS66PsPZ:ilHsWIGcJ9NkqugH","tlshash":"d954a67289e2d42327b6dcd52560ab0d77d3820bdd454a81f2bc83c8afc7e5269e3359","dom_hash":"domhasheea0f8c3b9e253e269d2907db6f35dbf","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.exoticdrc.com/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-20T02:52:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-01-11T22:30:43.521621Z","alert_count":0,"request_count":4,"received_data":3344,"sent_data":4053,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-01-11T22:24:29.090978Z","alert_count":0,"request_count":2,"received_data":110203,"sent_data":1044,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"exotic-ads.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-08-14","domain_rank":4759251,"first_seen":"2026-01-16T02:52:15.054117Z","last_seen":"2026-01-16T02:52:15.054117Z","alert_count":0,"request_count":2,"received_data":1093,"sent_data":880,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-01-11T22:24:52.731308Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":749,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-11T22:14:24.773767Z","alert_count":0,"request_count":4,"received_data":174896,"sent_data":2234,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-11T22:17:18.570046Z","alert_count":0,"request_count":1,"received_data":18728,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.exoticdrc.com","ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-10-06","domain_rank":2634926,"first_seen":"2025-10-21T11:08:22.936404Z","last_seen":"2025-10-21T11:08:22.936404Z","alert_count":70,"request_count":70,"received_data":4389598,"sent_data":47960,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Yoast SEO:26.7","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Performance Lab:4.0.1","description":"Performance plugin from the WordPress Performance Team, which is a collection of standalone performance modules.","website":"https://wordpress.org/plugins/performance-lab/","common_platform_enumeration":"","icon":"Performance Lab.svg","categories":["WordPress plugins","Performance"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Yoast SEO Premium:26.6","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"analytics.webpushr.com","ip":{"addr":"167.71.54.9","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"domain_registered":"2019-02-25","domain_rank":356424,"first_seen":"2020-10-09T06:13:23Z","last_seen":"2026-01-11T16:23:49.769846Z","alert_count":0,"request_count":1,"received_data":475,"sent_data":524,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.14.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-11T22:30:04.050705Z","alert_count":0,"request_count":1,"received_data":80650,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.webpushr.com","ip":{"addr":"167.172.175.225","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"domain_registered":"2019-02-25","domain_rank":272513,"first_seen":"2019-12-22T10:15:57Z","last_seen":"2026-01-12T01:26:55.475948Z","alert_count":0,"request_count":1,"received_data":44786,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.16.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.exoticdrc.com/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f69304faa19a9a335eb4034cbc2f76cd","sha1":"9868562daeb9b0011f5b9dd77c0c436da12a52f5","sha256":"84fcbc178e6737b5beadc04580995ee3a224a15870ef8e259e1730b006db3de2","sha512":"5b63f10ae6bb2c76f3e10103f4b9db1133ec9da61d7e1da825af364017f852b8987c955e68bf7f8da3dde28e9484c0bdd8b24f6328fd1e7d13a3d71259b8e86e","ssdeep":"","tlshash":"a5b02b5430623132348310b31027a90d0d530000110c00240360455d9fbe34f2c4b4cc","size":127,"data":"","first_seen":"2026-01-16T02:52:20.358662Z","last_seen":"2026-01-16T02:52:20.358662Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e88a2b8e8d041c4180b041a5ca9406a","sha1":"3f942279305400d1b84db381166526f6f22b5517","sha256":"829bf7fb5ba2d9144d335e20e6fe97223ca61ab319c6b6d5c54cdd4de2975251","sha512":"1977b9879fa6ee87bad760813e7dd74144e0e985d1bd124c2dcb82b51e7e8a2eed275f355b6d84c0d435597667c9e105117c54864b8a117368be48b12321dbba","ssdeep":"","tlshash":"bce07dd8352525b921b62d3573bb822831531a5824080f72dfface456c24a8b4caa95c","size":338,"data":"","first_seen":"2025-06-09T21:05:36.836585Z","last_seen":"2026-06-12T09:52:55.430396Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/js/checkator.jquery.js?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ad4a4549e274affe7ef3fb0f4124f4e","sha1":"b40031f245067f1ea7bf5807f4312718911ae4d2","sha256":"4314a2b5f199ef8895e3db80c8baf9c4adf4805aeaf43bf3fca120ed67082e61","sha512":"6812a383ed97c532524d4d3623045a1cfc1455b549122c1674cd2f792b5c248456ef734db24917e97d1d7164970a653ea782fdcd95b9a82ba6c92a50c618d4f3","ssdeep":"","tlshash":"c87173b6b35c160e45bf60e715af21cdb23f80b626128d1aacfce5180d76e74b3a3915","size":3607,"data":"","first_seen":"2023-03-12T23:01:01Z","last_seen":"2026-06-14T09:21:40.256473Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/plugins/advanced-ads/admin/assets/js/advertisement.js?ver=2.0.16","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b645b5402a5096f324a6b37d0a3259c0","sha1":"3741b4d49e4ab0034f34fdb9ce5afaf96f940b47","sha256":"2878e3b9f4818d49affee273031a409b8d24e264b58eb3f4d9b0d1195a6d2ff1","sha512":"a86a7ab81b7c02c027c34b17282d0a4150649a47534b73c86d6ea7d6109584a5f8594063227900d99d84e5b9f26b54a65654be2b75aa33b20c0a5f8700ee50fe","ssdeep":"","tlshash":"49900210815501d9b02041511d06e4e2e8904460c7423de28194400c500a540005005a","size":39,"data":"","first_seen":"2024-05-04T21:47:36Z","last_seen":"2026-06-15T00:01:24.178507Z","times_seen":10223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-15T01:31:12.081579Z","times_seen":907239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d7432543e755e52d556c531ec9886f4","sha1":"d5a3e53a8fdbcd624fdf53ef89dc759ad9734dd0","sha256":"3f0e896a7089d518e75c207fb23eb3af295005b900d2ad7ee86e898afa6b3739","sha512":"bd14c3e23c13b24760c20acbdd842757adf3f2af544e51b90c4851ca2ae2866f407908096837da127c884fb916fa17996c6fd38a661f242e250b0f393500ca8e","ssdeep":"","tlshash":"36e02074660a781a6821e0600f5ff763b5d591c0f30d14c3524cd558e84cc1360dddc7","size":344,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-06-14T04:10:02.255446Z","times_seen":16881,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/js/js.cookie.js?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0be1b88e9ad7dd497850d0cb99729314","sha1":"6135d1bb45d8181ce5fbe1f350cf7d2a7263b1f3","sha256":"bc88c4ef850a7f318377a086eddfed2cbb2f413896e2bffbf48dda0e5213f2c7","sha512":"b184e9f33bb73d07bc03fed5a4ec69120a75c4b001e116ee1f36c8365bfe03d4e55f82ef8749c549009883e82a487c821c1f5402f76cb505dd64ca22c1794c73","ssdeep":"","tlshash":"758135b0bb8d35ab0e0e21145b1f60cd927ce43a085949f6ec9df1321468c2e937ad6e","size":3920,"data":"","first_seen":"2025-12-06T11:52:48.789144Z","last_seen":"2026-06-05T07:01:39.691495Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/js/jquery.mobile.custom.min.js?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d3d3a48b2a0686a92d8e0c14c4d0cf7","sha1":"94505755446525a0b482386fb17954cd965fc4fe","sha256":"43aabee7020e85987ba5cd36787d6543ac0d829e27ac2d51a142b0d97368fdae","sha512":"41a11eb53e2a451ea91e995af4f96ab56874295898c31c61570c81a7bd998f8a1a2d8efff840d83a80b11af0f7fad16e2b7b9f3fb00fcd0c2c97ffc00ecb3ab7","ssdeep":"192:GaLtB8pfbHh5zln2Xa/Yl+Nza7Grui62y2+0TK2IJ2ruTs:GtxB557/Yl+Nza7Grui6ph0TKXJkuTs","tlshash":"b7f1814af70134ab36db236be20f4a45b1b20069594f5450b43adce0ae3813d1b67dad","size":7750,"data":"","first_seen":"2023-03-08T01:17:07Z","last_seen":"2026-06-14T09:21:40.325137Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/nta-js-tele-global-js-extra","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"78737ebe0b3ae04cc8b60848447adfc1","sha1":"3fae8b127ad92a03d1f3ff254b4fb61004c45876","sha256":"2feb910876d2e0370e9ea0765a1f8fd0df7c137c8df5e2669e8a0137275ace50","sha512":"2fd202f14cd1350b8227d08ccb612f76f00bbb08366edda997e7cc3050f3595e89948e9428049a4b832da457d89d03f1d91bb22b62b6bd9b532964749be7dc8d","ssdeep":"12:eL2OCSrTeXF/ziqdeJQyaBdwALm+u9Cp4ldk0YuBZ1DX8OeCvJRAlbyEZpgdzJ:xOnT+FmqdWQyCzL69z87Oz8xCmmVdzJ","tlshash":"24a19e06c796cbb37a55483cdd31b65985a8f4dbf0a8a0c5afbf4414e81caf4a48c35d","size":5033,"data":"","first_seen":"2026-01-16T02:52:20.36134Z","last_seen":"2026-01-16T02:52:20.36134Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/plugins/ninjateam-telegram/assets/js/telegram-button.js?ver=1.2","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a99a88760845d1364daafa7b8a2ae9b3","sha1":"8ac0d598ddcf5f0564c4ec2ae671e5affddf40fb","sha256":"7924bb0752c5c57e74bb2e758d3dbdfc91785894e0f213fe4f149c191569cb03","sha512":"d5c36880f5ddee4fe3ca19d31d5920e79178123e39a4fcd389106dfc1b148d05e2388252535fd4d71ca4206157ef774cd2c605645618deb98d6a0fb40c05073c","ssdeep":"96:S/RNS/2hLIXUl9+mf+VY+Pslv+ANpI5LmMpKiSP/jB+0v5jQQqORU6g9mQLhIZtr:S/v8wl1BPbI05QQqOR3mIzSjGJC665A","tlshash":"c1d1d75e2f4570e48a46fdfb2e2b80d1e924accec3c95619f604b2ecfd6810d95097a3","size":6415,"data":"","first_seen":"2026-01-16T02:52:20.27156Z","last_seen":"2026-01-16T02:52:20.27156Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/metrics/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c30e4730c906946313684bd4ffc72803","sha1":"a4b796c9b0ff6883c4a49e544c6b0b13ccd9e920","sha256":"967c6c826caebe3e0adbf86d0d2940252dc7ea56709970cde11b014f33ec12ee","sha512":"e29117fead4cd19cd8ee4320195cb620a5d7104b2616ac4e31048b6b2cd72800eca6e37658b82640b94061f977ec47d9bf14b4af127436b22153539855148380","ssdeep":"6144:KkuoRn5Y8GvjHjUG6ozDfc1Ygdx5X8IGym:+qC8wjF5MX8J","tlshash":"967407cdb3d6742683a3a474403f118bb27b6992f44cd895f186d8d42e74aaa4237f7c","size":353665,"data":"","first_seen":"2026-01-16T02:52:20.282138Z","last_seen":"2026-01-16T02:52:20.282138Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0687088bb61419b07dea6e1375d75b3b","sha1":"a84924b7f9232a3e79524f21198f31d2f8e48f10","sha256":"c44c397160b1d3c639f197c99da4c0da4860c106d42c313047d4d30cdb5a7890","sha512":"884d9ecce4ace98dc0155d088f8bf1d8fa317453c57484935016d3ee001f357178ddf70606966c73260e3ea1922a6497451a278dc05786413e327cfab16b9946","ssdeep":"96:Aq2v8pEo5ICnXebMx5mZevoMbp0SHogvkAFLILU/FFMgG1KB1:AqyiXecm5MtPoEx7UI","tlshash":"d3a1308dfa91b360a31623ef3b2b7da2513985c024acde61f1169de03f27b1dd216d94","size":4726,"data":"","first_seen":"2026-01-16T02:52:20.36354Z","last_seen":"2026-01-16T02:52:20.36354Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/plugins/ninjateam-telegram/assets/js/telegram-popup.js?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f98c158979d2e75388edd0920209583","sha1":"8062349ef2363bdc7d5170d7506c632d1f1196cb","sha256":"85c47f9336c9bf6794a3633ad116d7a1b49882bf8063b0a7d093ed87338cbab6","sha512":"bfd1d49e0e975347cd4f36eea87e7001622136b4bffa9cbc74e159fe4f3e1dee3762f08c89a888c0dad39aa259438a831bfee3d3842497beef0fc71396b10cd2","ssdeep":"96:SGRNS/2hLIXUl9+mf+VY+Pslv+ANpI5LmMpKiSP/jB+0v5jQQqORU6g9mQLhIZtr:Rv8wl1BPbI05QQqOR3mIzSjGJC665A","tlshash":"3ed1c85e6f4570e08a86edfb2e2b91d1e924eccec7c95619f604b2ecfc2810d9509762","size":6385,"data":"","first_seen":"2026-01-16T02:52:20.28397Z","last_seen":"2026-01-16T02:52:20.28397Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/js/select2.min.js?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37dd3c4be796c3e4d2914e336fc84624","sha1":"efd00b3c59b9093335cfcc043fa0576587676636","sha256":"d7a7379926f63b11f218a615443f004d03fc499bc1baf50d4142b1b2a76c3772","sha512":"ee3039e0b935cd2756616e37bcb7416aeb4ae25d1b148871fc6bd6ef41738ce6e4bce089503b9865f35033cb778780b38f04a9a41be7a04e067000547cb9a1bf","ssdeep":"768:SopHucrre3DeGGG8MinEAs3j0TGE8jGookOlxNV7TWlOvBuZRgydn/RcSf2bK/Jw:m8hC3jIG+kOvVbyJJ1CD","tlshash":"2663c64c7a537234026f20e7256b140d22366b3e600b96a8b428cded6dbed15735bf3e","size":70852,"data":"","first_seen":"2023-03-08T15:22:52Z","last_seen":"2026-06-10T04:13:59.543939Z","times_seen":666,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b7566399eb2f22c3bd0c00d2fcd083c","sha1":"394e3ed4f94a8281f65ba9a26bfe19b7a2519087","sha256":"dece79c79aef9e61d79ea2e5320d2ff3f60eb1e68c35d89317a23f08ac5c4151","sha512":"b7227e2290e66377e61ce500706c8556024f66b2fe83bae33514f220d7a83f3a699c9c2c18d9aa02b4ffc4844d1633ea68223fb8a55638be63bb3b24cdb862ed","ssdeep":"1536:Iwk6ey/PIZHo+DqA55l6DNJZ8VUwzIYbRd:te2Iqol6DNn8BIY/","tlshash":"e273f8916a04f03776bb45ae65d1e2047af99405fcb34854f42cc8804fe7d4f2ab7aba","size":79875,"data":"","first_seen":"2025-12-22T23:48:28.890392Z","last_seen":"2026-06-14T15:38:29.196571Z","times_seen":1256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"63298efc48270443b8335a5e2949b580","sha1":"9cc88949a916831d63bbb94742823ae384087015","sha256":"b3d601b05563abfb82f718ca749e4a8419a7c123927c0364f7fb2386b5c118d9","sha512":"0e808580d1376e09440b6e1670bb7767e996baa59a5efa622640b9c50c8a3c96e47239a2d2af481b8787e9d7b71ca49facab412b39f749016e7b9574320d9b5f","ssdeep":"","tlshash":"27f08451db3d468406ba30fba85ebdcb2a0d1088df0a0c21fc38e93c2cd0ac16232c31","size":593,"data":"","first_seen":"2025-12-06T11:52:48.846984Z","last_seen":"2026-06-05T07:01:39.696861Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp-child/js/custom-script.js?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a205002a24f61577955d70f18f5ced07","sha1":"fc4050cc14a6a454fc28698cacdcb333e6721bdf","sha256":"95359418b75f8de03f1987686e38c085375a4a7f5dc81dc9f73a5c567e1bd7ce","sha512":"0866db73b0aee4ad7d9c9bf3c668c0bfb1ca5d87de38f557cd3c49505bdb64251fc7d78fc67c23cb32c8603de6f7772fdf576acad0ebf208f6861cc99abb2be0","ssdeep":"96:Odr52droB7bvx57gSFZ1EpRD625iYb0mCL0b3:Odr52droljP7gSFZOpRD6mboL2","tlshash":"b9915c66f1831ae952b01238f93f3e347e676a17f514a358f29f83362f6750450a2dac","size":4219,"data":"","first_seen":"2025-07-05T10:56:21.231293Z","last_seen":"2026-06-05T07:01:39.634046Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/nta-js-tele-popup-js-extra","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fa0c94580a98804bc5fd11dca2ebb77","sha1":"d8049a36dc4d0da10b612be486deb6e6db947c1d","sha256":"395f64b751c219e12cb96abcb62098852bbe217610cdfa5f799d9a62e0b7777b","sha512":"d0fd5f71c81f62833a3abf556a9f6deaac82c75b6cf982fc5ad255cc0d5130604be24c9b5f8840d07db4516df345b0dcb9074e350af0d73dfb859165b4d7c80c","ssdeep":"24:rCjSkL2WWSpYsydsXbsXgsXNsXEmsX+sXasX64z0rGSDbx6IMpqP4JOsPoS0MpGk:GjSkMsrIXOUZhlKcyd6Iz4QLhQB2k+Nc","tlshash":"0ac1881ed2241c3fafca2b3aea6cbf4e91b57310c6c54e184d4f8b38418048e7491639","size":5970,"data":"","first_seen":"2026-01-16T02:52:20.365639Z","last_seen":"2026-01-16T02:52:20.365639Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1dd0510ad17fb09b365b3c89b2562e6d","sha1":"7775000aacc922446a2c5086a7f11bab212af9d2","sha256":"abae9201e481bc840eec93a6bb7643b2b048673d254ab5b52f2b9cec66d34999","sha512":"59dd4062a3dafd5bd208dbdb6466270187ebc717394b227eb339fb9466c1b54a2e005b33207e98e0460c576cdc8d96eaafa9ecc43019409e002bc6c55beafe5f","ssdeep":"","tlshash":"7421af4a72da54f149773a155ebfe58b3813442b8e0085107a4cfce05f95e8a5366738","size":1397,"data":"","first_seen":"2026-01-16T02:52:20.367174Z","last_seen":"2026-01-16T02:52:20.367174Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3368ef08fa6b69b609fb5b6a7e27c20","sha1":"b63dfc968bea3b4247ce31c9713aba7a854ba30f","sha256":"42084d9e1de13f1dc89d8e0f75093dfc2d279202df6d4513fcda384dbfd03c86","sha512":"efc332182551b405959eb4b11002fa4b864ca64ece8543999c41e04fd66ff904a5454b54d91b018ad17459b1b4841cff708ae76b96ba29da3fd2d71431ab5fd2","ssdeep":"","tlshash":"2711b1064796cbb37e55482cdd31b65985a8f4dbb0a8a0c5afbf4414f81cbf4648c35d","size":969,"data":"","first_seen":"2026-01-16T02:52:20.368521Z","last_seen":"2026-01-16T02:52:20.368521Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/metrics/?id=G-CRT22GGTFL\u0026cx=c\u0026gtm=4e61e1","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93de62d8b5c3e1ec5171fc89be2ca4d0","sha1":"35d1346914b7d5be0a0c24fc8c4fc919605c6bbc","sha256":"e5b8850ade47c72c1f4a40cd249dc09d50a095efb9bfdce8add7f22bdedb8e67","sha512":"3777669203801f156cd919b835239aa2ac6e66497bb485e82b9b347b6dfd798a0a04334fba1ce045dfcff840c9411ec7c2948fc9c4675bf429bc78e1ce9de77e","ssdeep":"6144:NWgkuoRnbh1uGvjHjUG2tonoJDfc1YgdxBX83ospS2VK7CO:vqbTuwjFBnoMX83V0","tlshash":"c4a4098e73c674265396f478503f018ba97b29e2b45cc896f189cce02d74a9a4277f7c","size":475166,"data":"","first_seen":"2026-01-16T02:52:20.265945Z","last_seen":"2026-01-16T02:52:20.265945Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/js/jquery.uploadifive.min.js?