{"report_id":"9b8a8c33-ec31-484a-8ea9-ec6c2a64c0a9","version":6,"status":"done","tags":[],"date":"2026-03-25T15:52:45Z","url":{"schema":"http","addr":"api.erssegd.com","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"final":{"url":{"schema":"https","addr":"api.erssegd.com/#/home","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"title":"api.erssegd.com/","dom":{"size":47218,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (45013)","md5":"64745c9489eedd22405336d3531f034c","sha1":"cb2323fc35c5e686ef4dc9755fd103d53ae91fce","sha256":"8e4f4b11f2ba54313b60b6f61fc07df158233f328c