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f30a05e017e1a90dd895a139e784d528","sha1":"a24b2e33e3a244048f1c7fbb037ac6cad44b24f6","sha256":"bee777140704b0be8065e080b1ff0455d18cfca4c2d00bc3e5f1a2755476ada0","sha512":"40d1396bd43379250a4873f26e9269323b1cf15e2a289e6d64255ebdbc3adb387e2a4219efe73f76cca5b66cd5b23cdf126f73aaaa4ccd6fd818cbd46c07bc50","ssdeep":"192:KJyV8kUa6HEpIasWr+jjQJ++i53ZpGyZd3uiHfYEHBRqc5MlhOy+nvntP4fJpt1e:KU2OE8J/i59b+iHfYEHBqovt6t1Oz","tlshash":"2042a8c02e06e5a2c6f3a1b126db89087e70e166789410107551d5f89bf98ced877f9b","size":12888,"data":"","first_seen":"2023-03-11T21:20:48Z","last_seen":"2026-06-05T07:01:39.663762Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-15T01:31:12.023892Z","times_seen":835646,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/plugins/ninjateam-telegram/assets/dist/libs/njt-telegram.js?ver=1.2","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48386011b7021b10cf0a02193e82f4fa","sha1":"bdf5b36a336c1b52f385b3788ffbe1c106a6d7ad","sha256":"433d6bffeb2e62b3bd31b5b929c9f8ec3146aad959e2ae48c11070b7eef78f15","sha512":"df9192700b6606d22d1a2a4c73128b61da428020e02da77d0e283478de9d2cacd32f4b36e0ba77b07659d5cc5cbd579c9ee9fee4f99960cf5a2b69bc0de7efae","ssdeep":"384:kb8zl3+YhJlXKVobZSGUWOFiGq9mX5hI+WQoxj+C7R8FS6yjDk3gUiuvrevNA:kIzl5uobZqqoX5hIfjjDk3Jiuvgm","tlshash":"63c2b4c9b3d6b10943a3a5b9402f6015b23a8d95780f496cf679c9e23c78c4da137fb9","size":27643,"data":"","first_seen":"2025-12-06T11:52:48.842399Z","last_seen":"2026-01-16T02:52:20.357308Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.webpushr.com/app.min.js","fqdn":"cdn.webpushr.com","domain":"webpushr.com","tld":"com"},"ip":{"addr":"167.172.175.225","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"09423c60e42fb2a18c147efb28ac9212","sha1":"e37a70a9b09609a2475450f2cebebb71047bee29","sha256":"c09828ea38ac025bbfe985ab7ae3f0eb9e5d7678bdecf1766b1db057a80ba6de","sha512":"9d7fa41e60871d035ba9ff7bc3070c6c2bfaaa289bec600009661ac82af530ee8321d69283ea866fedd96d8c92d1eb36a4188abf8d84b83423be86e07e0f3587","ssdeep":"768:VZQQag2Vz9vDQGR8NfIBT8JcTwNsUI+AyLfNTsA814wOWJmiCF9Nc7Z7XlEYWRnM:zDagS8GR8NABT8JcTwnAyLfNTsA814wv","tlshash":"2d1393a779422db00afb513bb5f782942c33250a2c47a114fbc5c45494ecfdada37ab9","size":44355,"data":"","first_seen":"2025-10-11T06:22:21.056382Z","last_seen":"2026-06-14T10:27:03.298797Z","times_seen":679,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/metrics/?id=G-CRT22GGTFL\u0026cx=c\u0026gtm=4e61e1","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93de62d8b5c3e1ec5171fc89be2ca4d0","sha1":"35d1346914b7d5be0a0c24fc8c4fc919605c6bbc","sha256":"e5b8850ade47c72c1f4a40cd249dc09d50a095efb9bfdce8add7f22bdedb8e67","sha512":"3777669203801f156cd919b835239aa2ac6e66497bb485e82b9b347b6dfd798a0a04334fba1ce045dfcff840c9411ec7c2948fc9c4675bf429bc78e1ce9de77e","ssdeep":"6144:NWgkuoRnbh1uGvjHjUG2tonoJDfc1YgdxBX83ospS2VK7CO:vqbTuwjFBnoMX83V0","tlshash":"c4a4098e73c674265396f478503f018ba97b29e2b45cc896f189cce02d74a9a4277f7c","size":475166,"data":"","first_seen":"2026-01-16T02:52:20.265945Z","last_seen":"2026-01-16T02:52:20.265945Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"835fd43fbac9d8dd3b5fb24cb565b488","sha1":"d88a0f63a61adbcc8bfe1754a3d589b57175b804","sha256":"3a2902e256cbdf7624b4c009778d51706fdce7eb2ec40d841792d480cad16b8b","sha512":"72e25768f6b8ea26a957e4789569bd0e0f849502eacc48eac4fab0d9b5a0eef7e36d2f546f821d089f394f97de568519f9cc8d88252ae5109959c324434caabe","ssdeep":"","tlshash":"1b41aa1e52241d3fafca2b1aea6cff4ea1b5771487c54e184d5f8f38458048e7492a39","size":1896,"data":"","first_seen":"2026-01-16T02:52:20.369961Z","last_seen":"2026-01-16T02:52:20.369961Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"084d9091cfbe42b228853c40d853debe","sha1":"df1d48606628d034752ed66fac72fb3f2def1c59","sha256":"7a9f64953cdf6255513a410f3fbc26a43b433d0582e2ee6d58400b4793737f6c","sha512":"592af6be2ae3b8be1ce9525ab792473aba61ee0781d1302f8cbbff2e3af7f25ad325cee4f22a3eed2441ee0fefc1998025f07c4dcd52a8a12e70d6fb23718b49","ssdeep":"192:f0MkCnz16eXj1rlrMsV06Okvvvjh+V9txhjtCJbk3byW2ZxKDc9O6ziVBivoIpqJ:n16eXAsG6OkvvvjIL+xKDcvquBeecZ","tlshash":"a662539c39e72121536b78bd179f924877369523600dad167d0c43807f9263b84f6eee","size":15000,"data":"","first_seen":"2024-10-17T04:58:49.911105Z","last_seen":"2026-06-14T19:48:37.545634Z","times_seen":758,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/metrics/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ebdd345b5cd42fe92ac6fe317164b48","sha1":"1b60fb93f797b373d3e86b1121bc5259496310c5","sha256":"0188b12facb6464cf9f5193ef95d5c0793096fbfe132cd391711bb29ed43bd97","sha512":"28ea5f27bc198115cb953cf82bd6ab876b4bc96c34bacfd6b28bb95a92d5275336dccd02411abbc4c2aca16c93849403336a2e972f2a43825b1a6394eb0c9825","ssdeep":"6144:LkuoRn5Y8GvjHjUG6ozDfc1Ygdx5X8IGym:/qC8wjF5MX8J","tlshash":"b27407cdb3d6742683a3a474403f118bb27b6992f44cd895f186d8d42e74aaa4237f7c","size":353655,"data":"","first_seen":"2026-01-16T02:52:20.274319Z","last_seen":"2026-01-16T02:52:20.274319Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6c92e8a437d52a3e2388f00fd52a69f9","sha1":"1b25b6abf6e5a38db62f9a993c86fe26729c0f09","sha256":"2af478968cfdba350d71cea6da37a73a0105a5b34eefb670d31b68e76233e051","sha512":"79b5653ff6dccaba6786412797c1072c3b33900a5495a48e11bfb4fd0919249ab48c698b80937f61aabfc2d06029084ea3c97b39f632d9d83fef495d3f1d5101","ssdeep":"","tlshash":"ead09538d22c608b0116c8f00e2ffa62f1d0ca40eb003dc30500c24ef08cc42b6e8ce1","size":241,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-06-15T02:07:57.782672Z","times_seen":7165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d41353bb1d3e7fb9b515cf1f4e1d5e01","sha1":"35c3b184cc588a2f5e9dd1fc121b97e207fa3455","sha256":"f74efd13d12f68b9d2f20d15d33133f94e292aff681e7edcb9b4d9173153c494","sha512":"63dd827c1b0fea2441a2472743c85729d6ed384b2d46bee5f77245571f3938bb1899e352e39052f797d966d25569602f10777016d8b0647a4e1ec67d06ccb70f","ssdeep":"","tlshash":"22f09e0b309439740c7099bea2f2a5246e7f51059c52c041db8589a9499df9c88a7cd8","size":524,"data":"","first_seen":"2026-01-16T02:52:20.372987Z","last_seen":"2026-01-16T02:52:20.372987Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/js/dolceescort.js?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44d9aa1e19902254664072e53c737f85","sha1":"6374621caa168db37bef5d9a269ba633b3713ec0","sha256":"a7b467908cf6cba5b01bdecae51b03a43bb3af94b97484f5723c74cd9e2a148e","sha512":"cf60237cd815c67eb9b9be2c8ac9b02afc704546204778b3d7bf447898cbcc16b8ca05ea2101e2aca0eeff89e67228c94c7eac80b08677fec6850d7ab7b3c74d","ssdeep":"384:XamMWPpSZ5jtgsp8ZFS3lpK2khef1i5/p:uj78ZFS3lpK2k8f1i5/p","tlshash":"1352658af32c655f55f67779b0be8808ef7ec830124186b4f079006d29e559632e6caf","size":14078,"data":"","first_seen":"2025-07-10T06:26:08.767597Z","last_seen":"2026-06-05T07:01:39.692709Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/js/select2.min.js?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp/js/select2.min.js?ver=6.9 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 13:23:38 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JIPMyw0lglGLrTtUc%2FJjnWiGvESJv6NcnXiMZgy%2F1yA%2FVKZCM6d7lvvYCBR5sNlL914hYk8WDxY4ZSRWdeGHyVYnF4YcWXcrXUsHj7FGuJP2\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bea50331c4cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70852,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64130), with CRLF line terminators","md5":"37dd3c4be796c3e4d2914e336fc84624","sha1":"efd00b3c59b9093335cfcc043fa0576587676636","sha256":"d7a7379926f63b11f218a615443f004d03fc499bc1baf50d4142b1b2a76c3772","sha512":"ee3039e0b935cd2756616e37bcb7416aeb4ae25d1b148871fc6bd6ef41738ce6e4bce089503b9865f35033cb778780b38f04a9a41be7a04e067000547cb9a1bf","ssdeep":"768:SopHucrre3DeGGG8MinEAs3j0TGE8jGookOlxNV7TWlOvBuZRgydn/RcSf2bK/Jw:m8hC3jIG+kOvVbyJJ1CD","tlshash":"2663c64c7a537234026f20e7256b140d22366b3e600b96a8b428cded6dbed15735bf3e","first_seen":"2023-03-08T15:22:52Z","last_seen":"2026-06-10T04:13:59.543939Z","times_seen":666,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/css/icon-font/fonts/escortwp.eot","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:50.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp/css/icon-font/fonts/escortwp.eot HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/wp-content/themes/escortwp/css/icon-font/style.css?ver=6.9\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g1$t1768531910$j58$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 13:23:38 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: application/vnd.ms-fontobject\r\ndate: Fri, 16 Jan 2026 02:51:50 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jdxa6298FZAXp6vrn7Yqdd%2Bowi1cvduZup8sBFRAYQTS3P9WxuZs8pvLiXl%2FGbBf11HcNsBJNb126rfiiBDoMozRqs1yb%2FV%2BFClG2kNYRxmH\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9bea50393cffb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18128,"size_decoded":0,"mime_type":"application/vnd.ms-fontobject","magic":"Embedded OpenType (EOT), escortwp family","md5":"4a5e9e8394a9b485f6641d9269f25a02","sha1":"21808904a6130f8001d138f8f22ea4c2e8196fab","sha256":"56454409706b42e88a08c3848639a36d9d78df0f18baf9b7865dd8df723cdf39","sha512":"5ec376722bf9897783bf484c4841f88a2f5a6fc7f44cb36b6079ab3356c99e28803fdc226c9f8685ed6735932aca615bfb50d146fa87d57b1fe66a08f4cc98c8","ssdeep":"384:IvZpbWA61re40IT1r3Y2jSQKWev5hscrUkgMfLg:IvHWA61re4vNY2QRBhtrsMfLg","tlshash":"4c829e14ab20da1ff8a78bbc09d92356c2b3bd156e31e6bb6943614260650d807f1f87","first_seen":"2025-12-06T11:52:48.790917Z","last_seen":"2026-06-05T07:01:39.681527Z","times_seen":7,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1755766714384/17625039571185-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1755766714384/17625039571185-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 07 Nov 2025 08:26:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33909\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZTRBbued1Ci6xoQC5rQhQxhMEoTIJ9RMRAkjXk0BUDx1Lg%2FzY9wr4fTUL40v2MOMrkPCn4ZrbFCG2DwAdXkE%2BMtILuCATursKnMSwOhxmlrN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea5033ac6db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33909,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"9182942710fe6bef17d4803e47b2e4e8","sha1":"1e833f1a3b36a5874d41df72ed507e01497750e3","sha256":"74325643d55d1ce3f2f0e2257145e171da0c7a49b02dac86c5fc3151d4df9326","sha512":"cbe4af9265a0ea978648ba3cb1e41635a5020af81eb4a3eb80af97e05fd76d1a1370bb9c55738e479036063e491f819bfd63bc2cb5d8c9f6c15d84bab033fe3b","ssdeep":"768:WR+kqrvqSCWf/2sAjEgobeMVg3aj14Bp5Xrnod/0CwEqVFzm:WRBqd/VAjSeMVqaMpV+5Ym","tlshash":"7fe2f1dcc29600b1cb88bd71db1a1c9cef5bbb50614e9ab11978d950cc9ee90d1a2fd3","first_seen":"2026-01-16T02:52:20.233194Z","last_seen":"2026-01-16T02:52:20.233194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/plugins/ninjateam-telegram/assets/img/x_icon.svg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:50.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/plugins/ninjateam-telegram/assets/img/x_icon.svg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/wp-content/plugins/ninjateam-telegram/assets/css/style.css?ver=6.9\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g1$t1768531910$j58$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sat, 31 May 2025 01:29:11 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 16 Jan 2026 02:51:50 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XHIf3RdeJkZXJIVxYASeSI341NxqR%2BtWqkLSZgQOnmsMvvRHTOYN%2Fcl%2BC4c6RhL%2FqH2lt3SXnJRbkJTTaZV5H%2FsWpFI%2FlLZ46esnfL4lXs5g\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9bea50398d0bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":730,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eae9c993f36d452b7c0425cecbbd312f","sha1":"e921c015d69dc787e5aa80bf24eb34739121cf88","sha256":"8b93c3336127ddd433c588dd1033c76449f292475b3bcfe4355eaeecf2641eda","sha512":"795b8748435ec0ce402e0551bf2f6bb7af88d63aa1bceed42fc82efaaa680776bbbb6254a87a326afd8817108e47653f031a328113734584aee54b2dd738631a","ssdeep":"","tlshash":"fd019cd4c7547cc0d80a8330963eae44b4e6b1fd656685c5ca06ba53feab05eb404a84","first_seen":"2023-05-10T16:40:36Z","last_seen":"2026-05-17T20:11:28.354083Z","times_seen":67,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-CRT22GGTFL\u0026gtm=45g92e61e1v9102114161za20kzb853248159zd853248159\u0026_p=1768531907879\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026gdid=dYzg1YT\u0026cid=1820615177.1768531909\u0026ul=en-us\u0026sr=1280x1024\u0026ur=NO-03\u0026_uip=%3A%3A\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAGQ\u0026_s=2\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938468~117041587\u0026sid=1768531908\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.exoticdrc.com%2F\u0026dt=One%20moment%2C%20please...\u0026en=scroll\u0026epn.percent_scrolled=90\u0026tfd=1548","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-CRT22GGTFL\u0026gtm=45g92e61e1v9102114161za20kzb853248159zd853248159\u0026_p=1768531907879\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026gdid=dYzg1YT\u0026cid=1820615177.1768531909\u0026ul=en-us\u0026sr=1280x1024\u0026ur=NO-03\u0026_uip=%3A%3A\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAGQ\u0026_s=2\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938468~117041587\u0026sid=1768531908\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.exoticdrc.com%2F\u0026dt=One%20moment%2C%20please...\u0026en=scroll\u0026epn.percent_scrolled=90\u0026tfd=1548 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.exoticdrc.com/\r\nOrigin: https://www.exoticdrc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://www.exoticdrc.com\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/js/dolceescort.js?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp/js/dolceescort.js?ver=6.9 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 13:23:38 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BYLmdeoxLgMV0yyfhMDB0sEI3hm%2BCcIBWEW9RUozXsNOJiYzYBC4hHHFgSHjK412agI4s4Z5qYGU92GuBqFyGVvd10zS8V%2BCJy9fi8gMflud\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bea50331c4db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14078,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"44d9aa1e19902254664072e53c737f85","sha1":"6374621caa168db37bef5d9a269ba633b3713ec0","sha256":"a7b467908cf6cba5b01bdecae51b03a43bb3af94b97484f5723c74cd9e2a148e","sha512":"cf60237cd815c67eb9b9be2c8ac9b02afc704546204778b3d7bf447898cbcc16b8ca05ea2101e2aca0eeff89e67228c94c7eac80b08677fec6850d7ab7b3c74d","ssdeep":"384:XamMWPpSZ5jtgsp8ZFS3lpK2khef1i5/p:uj78ZFS3lpK2k8f1i5/p","tlshash":"1352658af32c655f55f67779b0be8808ef7ec830124186b4f079006d29e559632e6caf","first_seen":"2025-07-10T06:26:08.767597Z","last_seen":"2026-06-05T07:01:39.692709Z","times_seen":10,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/js/jquery.uploadifive.min.js?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp/js/jquery.uploadifive.min.js?ver=6.9 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 13:23:38 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uJgP25i0LUQubhJ3dv440dBgNbs%2FZf04K59WseZOTf0VijnPiDBRDgEGjlDcaXl%2BfFj1RCOPLlCDyArt6BpIxHJt5wIz8qQNvptzHVYYt0K%2B\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bea50332c4fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12888,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12712)","md5":"f30a05e017e1a90dd895a139e784d528","sha1":"a24b2e33e3a244048f1c7fbb037ac6cad44b24f6","sha256":"bee777140704b0be8065e080b1ff0455d18cfca4c2d00bc3e5f1a2755476ada0","sha512":"40d1396bd43379250a4873f26e9269323b1cf15e2a289e6d64255ebdbc3adb387e2a4219efe73f76cca5b66cd5b23cdf126f73aaaa4ccd6fd818cbd46c07bc50","ssdeep":"192:KJyV8kUa6HEpIasWr+jjQJ++i53ZpGyZd3uiHfYEHBRqc5MlhOy+nvntP4fJpt1e:KU2OE8J/i59b+iHfYEHBqovt6t1Oz","tlshash":"2042a8c02e06e5a2c6f3a1b126db89087e70e166789410107551d5f89bf98ced877f9b","first_seen":"2023-03-11T21:20:48Z","last_seen":"2026-06-05T07:01:39.663762Z","times_seen":8,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1749717636144/17598550402039-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1749717636144/17598550402039-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 07 Oct 2025 16:39:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35896\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3vtC3jmBkajwZP%2F3E%2BurN5156mDmNwzwadfVG6DITciGGoNdcJbZ6yXfTi94A7VZBYTeldFkZrpKm%2B3U4i1bueXtgfqGWR7P6Wk3yW%2BJOnW8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50335c60b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35896,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"824ee600bff7d5c83f50139187611343","sha1":"6ac0508bf24fc583ba6d3e0e577b82f15b553e2b","sha256":"e8fb55c020a89f9151c5cad9af6abad64151bf2d7248971d8484a45b89f0c1d0","sha512":"a4cb6e79c3ff154ab39c2a783c4a35989370f678f58a42276ea86b3ddecfc3ea6d953b0beca2844610c897f37e63dbcaa3ce683e9039d065e5f8bf48da8de009","ssdeep":"768:WXE/VPbSOd+uuCmdPJuxNgtKV6n9huRs6Buz7gEmZaY/d6wCnm:WXE/VPOOd+uLmdRuxDV6nXu+6QgZJ/cQ","tlshash":"32f2f17d438e0634f4b4be6585a910a32b83d9ccb3d5c62918a7f61937faac25e8470d","first_seen":"2026-01-16T02:52:20.246147Z","last_seen":"2026-01-16T02:52:20.246147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp2022-child/img/profile_shadow.png","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:50.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp2022-child/img/profile_shadow.png HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/wp-content/themes/escortwp-child/style.css?ver=6.9\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://www.exoticdrc.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nserver-timing: wp-before-template;dur=123.28, cfExtPri\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 16 Jan 2026 02:51:50 GMT\r\nserver: cloudflare\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VcZ%2FxlLUBTqkwzdEvXyDt%2FVo0LlY6U2aerxTJdsbYMNt1UaDa0wkiOdNSeNfc%2FuemfZNRLKBHPi1cHXQtL48mYix1q8eUeVrZg6R5k3D%2Bc7y\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea5035cce7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Yoast SEO:26.7","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Performance Lab:4.0.1","description":"Performance plugin from the WordPress Performance Team, which is a collection of standalone performance modules.","website":"https://wordpress.org/plugins/performance-lab/","common_platform_enumeration":"","icon":"Performance Lab.svg","categories":["WordPress plugins","Performance"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Yoast SEO Premium:26.6","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":72045,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9470), with CRLF, LF line terminators","md5":"cadcac4fd0f97b17ca73ce9da860d209","sha1":"1c626fb70e28914a616bbd100500f63b8379ba5e","sha256":"619f5d2774ccbebdd40f7d4e1437f5063f2f669564048da2ddd242940f0870aa","sha512":"e289bbb034e596d8d99ffb97e8d1e0070af93ab9b36edea4b4ac49def0e1d436cfbcdd6abbb7735670837c70e1b8fd877d4be9f5d5db2ba26d0e68fa036a42a8","ssdeep":"1536:42AgzAl79GVlHs8ypTjvWNOKTtUfsS66PsPYeh:ZxzAl79GVlHsNhKTtMsS66PsP9","tlshash":"5563d9ba598250366b6afe9c5665b708b367d107ca089d95f5fc038cef81e7204f238d","first_seen":"2026-01-16T02:52:20.248452Z","last_seen":"2026-01-16T02:52:20.248452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 5631\r\ncf-ray: 9bea50331a4349c5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03e5f-7918\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 2333904\r\nexpires: Wed, 06 Jan 2027 02:51:49 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9tj0ihx0RwHSkeh%2FsAz21ROrvTsyKZjZ0nG30kueYnWE4ypwxm4q0J5YL%2Bm2EgT4y%2B6RYhoXMy%2F1tyStO6GcN2xjAZ2kjy5G9YaRv772e%2BFhu4ji%2F0%2F3TL%2BP16KJzL4nzTlpuyov\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-06-15T01:32:04.020876Z","times_seen":286118,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":6,"dns":1,"connect":1,"send":0,"wait":9,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/js/checkator.jquery.js?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp/js/checkator.jquery.js?ver=6.9 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 13:23:38 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8aguh5s0fI12a2aDD23mf2VqZMqOMHR42l0JsU4YZzVt%2FVb0obQlV2I94Svc1PUe4cTIgbjKVOf1FcexDJvwQVotJBTqqpWK1yV4dNYwnrI2\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bea50333c51b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3607,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"0ad4a4549e274affe7ef3fb0f4124f4e","sha1":"b40031f245067f1ea7bf5807f4312718911ae4d2","sha256":"4314a2b5f199ef8895e3db80c8baf9c4adf4805aeaf43bf3fca120ed67082e61","sha512":"6812a383ed97c532524d4d3623045a1cfc1455b549122c1674cd2f792b5c248456ef734db24917e97d1d7164970a653ea782fdcd95b9a82ba6c92a50c618d4f3","ssdeep":"","tlshash":"c87173b6b35c160e45bf60e715af21cdb23f80b626128d1aacfce5180d76e74b3a3915","first_seen":"2023-03-12T23:01:01Z","last_seen":"2026-06-14T09:21:40.256473Z","times_seen":17,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-16T02:51:49.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.exoticdrc.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Drg6ZAhXacGi7BlDYm1Jk3dUNZ5CTwWq8lJp6kt6N6tNkmdREBWjwASleP%2ByKbraqfor0RoCtWR0O4nhebw3AyF6QsE4CZOyA67TxE4lLlL\"}]}\r\npriority: u=1,i=?0\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bea502f9c34b28a-OSL\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nlink: \u003chttps://www.exoticdrc.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nserver: cloudflare\r\nserver-timing: wp-before-template;dur=116.67, cfExtPri\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Yoast SEO Premium:26.6","description":"Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Yoast SEO:26.7","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Performance Lab:4.0.1","description":"Performance plugin from the WordPress Performance Team, which is a collection of standalone performance modules.","website":"https://wordpress.org/plugins/performance-lab/","common_platform_enumeration":"","icon":"Performance Lab.svg","categories":["WordPress plugins","Performance"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"SweetAlert2:11","description":"SweetAlert2 is a JavaScript library that provides customisable, visually appealing, and responsive alert and modal dialog boxes for web applications.","website":"https://sweetalert2.github.io/","common_platform_enumeration":"","icon":"SweetAlert2.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":255919,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10142), with CRLF, LF line terminators","md5":"1b09f3258912ffb93906e66443bdce0e","sha1":"ea5c0ae5a0627cb3764450d7f37b49657b58f024","sha256":"fd85c3ab71ccfaaf549e37b590620bddc37ebd6c452521332a99e3da9b04b59c","sha512":"0c3f4132c4eb9c7170f4a9c0ecaeac2709b5083252f62a4fd1bfbbc12938b0fbee5c54d6a52d7dc713ba1e42a13e93741157ebd4c0f73cb84d07212018f8cc7f","ssdeep":"3072:RxzAl79GVlHsNyQHeVOcZrSKKTtMsS66PsP9:nlHsnHGOcoKKTT","tlshash":"cb44a97289e2d42316f6ddd525606b0e6b93820bd9094781f3bc43c8afc7e9299e335d","first_seen":"2026-01-16T02:52:20.253463Z","last_seen":"2026-01-16T02:52:20.253463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":388,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wXVJoXfEbh%2BUezBIpJeAMPXBeyKqsJqihsGH4xJ1bWvHevKJ3GOg%2BZTqb%2B%2BFZmru6%2BrwnnZJB3CyXWXmObmo820VDLd2mm8U042NRXSc9OFs\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bea50331c4bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-15T01:31:12.023892Z","times_seen":835646,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1768307831587/17683079032344-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1768307831587/17683079032344-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 13 Jan 2026 12:38:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 52012\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fdgAZ%2Bc65YI4zVnLXqbVFn0vwY3OZiVUoz4m1eaRZTyzrDCEkOKyFbJxI2MPhzu8dq0%2F4e8H3dornqxVV3t4nN9c%2FQ1Q%2FAffkIOlodStoFy6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50334c5ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52012,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"1d22a1fe0bd4bd6c749f665618d7edf4","sha1":"6d53b2fe73c41e39e3e1342fec623da75c54debf","sha256":"e496c6d2bddd180dcfdf4a6d91122890a869769b9aad3c961cb80c6b81d27679","sha512":"b38a8b65e492d4991e15863c9e03904789a04064caee7f4a43b8a5d3eec6cb65a078942d10e3f247aa131ecff2391cc8e55767422170112b741c4b3922daaffb","ssdeep":"1536:Wu+CaPUUT4uoaxB/WWSQcyKPzrAAASvDvqfqLPIbwo:xMNT4uNxB/WWSZr/vDvLPab","tlshash":"ba33f128d9531f75ab153ead88198050f9c41600f52f9d7e2fb5c798ec08a7bc37621e","first_seen":"2026-01-16T02:52:20.256542Z","last_seen":"2026-01-16T02:52:20.256542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exotic-ads.com/display/items.php?49\u00260\u0026970\u002690\u00260\u00260\u00260","fqdn":"exotic-ads.com","domain":"exotic-ads.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:50.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exotic-ads.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 03:14:34 GMT","end":"Sun, 05 Apr 2026 04:12:01 GMT"},"fingerprint":{"sha1":"80:EC:0E:2B:88:E3:DE:6A:54:1F:3B:6C:C7:57:E3:52:1D:76:98:33","sha256":"69:50:58:83:B4:89:0B:E5:B3:FD:56:61:F2:03:D2:DD:1C:15:27:D1:0A:07:68:AA:8F:D4:D7:4F:2E:6F:2C:3F"}}},"request":{"raw":"GET /display/items.php?49\u00260\u0026970\u002690\u00260\u00260\u00260 HTTP/1.1\r\nHost: exotic-ads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 415 Unsupported Media Type\r\ndate: Fri, 16 Jan 2026 02:51:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rWKENVNewpOBjDK03Z%2FskUaGSvCl0y%2FsxGbCOT4k31haBTduXBx4%2FHXF8Zfw%2BAIIrVifagHiiGH3U88PtJ3CpsV7lM7aaj9eDnxa0nJ6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bea50359d00b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"415","status_text":"Unsupported Media Type","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1755196494936/17645901377260-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1755196494936/17645901377260-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 01 Dec 2025 11:55:53 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23076\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WrxIeNdL5bhBz19GHAbrLp4SSmjwIuh8GuIzP58KVKBHm0uFqhC12FMH2gC1t%2F1hEYMRLm3nR0lsW7Y401ha0%2Bt9NcStw3QGvVPOLSLZBEGD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50339c6bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23076,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"1fad3ea423e70c106b3f2be25581c45f","sha1":"597474e9ee8c4413eae867b9db6a3d4bcc56b1ed","sha256":"ac88ecf24f231fd1a82964342208a151f9bfabf038d17fb176fe9dfb9e05a6b4","sha512":"0b03d5e3faef87cd00415fdda50746d4f96baaa74c58f618f5489c181ef294970504d47ae471e778377ccc19d1bed6fbaf101b252c61bb186b6a0e1181d30c35","ssdeep":"384:WFGk0RVt6yW8K7kBVlG35AJeg1o0JER8HZj2V290NRZ+BhtU6Bd8hGebs6:Wgt6ww3qvER8HZ6V29cMht4+6","tlshash":"7ca2df0a474321a3c7476c3b9ac7972582c08b92198e17c54f6cd1a5fbf08ee9d9e70b","first_seen":"2026-01-16T02:52:20.258565Z","last_seen":"2026-01-16T02:52:20.258565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp-child/style.css?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp-child/style.css?ver=6.9 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 15 Jan 2026 05:38:33 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k5SsbMVcdBq9EKGAxwRFSxCqNwnvfCdVEGT%2F7E2TG1a1b5mKVvb96zQ9n0yrdyfoBGwkJHZghO3gBOzxgc2isLhCUJau3US7PBvkcMJ16MyQ\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bea50330c47b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18541,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8a2107ce57eb7991ad49bcd3957469c1","sha1":"6859001c542af6130c63ca4ef0cf50b034a6d19c","sha256":"d867150466b02497e888a28898b29a1965e0c0caef9cb32e71fd2c67827c7085","sha512":"59617e8b57f6e0ec6d53e09409802c49b15432d2e04b0b470f171cf24b646e27f7bb5732bcf6852927b7bca7e88e3ae9632ee0f6adaa32fc22536940f3bf3080","ssdeep":"384:bYTQCsSSD+yrLEFK/F+sG77rFOF5FBmUlF8:b2QZbVQK/F7G7fFOF5/XlF8","tlshash":"99823257eae31944741a91a89fbaa768373d5043d30ecd687f9c73688f472d084b2f98","first_seen":"2026-01-16T02:52:20.261137Z","last_seen":"2026-01-16T02:52:20.261137Z","times_seen":1,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/css/select2.min.css?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp/css/select2.min.css?ver=6.9 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 13:23:38 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V13ntFWDPaAhihCcbdLP0Vc28Yeju%2F2P5FBxn0vpCRLEFdmtkLaVpo3HK9yPXa90BTc%2FJWl0aEfbpu0Y9LOiNkE%2FtO0HPBUkdqpYJ75Rm70V\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bea50330c49b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14966,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14965)","md5":"9f54e6414f87e0d14b9e966f19a174f9","sha1":"ae5735562faabd1a2d9803bbd7bf4c502b5e4f51","sha256":"15d6ad4dfdb43d0affad683e70029f97a8f8fc8637a28845009ee0542dccdf81","sha512":"9cc365a6e6833ebaa5125b37217fd0e7a1f7eaabc1012c1bde2a6ea373317966ec401d7cf35a31d1c46fed43d380196b8aaa329eddf92a313080651e51720f9f","ssdeep":"192:pL5u/nTfc3aqPJRQ9CPjOtWlUJKLPcH9tPOF:3u/TfXARQ9htWGSPcdwF","tlshash":"3f62b935bacc2235b0bf8e7f6cf274946729dd5fc4111b9ab8e9e594c8e04540a8b60f","first_seen":"2023-04-05T09:15:52Z","last_seen":"2026-06-15T01:39:13.060656Z","times_seen":20570,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1764147343419/17677841768540-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1764147343419/17677841768540-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 07 Jan 2026 11:09:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33349\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FohITtYu7hlAGobmaUD5ImH3fL7gX9XtaYhninfeiMGy1JuvOC%2FkOual1KQJkWzGYMsB1ESG01foyazup6N5nsupjtpY4YplKwUgCVJFgBI9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50334c55b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33349,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"5433f3a5477fddf37c68b82334a4f56c","sha1":"e68c1f800c5f9280a5b5ba9de1c1056587955021","sha256":"fcecd1919b1a34702d2bb99739931b5fd3078c5435f73ee96ff13d7bd4ff1294","sha512":"500eea23e0cc94ea927db5fe9e2a6e3a195b04fc37655533a142cc20ef527c34927799f1f1cb351815b44a04a424231dc4099054b7a80b2ee01a9298ab32f5da","ssdeep":"768:Wp3FKAsJjzEOctdWfgBw5bYe6koi5dSBiXn2ven6:Wp1UtEOctIo2kk95pf6","tlshash":"78e2e003e62262d56ed14832aa032b9077863e1538e89bd9c937d5f73da19cf9c1874e","first_seen":"2026-01-16T02:52:20.264181Z","last_seen":"2026-01-16T02:52:20.264181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/metrics/?id=G-CRT22GGTFL\u0026cx=c\u0026gtm=4e61e1","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:50.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /metrics/?id=G-CRT22GGTFL\u0026cx=c\u0026gtm=4e61e1 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 154819\r\npriority: u=3,i=?0\r\ndate: Fri, 16 Jan 2026 02:51:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bea50359ce6b28a-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: private, max-age=900\r\ncontent-encoding: br\r\nexpires: Fri, 16 Jan 2026 02:51:50 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Cache-Control\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZAkGKSXnf65ZlwUNkfv5KCPP9wCNd6R9HZ42UBbAqfXXykwKVy7AkzKAY%2FPU8c5i5Mlz%2FTBsyumEkyQiQxCfm7UnphPy4A3YWl7BQvnP%2BUD\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":475166,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6569)","md5":"93de62d8b5c3e1ec5171fc89be2ca4d0","sha1":"35d1346914b7d5be0a0c24fc8c4fc919605c6bbc","sha256":"e5b8850ade47c72c1f4a40cd249dc09d50a095efb9bfdce8add7f22bdedb8e67","sha512":"3777669203801f156cd919b835239aa2ac6e66497bb485e82b9b347b6dfd798a0a04334fba1ce045dfcff840c9411ec7c2948fc9c4675bf429bc78e1ce9de77e","ssdeep":"6144:NWgkuoRnbh1uGvjHjUG2tonoJDfc1YgdxBX83ospS2VK7CO:vqbTuwjFBnoMX83V0","tlshash":"c4a4098e73c674265396f478503f018ba97b29e2b45cc896f189cce02d74a9a4277f7c","first_seen":"2026-01-16T02:52:20.265945Z","last_seen":"2026-01-16T02:52:20.265945Z","times_seen":1,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-CRT22GGTFL\u0026gtm=45g92e61e1v9102114161z8853248159za20kzb853248159zd853248159\u0026_p=1768531907879\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026gdid=dYzg1YT\u0026cid=1820615177.1768531909\u0026ul=en-us\u0026sr=1280x1024\u0026ur=NO-03\u0026_uip=%3A%3A\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGA\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938468~117041587\u0026sid=1768531908\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.exoticdrc.com%2F\u0026dt=One%20moment%2C%20please...\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=1068","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:48.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-CRT22GGTFL\u0026gtm=45g92e61e1v9102114161z8853248159za20kzb853248159zd853248159\u0026_p=1768531907879\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026gdid=dYzg1YT\u0026cid=1820615177.1768531909\u0026ul=en-us\u0026sr=1280x1024\u0026ur=NO-03\u0026_uip=%3A%3A\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGA\u0026_s=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938468~117041587\u0026sid=1768531908\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.exoticdrc.com%2F\u0026dt=One%20moment%2C%20please...\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026tfd=1068 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.exoticdrc.com/\r\nOrigin: https://www.exoticdrc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://www.exoticdrc.com\r\ndate: Fri, 16 Jan 2026 02:51:48 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":463,"timings":{"blocked":213,"dns":0,"connect":22,"send":0,"wait":35,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10208110\u0026pdata=https%253A%252F%252Fwww.exoticdrc.com\u0026id=7fa3b767c460b54a2be4d49030b349c7\u0026ts=1768531907","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-16T02:51:48.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10208110\u0026pdata=https%253A%252F%252Fwww.exoticdrc.com\u0026id=7fa3b767c460b54a2be4d49030b349c7\u0026ts=1768531907 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531908$j60$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jPeZrfFustGyUWKwmDl3nCmLPKESnqs5flpr5QxwTfCuokqUmboCg1B7uKTxQFOi%2ByQ31hhX60HHLPcsYLa7ZOQll43gHcEeUhJ0FLOVAyyq\"}]}\r\npriority: u=1,i=?0\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nlocation: https://www.exoticdrc.com\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bea502f4c31b28a-OSL\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nset-cookie: wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1; Path=/; Domain=www.exoticdrc.com; Max-Age=3600; HttpOnly; SameSite=Lax\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255919,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/176449318254/17677837657263-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/176449318254/17677837657263-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 07 Jan 2026 11:03:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18723\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZiO6B4J5GlBJtk3eHwC75Pv1umDtyuc2l4Bxs1iHvGOFTnx%2F6x6EKHs2dkMJs6cBssDgEpDMem4lAwlBzgEJ9p2XWPtGXl03LFOCCQgAUMyI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50334c59b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18723,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"2e72b89e7487be1afa799962004b2484","sha1":"dd8735fda69020b6982fc0096a253e6eb2e65a7d","sha256":"82cfce3ced564f704e8d9e0e2c2c19e868770e4a2bd52e22176748256f225bd1","sha512":"22cb5b55b871ebdaca8b9a525d97e16e0cf3cc06fd5c7f54ce8ffaf6f95c38c26b094184f4d3cf339796e0271cf111ebf267aacc94402e1718ad72f72748fa1a","ssdeep":"384:W9+LvxK9n1SOaZVBrI4O6RMCm94AO9Xk4o+sEkuaioCFaDIoBE:W9ec9nWHm2CTW9Xk4o+sTxiTIXE","tlshash":"5c82c153bc662614ac220e6219360f9c4a1f0b9857c86d50ff79defbc7946cdbf08694","first_seen":"2026-01-16T02:52:20.267672Z","last_seen":"2026-01-16T02:52:20.267672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/174925205072/17531054394112-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/174925205072/17531054394112-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 22 Jul 2025 09:15:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 41261\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0AsJI%2FcHorwi2UApk%2Bg4jyrX%2FfH%2FYeGoRidNuTNkRV2DHki9bW76YnZxNzzoN112adsKAy%2Bn0tVfieMOPlovN%2FiNeiUd6YOVSFJppj9VUFhb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50336c68b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41261,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"201438f5b4a3a92d693a567ed6821f10","sha1":"15dbb9f8756f688d20447cc784b38d35d3ad16c3","sha256":"ce951508ef795dd8415c04153cbf54274c7bf7e28105c4dac2969d1a526080fc","sha512":"1f0616c2538d568b6790c8cd95540399b5ca5ef28e9eb169aa5f6bb5a47037424c2d8d21c7c703e357939053c9390c2d18ca5562e63f5f97b05664eb1b094d4c","ssdeep":"768:W/gZQsqTUzVZJ+Odk8uQjk8NS2h5zIbre20nemBnJuzNLxVOC:W/UqcVZJddk8hZzIbC28emfcNB","tlshash":"e703f1fc1b15c64113eb00e60e8d94ac830c866863909e6cbbacf9f3635db85c98795a","first_seen":"2026-01-16T02:52:20.2694Z","last_seen":"2026-01-16T02:52:20.2694Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/plugins/ninjateam-telegram/assets/js/telegram-button.js?ver=1.2","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/plugins/ninjateam-telegram/assets/js/telegram-button.js?ver=1.2 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sat, 31 May 2025 01:29:11 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0XNEJ%2BtVn0jaBC%2BAu6MZXp3FeFOlETAKFkt4hpKHtc4A3ZbiqJ6TxOzB6AK3Ze0AJrT9gEEJ7heF7ScV2DRbSXNkTYO%2F%2BWcumTnEguNLDa2n\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9bea5033bc78b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6415,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6091)","md5":"a99a88760845d1364daafa7b8a2ae9b3","sha1":"8ac0d598ddcf5f0564c4ec2ae671e5affddf40fb","sha256":"7924bb0752c5c57e74bb2e758d3dbdfc91785894e0f213fe4f149c191569cb03","sha512":"d5c36880f5ddee4fe3ca19d31d5920e79178123e39a4fcd389106dfc1b148d05e2388252535fd4d71ca4206157ef774cd2c605645618deb98d6a0fb40c05073c","ssdeep":"96:S/RNS/2hLIXUl9+mf+VY+Pslv+ANpI5LmMpKiSP/jB+0v5jQQqORU6g9mQLhIZtr:S/v8wl1BPbI05QQqOR3mIzSjGJC665A","tlshash":"c1d1d75e2f4570e48a46fdfb2e2b80d1e924accec3c95619f604b2ecfd6810d95097a3","first_seen":"2026-01-16T02:52:20.27156Z","last_seen":"2026-01-16T02:52:20.27156Z","times_seen":1,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/plugins/ninjateam-telegram/assets/img/telegram_logo_green.svg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:50.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/plugins/ninjateam-telegram/assets/img/telegram_logo_green.svg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/wp-content/plugins/ninjateam-telegram/assets/css/style.css?ver=6.9\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g1$t1768531910$j58$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sat, 31 May 2025 01:29:11 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 16 Jan 2026 02:51:50 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eu227vrduUXHGLjD7fKLhBtsznHcmEHwiocmKYo78bIUCchyT5T%2F2ZRZo2wAlsNN6VgW2d%2FnAIoknUY%2BUB9CwSW9zVpJJtrkDMAXmwd%2FyMdv\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9bea50399d0eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":548,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b59e976237cadb3b501b36d6410225b4","sha1":"d91f087769201e2f16413eefed0020b3b9accc3d","sha256":"8b59187767b2287929a02e4277ead5d80a1e71b19220bb46b416324d93886287","sha512":"207c870bc76f564a8b50dfd9e1e39ce42fabf5749a3cb0fd6c34f484d332439bc62216decb402583a8bd03186b6bafd58c1d56883d08f2cea613871731a003f2","ssdeep":"","tlshash":"37f02457835287f6be89442c9820785886dcf9db609091c9abfb0435d40daf4b98c7ae","first_seen":"2025-07-05T10:56:21.185463Z","last_seen":"2026-02-19T09:37:44.866208Z","times_seen":9,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-CRT22GGTFL\u0026gtm=45g92e61e1v9102114161z8853248159za20kzb853248159zd853248159\u0026_p=1768531909583\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026gdid=dYzg1YT\u0026cid=1820615177.1768531909\u0026ul=en-us\u0026sr=1280x1024\u0026ur=NO-03\u0026_uip=%3A%3A\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGQ\u0026_s=1\u0026tag_exp=103116026~103200004~104527907~104528501~104684208~104684211~105391253~115938466~115938469~116682876~116992598~117041588\u0026sid=1768531908\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fwww.exoticdrc.com%2F\u0026dr=https%3A%2F%2Fwww.exoticdrc.com%2F\u0026dt=Exotic%20DRC%20%7C%20Liste%20des%20escortes%20en%20RDC%2C%20Kinshasa%20et%20plus\u0026en=page_view\u0026tfd=6403","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:55.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-CRT22GGTFL\u0026gtm=45g92e61e1v9102114161z8853248159za20kzb853248159zd853248159\u0026_p=1768531909583\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026gdid=dYzg1YT\u0026cid=1820615177.1768531909\u0026ul=en-us\u0026sr=1280x1024\u0026ur=NO-03\u0026_uip=%3A%3A\u0026frm=0\u0026pscdl=noapi\u0026_eu=AAAAAGQ\u0026_s=1\u0026tag_exp=103116026~103200004~104527907~104528501~104684208~104684211~105391253~115938466~115938469~116682876~116992598~117041588\u0026sid=1768531908\u0026sct=1\u0026seg=1\u0026dl=https%3A%2F%2Fwww.exoticdrc.com%2F\u0026dr=https%3A%2F%2Fwww.exoticdrc.com%2F\u0026dt=Exotic%20DRC%20%7C%20Liste%20des%20escortes%20en%20RDC%2C%20Kinshasa%20et%20plus\u0026en=page_view\u0026tfd=6403 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.exoticdrc.com/\r\nOrigin: https://www.exoticdrc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://www.exoticdrc.com\r\ndate: Fri, 16 Jan 2026 02:51:55 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/metrics/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:47.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /metrics/ HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 118155\r\npriority: u=3,i=?0\r\ndate: Fri, 16 Jan 2026 02:51:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bea50286bb1b28a-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: private, max-age=900\r\ncontent-encoding: br\r\nexpires: Fri, 16 Jan 2026 02:51:48 GMT\r\nlast-modified: Fri, 16 Jan 2026 00:00:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Cache-Control\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y0LdFNlPZpIEKXeu4vwg2YWr4ayUGzEdfLBDgl2fSi672gtwrSJXLGzw%2FcDP27MY0HAWc%2FYxBWfNjW0A6nTvzI4DLXzkczy2a4k2MOLSQuL3\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":353655,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"6ebdd345b5cd42fe92ac6fe317164b48","sha1":"1b60fb93f797b373d3e86b1121bc5259496310c5","sha256":"0188b12facb6464cf9f5193ef95d5c0793096fbfe132cd391711bb29ed43bd97","sha512":"28ea5f27bc198115cb953cf82bd6ab876b4bc96c34bacfd6b28bb95a92d5275336dccd02411abbc4c2aca16c93849403336a2e972f2a43825b1a6394eb0c9825","ssdeep":"6144:LkuoRn5Y8GvjHjUG6ozDfc1Ygdx5X8IGym:/qC8wjF5MX8J","tlshash":"b27407cdb3d6742683a3a474403f118bb27b6992f44cd895f186d8d42e74aaa4237f7c","first_seen":"2026-01-16T02:52:20.274319Z","last_seen":"2026-01-16T02:52:20.274319Z","times_seen":1,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1766407121429/17664071521343-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1766407121429/17664071521343-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 22 Dec 2025 12:41:07 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38092\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j5DDBhQdaOXNLQtw0ri8hv9Im6laA7b4xvJlOS%2F1wMYkTLSE%2FsCVT8YRLJemvAyv28pUmfk8l%2BtdqCzWKb4rQNRkYyK82nsc1YBa%2Fn9SSjaD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50334c56b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38092,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"51c1539bab5b0176860df1a2204eab34","sha1":"c7e4903476742a0ef3eee13f91ee77c9b7fdec1a","sha256":"1783f3e67c2a46bc59620bf0274f580b8a5a22f5edae6fde764634fd7091097d","sha512":"421d1c35142a52f452f612cd05d133a6770601eedb6142bdef2ca9b3462b8485328ed5842fd538feaded188c1dcf3bd3c647ec783b39bdd3fdaa74dc0c99cccd","ssdeep":"768:WJRUQsPQBw+jn3VhY+rteEpQkrzW1DAAMqrpHmCE/n3Bty:WJmQVwUnFhhr02QkmiU/83i","tlshash":"f703f2a9310424512eb44fecee5282d4c11ec78624a525bb3f7edb773503fe8ea1da46","first_seen":"2026-01-16T02:52:20.276177Z","last_seen":"2026-01-16T02:52:20.276177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp-child/img/mobile-menu-icon.png","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp-child/img/mobile-menu-icon.png HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 07 Jan 2026 12:58:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3046\r\ncontent-type: image/png\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IAdtHTMKx3Ap5SMwdjyJ4rCcARtAlYkapktvR3ib5gp2ZU1F8ok%2FG%2ByJVSQsWCu%2Fxdl5HPqUtigVzjgJ54Bo0ZvApMJH%2FcEhIzHEMDr%2F3wAd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50333c52b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3046,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 42 x 23, 8-bit/color RGBA, non-interlaced","md5":"f6cc4a02c1396732942a846511a885ee","sha1":"d3bc09533203f586f8e5995e1c06bf04d633c190","sha256":"b6da15c86536688086d384287faa281e1dd76a47094f50c786d4e68d97feeed4","sha512":"13b60cbad70a1780574f8dc3b4c12cae862dd25e0d628c385b4134ff94ad416b58a9c035182300011c6c28a1f3cc6a45efaef1506e5c363be98492a05eb893ac","ssdeep":"","tlshash":"cf515cbf9d60509e78dd78400d9e0242f36932bcdb46373c94d164de1499d079b250b1","first_seen":"2023-08-29T01:37:12Z","last_seen":"2026-06-05T07:01:39.67261Z","times_seen":9,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/i/no-image.png","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp/i/no-image.png HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 13:23:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5405\r\ncontent-type: image/png\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FlpZNARckye8EpkYPtigYKvoZYhHPkU5NsfCJO7MBZnzuqKG6aEu0AORucKjiq24kyDKLqMDRshGcUZeHddYTnY1agC10Yj%2F4Pl43jD0EK9X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea5033bc75b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5405,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 370, 8-bit/color RGBA, non-interlaced","md5":"37c039434efad7ecce3e5e3b16d7497a","sha1":"288aff8bb67bd8f29b0225c2b30d6268597f61f7","sha256":"c5d17f5969566ebc580978d33d2e16649f6c4efcb83afd2c653df200dffd2e41","sha512":"bbbe0c927566939850ee3c43f8baa1515d008ad2e1ca35be6b1bff2c40def1745b24fa27c1cfd2d408d6e80767f3d7df9dc67e49cdd51ac734f5e9a6725aa319","ssdeep":"96:D28BTrAVcPXb7WMoCmCgyIT5iQh7kQIVnMwvAtTUgF8t8hArmq9YKgOUuT:FdrAVcPXvWMoCpgBAQh/IVMw+QltqoZ7","tlshash":"e8b1f830c7302688952996a0efc00505c9a6f748a3d96bffeb8450dd6249f13d94e79f","first_seen":"2023-08-29T01:37:15Z","last_seen":"2026-06-05T07:01:39.65395Z","times_seen":3,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/metrics/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /metrics/ HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 118167\r\npriority: u=3,i=?0\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bea5033bc7cb28a-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: private, max-age=900\r\ncontent-encoding: br\r\nexpires: Fri, 16 Jan 2026 02:51:49 GMT\r\nlast-modified: Fri, 16 Jan 2026 00:00:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Cache-Control\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KYnQ%2FGhq%2BbAX4LguXXGW1r1Tju4RvtzxPhd9%2BO7KL%2Fv2NXJMajIOUnFWlN3GbFC2JsPHPc4M36zBShr5YCzti%2FievYS2nF1MbPhaWgdMomCF\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":353665,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5376)","md5":"c30e4730c906946313684bd4ffc72803","sha1":"a4b796c9b0ff6883c4a49e544c6b0b13ccd9e920","sha256":"967c6c826caebe3e0adbf86d0d2940252dc7ea56709970cde11b014f33ec12ee","sha512":"e29117fead4cd19cd8ee4320195cb620a5d7104b2616ac4e31048b6b2cd72800eca6e37658b82640b94061f977ec47d9bf14b4af127436b22153539855148380","ssdeep":"6144:KkuoRn5Y8GvjHjUG6ozDfc1Ygdx5X8IGym:+qC8wjF5MX8J","tlshash":"967407cdb3d6742683a3a474403f118bb27b6992f44cd895f186d8d42e74aaa4237f7c","first_seen":"2026-01-16T02:52:20.282138Z","last_seen":"2026-01-16T02:52:20.282138Z","times_seen":1,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/plugins/ninjateam-telegram/assets/js/telegram-popup.js?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/plugins/ninjateam-telegram/assets/js/telegram-popup.js?ver=6.9 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sat, 31 May 2025 01:29:11 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WwBf3au7FB0VMQsRe1t3AWeIqhsGfqthT%2Bmdx7CCRU1NWBqmdjgqb%2BlAyHw08%2FtqKjqL9rfXB2FVTGY2NaMJficn0p%2BepbU5%2B4Y583jy8nr3\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9bea5033bc7bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6385,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6091)","md5":"3f98c158979d2e75388edd0920209583","sha1":"8062349ef2363bdc7d5170d7506c632d1f1196cb","sha256":"85c47f9336c9bf6794a3633ad116d7a1b49882bf8063b0a7d093ed87338cbab6","sha512":"bfd1d49e0e975347cd4f36eea87e7001622136b4bffa9cbc74e159fe4f3e1dee3762f08c89a888c0dad39aa259438a831bfee3d3842497beef0fc71396b10cd2","ssdeep":"96:SGRNS/2hLIXUl9+mf+VY+Pslv+ANpI5LmMpKiSP/jB+0v5jQQqORU6g9mQLhIZtr:Rv8wl1BPbI05QQqOR3mIzSjGJC665A","tlshash":"3ed1c85e6f4570e08a86edfb2e2b91d1e924eccec7c95619f604b2ecfc2810d9509762","first_seen":"2026-01-16T02:52:20.28397Z","last_seen":"2026-01-16T02:52:20.28397Z","times_seen":1,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/i/star.png","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:50.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp/i/star.png HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/wp-content/themes/escortwp/style.css?ver=6.9\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 13:23:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1519\r\ncontent-type: image/png\r\ndate: Fri, 16 Jan 2026 02:51:50 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rmozYicglWg5kBTMRfdCTJ6GSGdWp3KHHWMTPONw4Ou%2Fo5lh4lW8rUmqgBwQaSNhWVLyKKjn8IJ4SnDnJvjbB54BQ2RXWiHREPVV7hTajehA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50365ceab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1519,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 32, 8-bit/color RGBA, non-interlaced","md5":"cb140488647f1a2c8d4eb67cd7d8f54d","sha1":"85ba42da7fbcdcf9729d3520a71e467f69430ffc","sha256":"d4f7156497c214318be60c43205cbd90b9b6496fcabd14a4d8de07d74bc65e69","sha512":"b01061f5d794dd93c596e6aa797de5283626a993e9e7ba39cd352555cf5881f2d49dd4158108f55e35ff14e437c2424239ee948cb53114e754e516c6ce9100b5","ssdeep":"","tlshash":"8531b58efb50b402f298d85324f3a11b591b4340d8e8f076a4caa07c8a20afa456e8c7","first_seen":"2023-08-29T01:37:17Z","last_seen":"2026-02-19T09:37:44.862063Z","times_seen":5,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-CRT22GGTFL\u0026gtm=45g92e61e1v9102114161za20kzb853248159zd853248159\u0026_p=1768531907879\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026gdid=dYzg1YT\u0026cid=1820615177.1768531909\u0026ul=en-us\u0026sr=1280x1024\u0026ur=NO-03\u0026_uip=%3A%3A\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEEAAGQ\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938468~117041587\u0026sid=1768531908\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.exoticdrc.com%2F\u0026dt=One%20moment%2C%20please...\u0026_s=3\u0026tfd=2090","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:50.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-CRT22GGTFL\u0026gtm=45g92e61e1v9102114161za20kzb853248159zd853248159\u0026_p=1768531907879\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026gdid=dYzg1YT\u0026cid=1820615177.1768531909\u0026ul=en-us\u0026sr=1280x1024\u0026ur=NO-03\u0026_uip=%3A%3A\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEEAAGQ\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938468~117041587\u0026sid=1768531908\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.exoticdrc.com%2F\u0026dt=One%20moment%2C%20please...\u0026_s=3\u0026tfd=2090 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.exoticdrc.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 333\r\nOrigin: https://www.exoticdrc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":333,"data":"en=form_start\u0026ep.form_id=i1tfosk3kfce\u0026ep.form_name=\u0026ep.form_destination=https%3A%2F%2Fwww.exoticdrc.com%2Fz0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f\u0026epn.form_length=4\r\nen=form_submit\u0026ep.form_id=i1tfosk3kfce\u0026ep.form_name=\u0026ep.form_destination=https%3A%2F%2Fwww.exoticdrc.com%2Fz0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f\u0026epn.form_length=4"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://www.exoticdrc.com\r\ndate: Fri, 16 Jan 2026 02:51:50 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/2021/10/cropped-Exotic-Favicon-192x192.png","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:50.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/2021/10/cropped-Exotic-Favicon-192x192.png HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g1$t1768531910$j58$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 08 Oct 2021 10:03:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6422\r\ncontent-type: image/png\r\ndate: Fri, 16 Jan 2026 02:51:50 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2FnSWHcfWVYA6yNeOvVDp60F%2BcFI75l96wStYZyjIQmML4%2Bu77aZFFegpCDH9PYnLx5NlR%2BASl5hQpKz0V7Hvga2TENkJAcH2rOS%2FRU9dmya\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50382cfab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6422,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"ee21d556cc2d8b5df92b5c11808e7025","sha1":"9d18d89301a045d15515bf4c985146fc2fb57b04","sha256":"9e77656862945e9313cc0567437e83635fb60b750ddb6852e1eafd0868a5b905","sha512":"64174dde381542a222ddfced3bdffcc23f0efebbf206d9a5103f9a9da3da2a5ee329ca94d99e8765a77e0ae0774b4cfb5860bd95c6740cfcd6049039916c4119","ssdeep":"96:Fqsssss/1jN2r8D346wbRdAYkAoAe7Jfi3vk+pup3kyaqcn+dpJhYBpSLlqXsssk:Fr1IYj4dF+Y338Gup3kDqc+d7hwgM","tlshash":"92d17c81ededdcae388b946fa1ca70e74b4c4b8215baa853f71e6007ca169fc145073d","first_seen":"2026-01-16T02:52:20.29354Z","last_seen":"2026-01-16T02:52:20.29354Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-CRT22GGTFL\u0026cid=1820615177.1768531909\u0026gtm=45g92e61e1v9102114161z8853248159za20kzb853248159zd853248159\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938468~117041587\u0026z=1328625304","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:48.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:59:22 GMT","end":"Wed, 25 Feb 2026 15:59:21 GMT"},"fingerprint":{"sha1":"E3:8A:B3:9D:E4:8B:53:E7:04:0F:DC:F1:FF:B6:DA:2F:A5:13:E7:D1","sha256":"3D:CC:25:A1:DF:57:5C:E5:5E:62:8C:3E:4C:9E:BF:21:67:03:6E:09:DE:4F:C1:38:17:4D:91:E4:81:A1:1D:6E"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-CRT22GGTFL\u0026cid=1820615177.1768531909\u0026gtm=45g92e61e1v9102114161z8853248159za20kzb853248159zd853248159\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115938465~115938468~117041587\u0026z=1328625304 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 16 Jan 2026 02:51:48 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-15T01:32:59.612548Z","times_seen":949522,"resource_available":true,"data":null}},"time_used":670,"timings":{"blocked":323,"dns":0,"connect":9,"send":0,"wait":21,"receive":0,"ssl":314},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1758034680726/17580347058140-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1758034680726/17580347058140-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 16 Sep 2025 14:58:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 35244\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F08lnhFZo6zXTc%2Bc0yn5pE7NfNe7cA7l%2BeA35ZyCbgO4W9lDY%2BCfYFqQqPnWGSr9DGHVaBlHNYMIqbPQMMfF7cF5usiOl9JSblxUdxESiy9b\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50335c5eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35244,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"b5f571fc0c4ea925970a1e871a2daa66","sha1":"e27aa2b31e4fde2c85ed2884e0d581e1cac6def3","sha256":"bba53de9477863e15ad579769d77dafe87671cfb3c9fe4f42c8bf10545beda55","sha512":"410acf6085df5ebcd5c870525159b91b8db7d16934d9bf27b08116e64eff52704c4a294522a12cb8c0c43e3d1e1650aace61dc092e26cdaa90183a17fbf85d6a","ssdeep":"768:W7uW0KGh9jYWi06J1rBIzCgE+ADM1s7ZtK+vHEhksUF4VFX:Wd0K8xYTnC2gxUakHUkXFG","tlshash":"1ff2e17f9d00c2dfd5c19d7697c21a5492939fea74969e9432f76886a530898033fc09","first_seen":"2026-01-16T02:52:20.299066Z","last_seen":"2026-01-16T02:52:20.299066Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/2021/10/cropped-Exotic-Favicon-32x32.png","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:50.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/2021/10/cropped-Exotic-Favicon-32x32.png HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g1$t1768531910$j58$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 08 Oct 2021 10:03:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 818\r\ncontent-type: image/png\r\ndate: Fri, 16 Jan 2026 02:51:50 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BKxxHgqjpuRvgbIlije%2BuraT7F0dr5013O9dLmdL%2FdgOj%2BbwIZpi8aL26GlHku2QvGm1t1SimYHvWM%2B6LGPTMDrk7z2Esy5WqHXEtaAB44Mp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50382cfbb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":818,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"8115da8e01e50301bbafd41624debeea","sha1":"259e0766c2aaeae909b32e2a060e100045e21e3b","sha256":"943ad5d234800ca1ba9d5289718db461b04f9b0effe0eb3f6d6b10dd12897737","sha512":"db45b739495b3c36ae58a10de6346567c27e7ed7785a69a8950599ec472a87aa09d906f47ef860edb388f3197dd5355f6937e21a349ee084f737807c3652c8bc","ssdeep":"","tlshash":"7701866bc004203282ab3717602bf188a8334ee5ebf33b0df14992c9023636842263da","first_seen":"2026-01-16T02:52:20.301221Z","last_seen":"2026-01-16T02:52:20.301221Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"analytics.webpushr.com/impression/session","fqdn":"analytics.webpushr.com","domain":"webpushr.com","tld":"com"},"ip":{"addr":"167.71.54.9","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:50.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webpushr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 15 May 2025 00:00:00 GMT","end":"Sun, 17 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:26:C4:91:40:C4:69:9D:F8:30:CA:1D:BF:C7:4D:F0:16:AD:FA:12","sha256":"86:2A:BB:A7:4A:F1:95:91:F4:64:7F:10:11:51:84:4D:5C:24:DE:22:A4:29:C2:5D:20:10:E3:5E:43:2A:3D:D3"}}},"request":{"raw":"POST /impression/session HTTP/1.1\r\nHost: analytics.webpushr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.exoticdrc.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 137\r\nOrigin: https://www.exoticdrc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":137,"data":"{\"status\":\"session_pushnotsupported\",\"site_id\":\"BAobXuYS1yer-IMGMF0L_WIvUKWCLRYE-6fJVrZv2U5ERJHINxQSJ5PNJ-pqll8qkqJyPrysxnOQJIngnpflQ8w\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.0 (Ubuntu)\r\ndate: Fri, 16 Jan 2026 02:51:50 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: https://www.exoticdrc.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":107,"dns":1,"connect":33,"send":0,"wait":36,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1750620208448/17539656601627-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1750620208448/17539656601627-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 05 Dec 2025 22:08:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23500\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CgfdntuoZA92AE8wpwRKEVN1IQhDf0SVpUuMw5z%2Fw5Ddhdk%2FQKgRK8d7qe119bPEINlHiqIttwAM1tbAUeDFLesbc1lLvmGxD5gfY5ZBN2C%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50339c6cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23500,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"8789c9075e2a48ded52285e957ecf4c2","sha1":"156f9aabc8ae102bae073997cb01756a8ccceafc","sha256":"2057a8fb55cc8f5885bce4f9280fc90fe9f8051e484fea3e39b0bc7e0e0790fb","sha512":"1c542b1dfb9334f870d226ccfd3b530b2db23774952acb18da0a68c43b30af03fd2a60be08cfd9c4b7bb173592f3c28c4591ab135178bbcd745b1099f45606b4","ssdeep":"384:Wu5/0iXOdgoLffk2AiRuN7p3lxsXIHt7H9Py8xCllNCYQDl/ku6q5meweZz3FbTg:WKsiXwJE2AXd3lBtpPy8xCfCl/t6jUDe","tlshash":"beb2e15d672243ad6b843c285e502c4fe176fa32a4f61f99f474e85bf2009cbb552ce8","first_seen":"2026-01-16T02:52:20.303069Z","last_seen":"2026-01-16T02:52:20.303069Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/plugins/ninjateam-telegram/assets/css/style.css?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/plugins/ninjateam-telegram/assets/css/style.css?ver=6.9 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sat, 31 May 2025 01:29:11 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j78%2BZi70xOPEQYzBPC6buMkBBfGbBQMdtWYDPYFWaeqWGrHQypnYvwKQN7Npz%2Fx10j%2Bs7sOoJr%2FKrGjnXc4mQXtm3qIqTFKPxUDmqkuVNbFo\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bea5032fc44b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23350,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"793c6ed2d574510ca31db1257a58f4ab","sha1":"d6a5407ef4a41d5e0c3bdd757256e5c99cad6b18","sha256":"b018d8ac8641b19664a50de957527aebf4ac07d9b86444a60a13963cc9ef7d8c","sha512":"2ef7160e5be2827df287a9712e5e4c35ca7f3f8b2313403916905e182f79557ea66aaf71225cdab93677d83e4bdc267e9a9bdf46c091f81e886de55b46f11259","ssdeep":"384:pF/Fc8J0virSJrWURXLhnM3NH9zKTpRAsjtUtgskwtyOSYEjR9UgNGF9Rr7:pF/Fc8uvirijRXLhnM3NH9zKTpRAsjtA","tlshash":"77a212a1171c2c00f50e8916e3c65bf633789a43ba078c389765185e1fd5fe85ba37ea","first_seen":"2023-08-29T01:37:18Z","last_seen":"2026-04-29T17:43:25.427302Z","times_seen":10,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/js/js.cookie.js?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp/js/js.cookie.js?ver=6.9 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 13:23:38 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LFnkjN88pD1XBmUabd%2Bmzhbohe1DL9tx5DhHkG1oKMzllgruUqUqsuatFJrojQ%2BNd5pHpWLMFmKGwF%2F8C3uyQx64zVj4wqS9tqJCL3DCSikk\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bea50332c4eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3920,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"0be1b88e9ad7dd497850d0cb99729314","sha1":"6135d1bb45d8181ce5fbe1f350cf7d2a7263b1f3","sha256":"bc88c4ef850a7f318377a086eddfed2cbb2f413896e2bffbf48dda0e5213f2c7","sha512":"b184e9f33bb73d07bc03fed5a4ec69120a75c4b001e116ee1f36c8365bfe03d4e55f82ef8749c549009883e82a487c821c1f5402f76cb505dd64ca22c1794c73","ssdeep":"","tlshash":"758135b0bb8d35ab0e0e21145b1f60cd927ce43a085949f6ec9df1321468c2e937ad6e","first_seen":"2025-12-06T11:52:48.789144Z","last_seen":"2026-06-05T07:01:39.691495Z","times_seen":7,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1758028915205/17580289433922-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1758028915205/17580289433922-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 16 Sep 2025 13:22:47 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26244\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N9k26QjJn2Ipqm%2F6y1huLbaOvwBgBfaxrhc8PS8AgsMsmX2R%2F%2BgUXQ7nHRFHNDyG%2FCZT34JwN1ucwGropFlCcxXLGD61y%2FRbHqF5pKAWfuIK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50334c57b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26244,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"c418c335db90aedb8b2a25efb390e579","sha1":"bc16862a36eed5901a86a574466f57b1745b7fc6","sha256":"0476bc0a2a545498d9809a897c071ec5da62170cacb3b63f78392059e4f52f65","sha512":"a155ae775931eed884f882d181bd22134bb66670a7bf55de2196eeb15933b8c869ba16a085062bd7f1515056c9855ff55c7e1922325009fd61cae10ef5c27383","ssdeep":"768:W9BryLi+FoQs0DEyx50XNrjeV9AIssjBvQ+A:W93K3s0wfNjezAVt+A","tlshash":"e9c2e01582180694ff2b87bf4dd626ec05145f8bbdb83694baf6c33cce207cd1689640","first_seen":"2026-01-16T02:52:20.308556Z","last_seen":"2026-01-16T02:52:20.308556Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp-child/js/custom-script.js?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp-child/js/custom-script.js?ver=6.9 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 07 Jan 2026 12:58:03 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kwjJ1v430UsvrstyFjy5rC7UVPjw0TPh3lYif4u8Ay6RyGvITaZgg3ncTEJNILQRD73e0jXfhkDWSu3zYOLF6amhwheO2tJxnqGVGhE6Xx6G\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9bea5033bc79b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4219,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"a205002a24f61577955d70f18f5ced07","sha1":"fc4050cc14a6a454fc28698cacdcb333e6721bdf","sha256":"95359418b75f8de03f1987686e38c085375a4a7f5dc81dc9f73a5c567e1bd7ce","sha512":"0866db73b0aee4ad7d9c9bf3c668c0bfb1ca5d87de38f557cd3c49505bdb64251fc7d78fc67c23cb32c8603de6f7772fdf576acad0ebf208f6861cc99abb2be0","ssdeep":"96:Odr52droB7bvx57gSFZ1EpRD625iYb0mCL0b3:Odr52droljP7gSFZOpRD6mboL2","tlshash":"b9915c66f1831ae952b01238f93f3e347e676a17f514a358f29f83362f6750450a2dac","first_seen":"2025-07-05T10:56:21.231293Z","last_seen":"2026-06-05T07:01:39.634046Z","times_seen":8,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/sweetalert2@11 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.26.17\r\nx-jsd-version-type: version\r\netag: W/\"13803-OU4+1PlKgoH2W6mia/4Zt6JRkIc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nage: 493\r\nx-served-by: cache-fra-eddf8230135-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 21347\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79875,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48887)","md5":"0b7566399eb2f22c3bd0c00d2fcd083c","sha1":"394e3ed4f94a8281f65ba9a26bfe19b7a2519087","sha256":"dece79c79aef9e61d79ea2e5320d2ff3f60eb1e68c35d89317a23f08ac5c4151","sha512":"b7227e2290e66377e61ce500706c8556024f66b2fe83bae33514f220d7a83f3a699c9c2c18d9aa02b4ffc4844d1633ea68223fb8a55638be63bb3b24cdb862ed","ssdeep":"1536:Iwk6ey/PIZHo+DqA55l6DNJZ8VUwzIYbRd:te2Iqol6DNn8BIY/","tlshash":"e273f8916a04f03776bb45ae65d1e2047af99405fcb34854f42cc8804fe7d4f2ab7aba","first_seen":"2025-12-22T23:48:28.890392Z","last_seen":"2026-06-14T15:38:29.196571Z","times_seen":1256,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":13,"dns":0,"connect":26,"send":0,"wait":30,"receive":6,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/js/jquery.mobile.custom.min.js?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp/js/jquery.mobile.custom.min.js?ver=6.9 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 13:23:38 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FJGIqidyycYp2HwzPjaA2UcG%2Fmk7bK3GVJ15NgmlzdDZQc35pWnHmCWehXZ4qNXHvXAXGuyZVET8njrluHbC5QmXvx9bBfzVo3eQSdlkY4Qz\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bea50333c50b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7750,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7653)","md5":"8d3d3a48b2a0686a92d8e0c14c4d0cf7","sha1":"94505755446525a0b482386fb17954cd965fc4fe","sha256":"43aabee7020e85987ba5cd36787d6543ac0d829e27ac2d51a142b0d97368fdae","sha512":"41a11eb53e2a451ea91e995af4f96ab56874295898c31c61570c81a7bd998f8a1a2d8efff840d83a80b11af0f7fad16e2b7b9f3fb00fcd0c2c97ffc00ecb3ab7","ssdeep":"192:GaLtB8pfbHh5zln2Xa/Yl+Nza7Grui62y2+0TK2IJ2ruTs:GtxB557/Yl+Nza7Grui6ph0TKXJkuTs","tlshash":"b7f1814af70134ab36db236be20f4a45b1b20069594f5450b43adce0ae3813d1b67dad","first_seen":"2023-03-08T01:17:07Z","last_seen":"2026-06-14T09:21:40.325137Z","times_seen":37,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/style.css?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp/style.css?ver=6.9 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 13:23:38 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQ71XQsPQQijvgQBmbOObB7KUa4Ce0jXR0t10sLYYfb%2FZJfNiUa1qhjb8hop2YPhucHlq9XL1xADqNs%2F9QklNyILyLC5L%2FQ%2BsRbS93D3qEDX\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bea5032fc43b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105945,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (677), with CRLF line terminators","md5":"1bdbbd12560c348b656c3b454889a7a4","sha1":"d3ca3a3ac629907ec027d9fdb9ea45c05955b7b1","sha256":"f2bdbf51f21335611733bdcef2b387ee7d4913ebb336338ae35f659acaa22d7a","sha512":"ea781d1073a41fa92ab2f29c9d126260408638fd3b9e41346065ee1ffd67e8246c9bb5d034c83ce4d33285552a11ffc304611432516dae19bdb04f1fdd9c3c96","ssdeep":"768:1Y99fozPETGgFvKfgpMftn+wtxDgJY9ZobJyJn+KhG+keBKVdSMpzw0+59efjJmO:1YzrtVu0wy+b4G38YYhMu9zH","tlshash":"1ea3979ee159254eb3139af5ffb1abd45f0c01e59b0b026cf4b5726c838b4a4253638e","first_seen":"2025-12-06T11:52:48.80825Z","last_seen":"2026-06-05T07:01:39.658235Z","times_seen":7,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp-child/style.css?ver=3.6.2","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp-child/style.css?ver=3.6.2 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 15 Jan 2026 05:38:33 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cGYJFAYsS%2F1pdk%2FHdZ2SRTLiPh5fmOV8uXEARr0kP5yBYQW28oCJG06FNakdUMWmoBhwFHbQKpDFp0Z4sI4JSQtyJKKWuAlaGd%2BEVvQUg3Uv\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bea50330c45b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18541,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8a2107ce57eb7991ad49bcd3957469c1","sha1":"6859001c542af6130c63ca4ef0cf50b034a6d19c","sha256":"d867150466b02497e888a28898b29a1965e0c0caef9cb32e71fd2c67827c7085","sha512":"59617e8b57f6e0ec6d53e09409802c49b15432d2e04b0b470f171cf24b646e27f7bb5732bcf6852927b7bca7e88e3ae9632ee0f6adaa32fc22536940f3bf3080","ssdeep":"384:bYTQCsSSD+yrLEFK/F+sG77rFOF5FBmUlF8:b2QZbVQK/F7G7fFOF5/XlF8","tlshash":"99823257eae31944741a91a89fbaa768373d5043d30ecd687f9c73688f472d084b2f98","first_seen":"2026-01-16T02:52:20.261137Z","last_seen":"2026-01-16T02:52:20.261137Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:50.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:12 GMT","end":"Tue, 03 Mar 2026 17:10:11 GMT"},"fingerprint":{"sha1":"FD:7E:C1:AD:46:F2:E8:6C:37:B0:63:FB:FC:4F:E1:A4:54:31:6F:25","sha256":"8F:8D:94:FF:49:11:2A:AC:98:A0:69:08:3E:D2:92:39:94:3A:45:A8:AD:44:E5:6F:7B:1E:27:32:E6:75:86:8D"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.exoticdrc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 14 Jan 2026 00:01:19 GMT\r\nexpires: Thu, 14 Jan 2027 00:01:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 183031\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-15T01:32:55.314346Z","times_seen":285763,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":233,"dns":3,"connect":28,"send":0,"wait":16,"receive":9,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1761121265150/17611212752043-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1761121265150/17611212752043-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 22 Oct 2025 08:24:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 36867\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mNEmKwQ5bK%2FXLUDJ22u0cwKX8%2Bt%2BzkGCCYyLYlhQN19KHeVz0Qk%2B3H9zeV3uscjMdwh9fSUySm7GDE2HILCjnQHEGJ4EelJ0penMcUVYIHZT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50336c67b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36867,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"26688ee93a42c54745a735b15352583f","sha1":"ef5f7fb7220527fa0f9cbde3dd965764061cc65f","sha256":"5ccf003b2dd60388d814feb62d48be8e75033ec7f84c773a3fce6aa9411b5e72","sha512":"9fa00e0a068e1ef07e439466546a2fddc2b642d5a4cfaaa280f5a139291b3ab304272b4f285b22fc4b75b926c68ad26dac5420ee01c01637722693dd7522efd4","ssdeep":"768:W71eOqHcfk30jFoJk9ySTEVTSmqATxlCMUvN:W717qCBoJkESTEVTS1oHChN","tlshash":"e8f2f1cc972485d5bbaa48332fd0c209de919395a4b6378674fdd3284db09cf2181ece","first_seen":"2026-01-16T02:52:20.315704Z","last_seen":"2026-01-16T02:52:20.315704Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1767687360989/17676873792503-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1767687360989/17676873792503-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 06 Jan 2026 08:17:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27254\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a5SnSn3aKznQHjIuetGaFw11i1CjGxVi5LM0zegK0U%2BmaXmp56%2BVmdwUx2m6U2lMdd6kHXrAMAvVAIioJ%2FEDrO9%2FGB0FD%2B%2F1%2B5A%2BlRXyoK8C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50336c6ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27254,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"94ed655f9d3d58583c21e5dedcc06057","sha1":"f4459416f09a013b9111d888b071a9c06d7642a9","sha256":"f9e5f931b0ce5446dddd4b535d65bb78d6e26268095f7afc235a244599c6e3ef","sha512":"a5959fb27338408ccd483631c4778c5b0ef503d56035ceaa54615c1640f5484e1bf528c62a0c6ca3222c4e4c3070cf49cabe37ea3fb99141dfd55a95f8b4fc70","ssdeep":"768:WBVtXmVyI2UMCfhc7+YmnAwRyyYdKylz8dne8:WBVtNDnCA9mt4dd3Wdne8","tlshash":"7ac2e1d332167ed4c9748e5fb481ee15d81f2a85b4ef101e8670c066f12b2ddea67543","first_seen":"2026-01-16T02:52:20.31741Z","last_seen":"2026-01-16T02:52:20.31741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1760613526835/17626741455934-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1760613526835/17626741455934-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sun, 09 Nov 2025 07:42:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 44936\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BuPELJzgG%2BHmE61X%2BoP0kMp%2BuzlMhkkpCi4uCpaDzDgitiGwt%2FGtLnbC0nOsNVeSVZ8ouS%2FQi5q1GfzrGeAjQMny50jZTQ0pe8naa5wjUywe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50336c66b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44936,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"ef8396a4b9c27666e8d44d5e3a17f837","sha1":"9912e9f66feb252fa6d6131614135835392a1f95","sha256":"92844a7cdc37c4294afa02f160003005b6b384a87c82ffa4e745071fba1c264a","sha512":"a966d4f4fd8a1d399a58af8add85305130b0aa3deee2a9a0aac3992081099d5a5745ef7ee85988c6e7539192269bd4ace30f89e3d9e1aaca6b84cb19621cd2bd","ssdeep":"768:WUwkgjGZZulLLBMxuPsB6MIUTIMRw3hc/5SLU0Hj5nbfMwU0f/NZubB3bYA7/2w7:WUw3jGruJqxksB6JUTtw65SThzUbb6A3","tlshash":"7513f1edb4dd06701910ef76d16e242f4cc976fa46ad909e0ca0d16e6d18af8167ce0f","first_seen":"2026-01-16T02:52:20.319024Z","last_seen":"2026-01-16T02:52:20.319024Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:50.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:12 GMT","end":"Tue, 03 Mar 2026 17:10:11 GMT"},"fingerprint":{"sha1":"FD:7E:C1:AD:46:F2:E8:6C:37:B0:63:FB:FC:4F:E1:A4:54:31:6F:25","sha256":"8F:8D:94:FF:49:11:2A:AC:98:A0:69:08:3E:D2:92:39:94:3A:45:A8:AD:44:E5:6F:7B:1E:27:32:E6:75:86:8D"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.exoticdrc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 14 Jan 2026 00:01:19 GMT\r\nexpires: Thu, 14 Jan 2027 00:01:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 183031\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-15T01:32:55.314346Z","times_seen":285763,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":171,"dns":1,"connect":31,"send":0,"wait":16,"receive":8,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1746202121967/17552646912227-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1746202121967/17552646912227-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 15 Aug 2025 13:32:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38718\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N7rPRo6sOq3OYv%2FUveFuv8aDNohJ%2FQB0JOwgo6KuTzWLImrkxmzUPuZkGnD%2Bpjy%2Fqr2MEruj2HWhnb4rGAzke1se3EK4KJuW5N3Uk%2BZQciHs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50335c61b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38718,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"5e13b23afa1061f92d2ff9ffb7425120","sha1":"2ed968c8e24009dd5954ebc34bc71a5227bc6433","sha256":"8856457b2cee00bb202bd604c8e0f36043fcae17ebd6150d9dc6bbab2c49eb51","sha512":"7678adaba604150602f8e3ac4568ea1cdcfc2a57ae234f6052767da333772ea68861147f425ac4c9c4fab708c015d823bad62f46931ed35830583e1fdf784bef","ssdeep":"768:WQawS8ovCCJP+GGNLF3JC/tlz5UrC3TxG8T8T1spt6z/VdLAqgY:WNwovQxhY/tR5U2dFwTWptc/vX","tlshash":"a403f01fb5cd8e63c9cc6d1d2a29be99bae5cc47d91657020432e17088011cd9e9ee6e","first_seen":"2026-01-16T02:52:20.320875Z","last_seen":"2026-01-16T02:52:20.320875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1757151782255/17653832279750-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1757151782255/17653832279750-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 10 Dec 2025 16:14:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27517\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fql0KqfAMW8BVtIVgF72%2B8Upxr4lACKGl7678Oj3MYWfff8ea3tfgcj1HYLWwTcedxxu2SF5GG2kq92BSqIuNEZkflCzeW3byupGSTgnvULj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50336c63b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27517,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"3a1074703af0639e844e96bf95d98eba","sha1":"e6e3366ba5f53c9aa95b2860414201114c938ca1","sha256":"4315f60bee612cb3329eb4dd1e98896124c2a93f35152524a8d8caf48a255334","sha512":"32755c8ddaf6dcd9c2687e0605e8560d106019de84acf02079675bc5e3ee120dd1af987d4f6e5a2a6c9cd0cb88bd02ce4f690795e39812ae890505a0d9c6ff98","ssdeep":"768:Wd54ZAds3kF1VzhAlYKjfUwIsbilmt/gXAg7fMk7+:WP4Zos3kFbh0YKjfU4bKmtYQ41+","tlshash":"68c2f118d6aa87f1a83d7e5a131d59d095b0b440fa3d673639bbf5300ac48cde91d0fa","first_seen":"2026-01-16T02:52:20.322468Z","last_seen":"2026-01-16T02:52:20.322468Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/plugins/advanced-ads/admin/assets/js/advertisement.js?ver=2.0.16","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/plugins/advanced-ads/admin/assets/js/advertisement.js?ver=2.0.16 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 05 Jan 2026 07:45:06 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Egpjninn1DVnznAcBK3Nzt%2F8flnAmyROKd2qVfA8tJTUT4GfoAu8x7Q31F%2BXWqFgOmMVzQoU201jxArssZ56i3TnhDqQ9X9smh5AKuv8n8G\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9bea5033bc7ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"b645b5402a5096f324a6b37d0a3259c0","sha1":"3741b4d49e4ab0034f34fdb9ce5afaf96f940b47","sha256":"2878e3b9f4818d49affee273031a409b8d24e264b58eb3f4d9b0d1195a6d2ff1","sha512":"a86a7ab81b7c02c027c34b17282d0a4150649a47534b73c86d6ea7d6109584a5f8594063227900d99d84e5b9f26b54a65654be2b75aa33b20c0a5f8700ee50fe","ssdeep":"","tlshash":"49900210815501d9b02041511d06e4e2e8904460c7423de28194400c500a540005005a","first_seen":"2024-05-04T21:47:36Z","last_seen":"2026-06-15T00:01:24.178507Z","times_seen":10223,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/plugins/ninjateam-telegram/assets/img/telegram_logo.svg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:50.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/plugins/ninjateam-telegram/assets/img/telegram_logo.svg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/wp-content/plugins/ninjateam-telegram/assets/css/style.css?ver=6.9\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g1$t1768531910$j58$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sat, 31 May 2025 01:29:11 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 16 Jan 2026 02:51:50 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2Ftv9qZxGWA0VaVQ35UmFk20%2BMjzAj9ZvTI3shyCfXHCWq1L7cxp1bsrW5CawUzvuoFeXKCYKJ0ihsdtR8MOFACOczmMXACwr0pmZU3MhUma\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9bea50398d09b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":545,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4c3c6d6d5c7eb0ca0ed6e45cca4f46f","sha1":"bc8f66b6671c9443c137dcb7a6a5d2721eed6f07","sha256":"b4a306f9d5556f77e728e6966f9c3fc4c7331410a6c8ed3980ada4e2de9be834","sha512":"200594b1d8e6e20c8c1201cd4de5352131f35b7addc6e7643bbf1a0038cdb8a2454db73a963888b3f20a4198bd1720faffb64214440e69163307353f9f536893","ssdeep":"","tlshash":"7ef02b57435287f5be49441c98207454869ce9db609091c96bff0435d40daf4754c79e","first_seen":"2025-07-05T10:56:21.179656Z","last_seen":"2026-04-29T17:43:25.425367Z","times_seen":10,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-16T02:51:47.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 16 Jan 2026 02:51:47 GMT\r\ncontent-type: text/html\r\ncf-ray: 9bea5025fca132fa-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-edge-cache: no-cache\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C0bnxTnVGPqmtsbWoAlXgx%2BYZWyhjFDoDvwThAvW%2BXXgIFuBbV9g3KQJ4iqFDDTnaT61TffLvDxRKnWB5PC2u1xYAb5ffxcDR0wH5NxYEx7B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12314,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4722)","md5":"11219e0697fdb687fdf6f481f84526ce","sha1":"f8dc651bbd136a2c5ce282a31d3a642bc8210854","sha256":"4747a355099958a80c9dd6bacbd39ee0f053ddbe7129321fb77c5d07744aa86e","sha512":"ce47c6fdaf80e0dd5b8750bb83cef7d53ed2f27aed60df941a73b2662e09695865c89ac736835e52aa5c59a089b5faa86db5d67d2033930a00250400cd5eec14","ssdeep":"192:IYBXHNsGeTHQpD+da6+888+UV7tDoj/pxzIqyiXecm5MtPoEx7UZ:IYBXX+/DV7k/3Iq3ltJx7UZ","tlshash":"df42f78cfa9173a0f21713de37bb796a213960c32418ca50f98d5ee47f067cd8647a59","first_seen":"2026-01-16T02:52:20.325695Z","last_seen":"2026-01-16T02:52:20.325695Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":25,"dns":8,"connect":1,"send":0,"wait":156,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/i/video-th-icon.png","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp/i/video-th-icon.png HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 13:23:38 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17984\r\ncontent-type: image/png\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ATzru61vi4U%2Bt1JGT2r3N11r0wa3c01Ev1RmSfngSLH6brq43dJGN5a9gSaIj5GWy84TzsWrPEBF9qSgarev4KEysWJs%2FOYqYTPWdqJOky%2B8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50334c58b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17984,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"0652bc2712be02ae118bc0de7ef5aa5b","sha1":"166d12c739d46f24e5a225c456cefd4a8a6d7257","sha256":"60bb32569cf3736577bedb8fceafd141ef81fda4d24082b369bac69fe15e6da3","sha512":"fd37aeabf616cbedf2cff9fc223b112cdfd0473c0ecabc29a981c3c7d82e2e1b031ba8a22d6bd4cee0a79cbe1a3e0c6d4ffc22f54f173ccb1b50f059651c7e07","ssdeep":"384:Po25ZhGorBeuAZalLpCfrsuLyFEDVTjPbf6JLaAgg7JJW+LYItgI12KCW8h:NXGorQnqoI+VTTbf6JLa2SfIDa","tlshash":"ec82c026fa9cdc99c100bd801174800738a79dc09f59fe1d26dad6bcda091ec9e62676","first_seen":"2023-07-02T02:12:42Z","last_seen":"2026-06-14T09:21:40.343388Z","times_seen":10,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1751987224420/17519873148006-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1751987224420/17519873148006-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 08 Jul 2025 15:09:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 59735\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a1ASQbieYMHbVD1veh7ymJF50A%2Bg%2B37EEgLbfdWdI1OeRPpTXdtmXHc5xXCVghp8zoUGkPlJJJoXfVKyoijmWD%2F0BwcM0lF6FfKtkLiQLxno\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50336c69b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59735,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"a244fc798b5d244ea3f95eb110f5d320","sha1":"420eacadbcdd93f35ed2f374836005a5e191e4e9","sha256":"e4364b5fcf9b648520d8d06893d12efc1f96f8a55902a0bcfeab93779b7a0ae0","sha512":"b80645f44b249bbc18a94473363781dd95fd6aa6d8f63bf047b490aeb3812e5bbc3d004e82510248fe24cda66dc5ed5053c7250682f0816245a6990fe7cab990","ssdeep":"1536:Wbi02Wfppt+oECM15rEH7CXU2vAZmowxHt2Owy6:rWhptn3n2ZIZFwVUOX6","tlshash":"db4302c3ef2223bf37098e7901faa45c718c8541ad38d2ab47b1d62f9d25bc59329065","first_seen":"2026-01-16T02:52:20.328075Z","last_seen":"2026-01-16T02:52:20.328075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:50.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:12 GMT","end":"Tue, 03 Mar 2026 17:10:11 GMT"},"fingerprint":{"sha1":"FD:7E:C1:AD:46:F2:E8:6C:37:B0:63:FB:FC:4F:E1:A4:54:31:6F:25","sha256":"8F:8D:94:FF:49:11:2A:AC:98:A0:69:08:3E:D2:92:39:94:3A:45:A8:AD:44:E5:6F:7B:1E:27:32:E6:75:86:8D"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.exoticdrc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 14 Jan 2026 00:01:19 GMT\r\nexpires: Thu, 14 Jan 2027 00:01:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 183031\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-15T01:32:55.314346Z","times_seen":285763,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":113,"dns":1,"connect":16,"send":0,"wait":17,"receive":21,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:50.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:12 GMT","end":"Tue, 03 Mar 2026 17:10:11 GMT"},"fingerprint":{"sha1":"FD:7E:C1:AD:46:F2:E8:6C:37:B0:63:FB:FC:4F:E1:A4:54:31:6F:25","sha256":"8F:8D:94:FF:49:11:2A:AC:98:A0:69:08:3E:D2:92:39:94:3A:45:A8:AD:44:E5:6F:7B:1E:27:32:E6:75:86:8D"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.exoticdrc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26596\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 14 Jan 2026 00:05:04 GMT\r\nexpires: Thu, 14 Jan 2027 00:05:04 GMT\r\ncache-control: public, max-age=31536000\r\nage: 182806\r\nlast-modified: Mon, 15 Sep 2025 16:30:32 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26596, version 1.0","md5":"dae1850484b86d299c31bc08aaa563cf","sha1":"dca808d6d16965c40bfba4e4b3c8a819f843890d","sha256":"8f80f993e523f2e6c2d097552740fd26331658da23ffad31d26edcdd3aeec370","sha512":"69b34f2652aa731ad29fe49a8cea85ebe4ef402573a10048598667f94b7a7855e534121f22d7749b81762b3176f437de607745df82b71484c4ab7c9f8bfd40e9","ssdeep":"384:nYOl9Z/81DjYTaXQMfCMNASNEVM9mYQdpx1sLt/zEkNKxgmS8AXACAU:pJ8NY2XQk0omjdKvKxgCAXACAU","tlshash":"9ac2e13f487a2046c71227f8ee5fc9b571c360a35ab32345c26748650db0ea93f86776","first_seen":"2025-05-29T21:46:50.299968Z","last_seen":"2026-06-15T00:57:50.491999Z","times_seen":38701,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":116,"dns":2,"connect":17,"send":0,"wait":22,"receive":6,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1726142593204/17648594997490-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1726142593204/17648594997490-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 04 Dec 2025 14:46:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26288\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h6%2BvSnDurhpcapeQwGMF3EzofSWO53Nx4VfK3EjpFENEtzWuhoqOft4KnqV4YAQzLLAfXnlG%2BFOvaEN7HmTtthNkWYi22gbBiH7pyaGhc52O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50335c5bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26288,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"b8c070265d946c45ae8aa0fd0abd40e1","sha1":"530ef4412e206c281354b526bcb6727d69479822","sha256":"63d198ffed75ee6da57d7a5efa0172cbbc5042b008fd5b6f635e02d1e2a6d0f8","sha512":"05052a86580ecf4df3edddb4aa3a40d1280c49e3896b175ba2b5dd1b2eea86fd3208dcbf5c849f7eb53498cc897c3f8962538d8fb068f2bf8d737de747a1b3f6","ssdeep":"384:WEnbAUN4NE82h9IHLIFPinJU70I/h1WjVpw3Z0p9mxAuJTtT6Ymhtw6zQIuHkbUv:WEnb18YPQI/iw3QGAwNwWobOtOKpalxW","tlshash":"aec2e14ab76268fc49186f54d9050ebdab1c7b46369cc3b93726f0122d02fd56dc056e","first_seen":"2026-01-16T02:52:20.330575Z","last_seen":"2026-01-16T02:52:20.330575Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 28 Aug 2023 17:14:24 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RcOh0%2FD87f%2FsYV20vlrnXP1GDTWrSCEfI4twSmV03i6CVl0KD%2F2I0QG5FkC5ZMvQmMVz%2ByiYR6uXzrr0j431i%2FFUUMRrA7e1E78TLR2F2wbp\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bea50330c4ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-15T01:31:12.081579Z","times_seen":907239,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1767164237299.gif","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1767164237299.gif HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 31 Dec 2025 06:57:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 392312\r\ncontent-type: image/gif\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dbbv63FtxtLJ9S0TeLosG5XHhEscYIQ2iIlPjQYqdGe2moPXPJ6yQGH5f%2B1oYvTCI%2BAzSOXaFn8OBeTtBCpnWb1r8efV9bWoFVKbwirFcqmD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50333c54b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":392312,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 252 x 74","md5":"3c5d32d64245dff26a45e966a1140250","sha1":"089d98e8f8ae61b4e8b0f819b7a28c5c3344aebe","sha256":"5938ed2dc501916fb137b3f7fa9e998fa2dafbac56dbb304159b5c528cfbb1b1","sha512":"90c4fa4b86e51a2e9f2d5cbb044c3dea6b8d77e203216a1362de4b14a11566dc4c4da4fb4b1d1ab16bac4c32676ee5089b0f4b6d3182d0f5c7c7c48711208c6f","ssdeep":"6144:O/7EJUCZy3UB6G1mwmlyxEi3NCj+LAmQ4ON5H15wY65iF6WSl4JgaCBUgHRgZsT:YEJUky3a6o2lKP3i+L+NV15wVDWgaCBJ","tlshash":"158423cec504de5eb1461e3b495c9f4c2dc8ecb1614fa00b98b22d5961489fe22eed7e","first_seen":"2025-12-31T14:15:37.821826Z","last_seen":"2026-01-16T02:52:20.332991Z","times_seen":3,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:50.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.exoticdrc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 16 Jan 2026 02:51:50 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 77160\r\ncf-ray: 9bea5035ff56569b-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5eb03e5f-12d68\"\r\nlast-modified: Mon, 04 May 2020 16:10:07 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 2335338\r\nexpires: Wed, 06 Jan 2027 02:51:50 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HC%2BrIz5OlUBveVFM0l%2FOV7bIgQ72aDEdR0nVz5Op6H40i201f6c5edIXDwXWpUQ4wK3%2F98ABZv%2BhQW%2Bs12SVcQ1HlwiAppp3Dm1RSBB0n4k59haafE6KUx2Zp%2FrjZFPrjQ41OTOD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-06-15T01:32:04.017048Z","times_seen":495755,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":18,"dns":1,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/metrics/?id=G-CRT22GGTFL\u0026cx=c\u0026gtm=4e61e1","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:48.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /metrics/?id=G-CRT22GGTFL\u0026cx=c\u0026gtm=4e61e1 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 154819\r\npriority: u=3,i=?0\r\ndate: Fri, 16 Jan 2026 02:51:48 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bea502aabd3b28a-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: private, max-age=900\r\ncontent-encoding: br\r\nexpires: Fri, 16 Jan 2026 02:51:48 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-headers: Cache-Control\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7yAAoUjjcrzdGlOPkcs192vGxbXN9Xk6lusKNcDXwkqnF6xUT3E5%2B8pypr0TEiwlkjEZc%2FDyqRlKmcJLy4il%2BqTnhs5oC6s2FvRFc%2BVOuFbY\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":475166,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6569)","md5":"93de62d8b5c3e1ec5171fc89be2ca4d0","sha1":"35d1346914b7d5be0a0c24fc8c4fc919605c6bbc","sha256":"e5b8850ade47c72c1f4a40cd249dc09d50a095efb9bfdce8add7f22bdedb8e67","sha512":"3777669203801f156cd919b835239aa2ac6e66497bb485e82b9b347b6dfd798a0a04334fba1ce045dfcff840c9411ec7c2948fc9c4675bf429bc78e1ce9de77e","ssdeep":"6144:NWgkuoRnbh1uGvjHjUG2tonoJDfc1YgdxBX83ospS2VK7CO:vqbTuwjFBnoMX83V0","tlshash":"c4a4098e73c674265396f478503f018ba97b29e2b45cc896f189cce02d74a9a4277f7c","first_seen":"2026-01-16T02:52:20.265945Z","last_seen":"2026-01-16T02:52:20.265945Z","times_seen":1,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1758032293518/17677839777381-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1758032293518/17677839777381-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 07 Jan 2026 11:07:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 47962\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x27dEA09k4t6%2F%2FJwX8qe0KmEiNwBCZxhXVV4hPRoS108R37q3E1bWSbIzDzkdqcqaLxXeqrgoLI0ICWflQ2s%2B2W3OpGJg38EgqFHsyLncK5Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50335c5db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47962,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"4fd834d7063c62e95746c866f012b9d5","sha1":"e7a588ed640f0cc7f4cf04fc95bb0ae527ec2eec","sha256":"20009eaeadbd49a81df4692bf29bd123caaa8358225fee272d0f9dcfee5f6c47","sha512":"9c44ea6a9c176d10ca075676ac2e3c5e6cdf3b62232e066231701ef1f4a603cc27eeafc23815211d89f9cd7b25f10e18de2cb44350a72ed487c3ab5e1b3627c6","ssdeep":"768:WoYi4fb4XzJv5oSA4WeZWwcz2a3al1222UASXO6hsTzl1YFyqZUOS6tEmwAFNAh0:WoYiqb4XVxjplczI1226SdhuY1ZUKtEu","tlshash":"6223f133c264a601cf19df426fb41a4986236217bbec3dd76739c9b4b4b0d98960c6f4","first_seen":"2026-01-16T02:52:20.334438Z","last_seen":"2026-01-16T02:52:20.334438Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/css/icon-font/style.css?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp/css/icon-font/style.css?ver=6.9 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 13:23:38 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SoqzcGbBjfdELSIKk15hPWmqRnQjkqKdfQXRSSsbXeWrSyRl5rc5vgoKfIDhfED%2BNxT4a68hv6yfEbrbPm3o9%2BwZ%2B6gV2Tp20IjCsygAtL00\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bea50330c46b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17328,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14555)","md5":"051fb6af9bd00e6e94f62f694d4bc5c5","sha1":"4808381bf14161f51a8db2b1f475f1aeeb83be71","sha256":"0e7eeee4b1829f483c33c788ddabe9645b6ae5dbc544b5dd9b27618f6a205dff","sha512":"376883527d5676e772e7d5ec88d2ed7ca0137b5df21261e3ed5c11d426f596f6bd60f52c33206aaf55d0cedd1389022b35dad84e31966c42848dbad04f655dad","ssdeep":"384:Pv4PyLuu/vhjodq/vaC05/lEdUhmXsjEnFtZYXYdA:Pv4PyLuu/vpoOvclEdUhmpFtZTA","tlshash":"cc723af5977d9ec26b13d8c250022aa0bf0ca65f8f991d94fa96345ca1e6250cef53cc","first_seen":"2025-12-06T11:52:48.811193Z","last_seen":"2026-06-05T07:01:39.668366Z","times_seen":7,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1746438215821/17527691408586-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1746438215821/17527691408586-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 17 Jul 2025 16:20:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 41604\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cY6xpekv3bJ0PQyaobAR%2Fr88vhfOvLXNfIWQxO2yh1S0WU37%2BZjLjz7DBqrHF78hrAhcaKlvo2COKghRPKVZ71anMASiXK4vM2noSyX55bL8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50335c5cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41604,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"03e50127ab7b8bedefcdccf28ff8e4e8","sha1":"ebe3fa35f986c6395a4d9ec9ae59b32bab03a5ce","sha256":"91d94573ad5e11649ebc8700666ab0f540573223207c3ff9f357de14c5451189","sha512":"cf77bb9111b0bd60027e20fde1e4c4bd145431bd6bcec5d02d7c419292d77b36b51c48661d225219843657fc24581a33be7d5038ccf692d2dc6334b866825d42","ssdeep":"768:WJNtSvZxXUCZmsRxvHhsjh05iVh4TJH8NUKsj15fttempRP2e:WJSrELs7H40YcdH8ajj1hqmCe","tlshash":"0c1302b882b523100eb2cdcd0a4b88fd724cbaf392dc5705e539dd4a8b4b165729557f","first_seen":"2026-01-16T02:52:20.337351Z","last_seen":"2026-01-16T02:52:20.337351Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1767009483511/17670094999570-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1767009483511/17670094999570-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 29 Dec 2025 11:59:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 41948\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u%2FyLs63i%2FXqnZxlB0lhUih2PpA1K8Ikb2u9BzfeXCHtBvw6C7VXoJOf62LRsIyWx%2B2X1SxPADKVQYVc0B2DSDvTVodJX%2BZUm9WcipGRJ8ZHJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea5033ac6fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41948,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"2efa6eeaa1c18d19caff6582c36b6f1f","sha1":"24d469fa5340f3918fcead2fd9dedf7622416f61","sha256":"4fd129551d0d542dcf78f923306e4c9e54f0dcb249282a218856bc3044fa8632","sha512":"de0b311eeff663cc4a594ab6d9514c45e5e64232d7ee7612d95db400fd8565fb5845f915a97a3af7d569203c69537bd126c281d718c296e180c81f6e0bf3e219","ssdeep":"768:WwkzJ7NJm9QOAHh9h5gHG6XJg4tJwf3XeXLE9QPmiDWsl:Ww2J5JHOs15gHfe4Llbl1ysl","tlshash":"1613012614a5321d86f8cc1f785b9592f5d4abe0da63434bab23c942f57f5cb043a3d8","first_seen":"2026-01-16T02:52:20.338971Z","last_seen":"2026-01-16T02:52:20.338971Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1765974573236/17659758292425-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1765974573236/17659758292425-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 17 Dec 2025 12:50:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 63981\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mq6UyM4ZmvlLHGu81WZU8tSTgbI1%2B4UvBlwVX9PEognJwP3zZb%2B1AtAKbBbhMBawBOOOYzKTFQO0ULuTC1B0Wv4H%2BK5VPW0EhySydAHPih2x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea5033ac74b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63981,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"4d25d86d3cad88396fa203cbd2912bbc","sha1":"f9f144dd9fb1213d51d50f5a8bfe838a04807c51","sha256":"b6d90af489cd2e385f54feda185c8f23f2ca5ad75a9ba8219a5303cd5aafbeb3","sha512":"b8d2ca1efe096bd917a7ae235c052590329ad555b616a1304d94777602d19d616b1098d79dedf6a1f6cb86e9eb68cb403215a44d224670281ce06ffc328f55a7","ssdeep":"1536:W2P9fQXBr4sSxC3EwGgmYyp4n4Jl0UOcrpTTIc0TlX8L8zUXlfgb:FiWtL+yTJN1TTmlX88lb","tlshash":"7e53027c333c6225fee26e10d40a5f6b672b84867312327d6d21e65b1b418f6a18939f","first_seen":"2026-01-16T02:52:20.34057Z","last_seen":"2026-01-16T02:52:20.34057Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans%3A400%2C600%2C700\u0026display=swap\u0026ver=6.9","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Open+Sans%3A400%2C600%2C700\u0026display=swap\u0026ver=6.9 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 16 Jan 2026 02:51:49 GMT\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18042,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"7e4020d8a688b570ac502982085e9a77","sha1":"ed35f4a1150de851fac53b622aebb5955dca900b","sha256":"5e6cc8b928d64004caaab08fe27953386d0058c7062b0515fb2566d0d3c51c63","sha512":"7af77729d17e6ada2de05cfb9827f64e1f09a0389aa274ecfe4322e33891d96c3ca4f012eba1b25368e18f100653d2f382106f9dcd97f2aab5a98b7c3ddb57dc","ssdeep":"192:aCKKf2XdrqJnbqGIwV4jozYJCMMV2NnrqDnbqGIwV4pWzGSC77u2mIrqUnbqGIwq:Jt5qY4yf/qY45uOqY4P","tlshash":"80820a9000171850ab435de633ce7e34ee0f92666044d07a6bfd8b9bdedad6963b431d","first_seen":"2025-09-17T12:52:38.383192Z","last_seen":"2026-06-14T21:33:14.01025Z","times_seen":5758,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":227,"dns":1,"connect":21,"send":0,"wait":34,"receive":0,"ssl":232},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1766413147938/17664132404892-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1766413147938/17664132404892-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 23 Dec 2025 06:04:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43027\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dMnjm9Bn%2FLhnS5zHbKRNMR7EessNwlg1zszp6MR1QQvc2U5uB6jMkNwL%2BMVTX7Cb2kTLzOresiaVsO4bE2I7scZzwyhcDmPc3OBd3G6txKMj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50336c64b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43027,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"c788737ab969fbcb875192ebefd360c4","sha1":"da0d9035b43373e1762150937a71b227008928b1","sha256":"6dec409b22ea2719109e0f979cdae5bead047b3e5be6996ba37fd8f7a4cbd834","sha512":"fa4eaf4605ad15e5c38903f75bf81c94dfab71988575ff7a0545b9931077ae25856cc3332e3de8c809d4732864ec86fdc47b431001f6d0e128ef3a5fba07591b","ssdeep":"768:W0aj0sirOWtuSNwhOSUKCnorGrLF0b2Lz/BGNb9BQuIvi9EXLMQQI:W0ak+SNwHWlfkHQTa9E7x","tlshash":"ec13f2cdfa4813a9c15e980fe964484b5ceec261fd19c91d0476ecd8d622ac7d528c9f","first_seen":"2026-01-16T02:52:20.342865Z","last_seen":"2026-01-16T02:52:20.342865Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1764665641672/17646656677832-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1764665641672/17646656677832-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 02 Dec 2025 08:55:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 39493\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mlguh3gY2NzaWQ3n3zv5f41mb4BC0RQFcSEt02dtEpodWGeOddQh7kxv%2B1D81eqP1y7Wm9xT4mtNVhTNPDlLNwxtFkaZuE%2F4XCAAxez1Vkdj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50336c65b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39493,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"bc77130e3482fad0c3116a341d598937","sha1":"0bfd0da70f7d1bd25d34e14a22f0a5308dac30fe","sha256":"b63b098a65240b91b4600c58f40e883e4a3d1bb758eb87a3e5c2485cf7b5c67b","sha512":"99802f9bb8979db8fcf5d8f047010ee0383b75b1d107e59d498caf597f19f2048afb37fa53cbb32c17efd15542f5e1d4a765f1f2e65ff076e0409e27bf73c854","ssdeep":"768:WE8q+XRlkTokrwEbLYlle8Lig3L8PfTOqmeos5z6C7D2LkLRe548P0:WG+XwlrwsL/afL8PWs5zND2CFR","tlshash":"cf03f1d1b7f1244c6e4f8cf4a69a44adfdb59412b199c53d48f28e60e8410dce6e4b1f","first_seen":"2026-01-16T02:52:20.344521Z","last_seen":"2026-01-16T02:52:20.344521Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"exotic-ads.com/display/items.php?49\u00260\u0026970\u002690\u00260\u00260\u00260","fqdn":"exotic-ads.com","domain":"exotic-ads.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exotic-ads.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 03:14:34 GMT","end":"Sun, 05 Apr 2026 04:12:01 GMT"},"fingerprint":{"sha1":"80:EC:0E:2B:88:E3:DE:6A:54:1F:3B:6C:C7:57:E3:52:1D:76:98:33","sha256":"69:50:58:83:B4:89:0B:E5:B3:FD:56:61:F2:03:D2:DD:1C:15:27:D1:0A:07:68:AA:8F:D4:D7:4F:2E:6F:2C:3F"}}},"request":{"raw":"GET /display/items.php?49\u00260\u0026970\u002690\u00260\u00260\u00260 HTTP/1.1\r\nHost: exotic-ads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 415 Unsupported Media Type\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y53xOoHApG6%2BM%2BI8tYUDyFSaxoiPZ7YiEcDR4cRUEkHeQYQD%2FZmGVPlWCRR5sjke4frAA32kcfI29Tbqxm1OlouPqFRH5ztAsr3svSsp\"}]}\r\ncf-ray: 9bea50338d084e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"415","status_text":"Unsupported Media Type","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-15T01:33:43.424583Z","times_seen":16429506,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":25,"connect":1,"send":0,"wait":182,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1764840587542/17684644948896-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1764840587542/17684644948896-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 15 Jan 2026 08:08:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 40870\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IKKGl74TRSe5q8HPXLb3G8iz2z3b2KmovvgRZ1Kdchbv%2BI7llXhG35G5UbXOcmNpTGRdQhNkhQTVKkKwhLqJnf82eys3eMWSK0o0GfWjQecF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea5033ac70b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40870,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"24b8c8636d9b1829f74e4c76edd83112","sha1":"41131065c445e7c2285e383ccfc5b158e26cca55","sha256":"46ead8a92a0946b1fd9b7d974fb40553098f045acbb8d53b2ecd7269f2456a96","sha512":"6213e81a2f1c8848da67e286731fb3361227df69cf82b6ca2d593ec9fa3cd0b28e469e83a690ceda9c7d1dfd54a846e9eb744d4229bcfb123fcb8fc78add42e4","ssdeep":"768:W3dw2x2ycw8N0/JVVL8sdZF+/cum9Iqt3Nv7vS/t/Axcgirl+0AQjjAPJQ2UAPBv:WNwXycSbAKLCcue1vSImbrY0oQgJ","tlshash":"7a03f10b821bd72549d67ded7adc094dcc0338526428fe66863af98e67094cb4fd1c2a","first_seen":"2026-01-16T02:52:20.346124Z","last_seen":"2026-01-16T02:52:20.346124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1742831865296/17683071086219-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1742831865296/17683071086219-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Tue, 13 Jan 2026 12:26:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 40704\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mfVZdAcJmsdAvbS4YNFMotzg3wHUjG0P1Nk34HOCDSOFaxC586VdTiiUyr%2FjkRykRmYkYF2MdwfcPo0TpGPQnkx6lTInIFUdJSK34z%2BLxKJ8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50335c62b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40704,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"d2d603547f22cf7e8103f4ad07931f56","sha1":"69f7959a33e723e0a9433ebf7f917f074de6d0d1","sha256":"4af9b9f6269b41c8e90dced8f0809299017ffe530292d0f5ddb133e291d80263","sha512":"606e954d3b41387437acb9326d4b45b2890ca904f7e548f2feafd74c5ea8650c46179b3fbb76f59e158604a64b85821d0167d6f3d2650897b42ba1dd985d7f52","ssdeep":"768:Wgq8HJsHfo75i5nttrnUV+JnMnAYcjN0SoVNbVg3WltL8OjedOybO2SV:Wgq8pF8trGXn+N0TVRt9IOyaXV","tlshash":"7d03f11543c71e72ad2b2fcaedd0408544ff4c6ac25e9437adb18d62ce822c4b01b69e","first_seen":"2026-01-16T02:52:20.347852Z","last_seen":"2026-01-16T02:52:20.347852Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp-child/img/login-icon.png","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp-child/img/login-icon.png HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 07 Jan 2026 12:58:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3079\r\ncontent-type: image/png\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uxos0WWIK7wHt51%2Fka2cOnZMIacNL5QGdeIzeakc4QaMFTEO95owXT0qES%2B9ESW40iV9MyAJV5B0LsDEu1J7%2BG1Iu1WHk%2B8rIRac1kq5CZ9y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50333c53b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3079,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 21 x 23, 8-bit/color RGBA, non-interlaced","md5":"d74dc01047eb013622d13ac65e8199a6","sha1":"997d979ec6d3afe71a464b77b126663ea4eae0eb","sha256":"758d30921ad67c4821e38ed8566a3e08bcd5d3a6b28f64fef9c8acc86d21f9d0","sha512":"2007e79ea71cca0663e681f61802536d404ee8667408b67d167375a0141cc77cabf83f9cd7776eb175d05ae0739b33443792a23847cbca9f75f9d44f5cc03f3b","ssdeep":"","tlshash":"c1517cabda60a48f788e7a410ccd1201e769333c8a96363894d296ef0055e0b6f56071","first_seen":"2023-08-29T01:37:12Z","last_seen":"2026-06-05T07:01:39.689146Z","times_seen":9,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/themes/escortwp/css/responsive.css?ver=6.9","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/themes/escortwp/css/responsive.css?ver=6.9 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 19 Sep 2025 13:23:38 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RbNpca67LD0gk74Ka08X4Jp9muc6E1qbZ%2BgEJxQXTweejZepa%2Bq7VoOOli%2B3I%2BXx8K%2FhLNBreAKIr5V7Va%2BrJ6IVDGytkcFxJsb0b5BjoygX\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: 9bea50330c48b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10975,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"08749bf76140c33b8817a003ad111dbb","sha1":"2fe0dafe4abd654be2fdfa40fc8933b0f313d2cd","sha256":"e5548bb6062b81b9030e0613ba835153f17e1198131b60801837c100cda41ae4","sha512":"f1c8a3b7a64a795712c444c3b95be78af595736e47ef7fd329375471cbc7b28f62884517273cb735c346898e32d0b32286a455765472e2a601f564d98409956b","ssdeep":"192:5sGexIhM5oDPOVDO5L0wP6NvSjYVzWtO35wEDj43zuDOnhMfN6c:5VQITEK5L0a0vOcW13zuDOnefN6c","tlshash":"99320d0ab115220d479297f1fff85eb89d3940a433a701f8e499112de29b9494ff1aef","first_seen":"2023-07-02T02:12:42Z","last_seen":"2026-06-05T07:01:39.647153Z","times_seen":14,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1766831811980/17668318426655-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1766831811980/17668318426655-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sat, 27 Dec 2025 10:38:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 65607\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oml9Fpu59kqBgHo4ndciNiAJMTLgPbc6%2BQ4rFwhyR86LOttIyMKH5N82%2BLTWHF5N%2BjKOi%2BfK1lBa6zhKOJqM%2Fa9gCxdZGM7FIDQ6RAaFAe%2By\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea5033ac72b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65607,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"b3cce199004f1eab9596de124e771412","sha1":"e7e191c882e5bd603da440bcc4beb49cda872f97","sha256":"0b7a3b6b67c6fb045612af4a69e525a7461bdf5afdb1a30e3e1b06ca4172d2bb","sha512":"31f57d222fcb53ef00834580b7f6f8bc31eed9cb1897c638298de9589c815c84c3897333f5cf6bea9bfb79793b2149356b730083163b8fd4abf69de8400beb5f","ssdeep":"1536:W8Uf4V2X5E/SjQberGRK/GFAlreHxr/BEA5A067L:ZUfeRa2eJiA9eHjI0OL","tlshash":"c95302b940a793dff4206554d5b535684a20d0452dd6bed033f9eaf2a3839cf26ebc0a","first_seen":"2026-01-16T02:52:20.350778Z","last_seen":"2026-01-16T02:52:20.350778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1763207430628/17674341068987-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1763207430628/17674341068987-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Sat, 03 Jan 2026 09:56:31 GMT\r\naccept-ranges: bytes\r\ncontent-length: 55761\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G8zo9rcXfOw6nyDIM4N7prDYOExzqwb3P59U%2BsVB7jqNUR1PhVmJvByJqssEJ3yJMyJa2DcaFRjzGftCQpKbXgnxMBmpNVTlZZNarPc9V1Of\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea50335c5fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55761,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"cb1388621fdfcc4986289006163a9542","sha1":"0e6bec8a1e87518e0c51074864f6ade6327f53cf","sha256":"1bdc82d611f26b4483fff4565258d96c29b26c207ecb72bd25e1db79d0841758","sha512":"72d2b637e3de0cbef8d24934c0f291cf3b16057bfcfcea371978fd01ce1d5a29db28c9cf27d6f339e42f6251950ddaac343647bb6188c67e2f4ad07188979587","ssdeep":"1536:WlpgPRxEKomHkv/wzYwDQxeEA9Kv840Vfd:qaDqwzY6QxeD5d","tlshash":"ba43124a8ecb9055833a45f67d356a9155e77b7779ad78248233c9bcc6c30c2c7db202","first_seen":"2026-01-16T02:52:20.352231Z","last_seen":"2026-01-16T02:52:20.352231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1764590839294/17683777892387-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1764590839294/17683777892387-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Wed, 14 Jan 2026 08:03:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 33985\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FA%2B4FUDlQ%2FNlzZe9n6fOp9DNIyZPx40vcN9%2FfUE69MSh2HlQVAntCDTssPj8MvndmBvAmUlWsdfx3dhtlFlKfMfqwjvJtRih0VXAGyX%2Fm0jY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea5033ac73b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33985,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"13c817b51a7337777fbb856b681142c3","sha1":"a8aede05bc6afd225c2fce0c91e94e4d1d4a3a46","sha256":"c4663c555e8fc20a6755718103107aa7a8c92168310837bc66c2b2b874c46a4f","sha512":"bbf9c6b839bd7cdaadb94829163ee369bfce1021b0ef5492b19aa4be805b99672d8122c2aacf80209d7428ccd046caa167b8adc19ed3af8bcfa66f0f70080351","ssdeep":"768:Wf5C9GED6pErhEkpXZZAyPnoLtMsOgkZPA3EhsifKJo:Wf5CYY6shEkpXZZjoLHOgkZjhvco","tlshash":"e8e2026ad7c1870784aadc4a2bb7562053c8590796bda87b1f13d3f0f1c7de238a6274","first_seen":"2026-01-16T02:52:20.353662Z","last_seen":"2026-01-16T02:52:20.353662Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/uploads/1752304068143/17607924263576-scaled-400x600.jpg","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/uploads/1752304068143/17607924263576-scaled-400x600.jpg HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Fri, 05 Dec 2025 07:05:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 31633\r\ncontent-type: image/jpeg\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oA%2FhGNveaqNKH0drwcxMaWjkolZnSybtXPhNdt%2BmwT6Uq4b%2F1yT93qyI%2FTXhXDvFxLHY%2BEG5Vvc2aIraFcMY1QCdZNY2OMoxVb%2BVqS7UxVVn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9bea5033bc76b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31633,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 400x600, components 3","md5":"7ac9ff0d1731effc282bb41a0664aa4e","sha1":"fdf48c9001425e6d97c7ad15a49ed8ce86e79f76","sha256":"f54476ab2d551c449e44db0570f07066957fc125c07f548dba73719f4dfcebab","sha512":"bd7522d984163a379bce9865e7b526ea346737e9fdf1d4cb1926b61a87526273ada22686a059a6d3b92e9c6a1ec089207847efe2d56ef146940b92157ad8c90f","ssdeep":"768:WuWz6fgXoyoUp+ln4kRhLDjWlpfc//rMTcpz+0AU:WuBoHoU4phL0ErMTikU","tlshash":"b6e2e16d2269e5fb217edcf60d11b436928a3ca3779cad22a2f1b413acc05e02f74464","first_seen":"2026-01-16T02:52:20.355171Z","last_seen":"2026-01-16T02:52:20.355171Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.webpushr.com/app.min.js","fqdn":"cdn.webpushr.com","domain":"webpushr.com","tld":"com"},"ip":{"addr":"167.172.175.225","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:50.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webpushr.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 15 May 2025 00:00:00 GMT","end":"Sun, 17 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:26:C4:91:40:C4:69:9D:F8:30:CA:1D:BF:C7:4D:F0:16:AD:FA:12","sha256":"86:2A:BB:A7:4A:F1:95:91:F4:64:7F:10:11:51:84:4D:5C:24:DE:22:A4:29:C2:5D:20:10:E3:5E:43:2A:3D:D3"}}},"request":{"raw":"GET /app.min.js HTTP/1.1\r\nHost: cdn.webpushr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.16.1\r\ndate: Fri, 16 Jan 2026 02:51:50 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Fri, 10 Oct 2025 22:20:14 GMT\r\netag: W/\"68e9869e-ad43\"\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\ncache-control: max-age=86400\r\nexpires: Sat, 17 Jan 2026 02:51:50 GMT\r\nx-gg-cache-status: HIT, HIT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.16.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44355,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30908)","md5":"09423c60e42fb2a18c147efb28ac9212","sha1":"e37a70a9b09609a2475450f2cebebb71047bee29","sha256":"c09828ea38ac025bbfe985ab7ae3f0eb9e5d7678bdecf1766b1db057a80ba6de","sha512":"9d7fa41e60871d035ba9ff7bc3070c6c2bfaaa289bec600009661ac82af530ee8321d69283ea866fedd96d8c92d1eb36a4188abf8d84b83423be86e07e0f3587","ssdeep":"768:VZQQag2Vz9vDQGR8NfIBT8JcTwNsUI+AyLfNTsA814wOWJmiCF9Nc7Z7XlEYWRnM:zDagS8GR8NABT8JcTwnAyLfNTsA814wv","tlshash":"2d1393a779422db00afb513bb5f782942c33250a2c47a114fbc5c45494ecfdada37ab9","first_seen":"2025-10-11T06:22:21.056382Z","last_seen":"2026-06-14T10:27:03.298797Z","times_seen":679,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":101,"dns":0,"connect":32,"send":0,"wait":31,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.exoticdrc.com/wp-content/plugins/ninjateam-telegram/assets/dist/libs/njt-telegram.js?ver=1.2","fqdn":"www.exoticdrc.com","domain":"exoticdrc.com","tld":"com"},"ip":{"addr":"104.21.0.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.exoticdrc.com/","date":"2026-01-16T02:51:49.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"exoticdrc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 14:26:38 GMT","end":"Mon, 06 Apr 2026 15:25:26 GMT"},"fingerprint":{"sha1":"41:9A:5A:7A:25:02:CE:85:09:E8:66:D6:79:3F:A4:20:D1:E6:5D:9A","sha256":"13:76:A0:7D:B4:3D:5F:EB:7A:02:51:AF:B8:CD:6F:E5:B9:3F:E4:F2:96:56:95:0D:A2:4E:56:F8:48:16:E4:95"}}},"request":{"raw":"GET /wp-content/plugins/ninjateam-telegram/assets/dist/libs/njt-telegram.js?ver=1.2 HTTP/1.1\r\nHost: www.exoticdrc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.exoticdrc.com/\r\nCookie: _ga_CRT22GGTFL=GS2.1.s1768531908$o1$g0$t1768531909$j59$l0$h0$dOFaNJ7PYrjBbwBtB2qxCcBjeff5ObGhXGA; _ga=GA1.1.1820615177.1768531909; wssplashchk=af2ea77a14366b1bde6631400155ff89df224418.1768535509.1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Mon, 18 Aug 2025 09:10:11 GMT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ndate: Fri, 16 Jan 2026 02:51:49 GMT\r\nserver: cloudflare\r\ncache-control: max-age=3600\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8%2Fv7Fm9LiS2FkYRGlGyT1xpchDhEkrOqQSr9rzgMWsKSYiHFIKylYeb%2B6dusk0C1DRKEp78bMWRuLP2KhOf%2BLRuvh95zoWJXEPbkOGGcomX\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9bea5033bc77b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27643,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (27480)","md5":"48386011b7021b10cf0a02193e82f4fa","sha1":"bdf5b36a336c1b52f385b3788ffbe1c106a6d7ad","sha256":"433d6bffeb2e62b3bd31b5b929c9f8ec3146aad959e2ae48c11070b7eef78f15","sha512":"df9192700b6606d22d1a2a4c73128b61da428020e02da77d0e283478de9d2cacd32f4b36e0ba77b07659d5cc5cbd579c9ee9fee4f99960cf5a2b69bc0de7efae","ssdeep":"384:kb8zl3+YhJlXKVobZSGUWOFiGq9mX5hI+WQoxj+C7R8FS6yjDk3gUiuvrevNA:kIzl5uobZqqoX5hIfjjDk3Jiuvgm","tlshash":"63c2b4c9b3d6b10943a3a5b9402f6015b23a8d95780f496cf679c9e23c78c4da137fb9","first_seen":"2025-12-06T11:52:48.842399Z","last_seen":"2026-01-16T02:52:20.357308Z","times_seen":3,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-16","alert":"Sinkholed","trigger":"www.exoticdrc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
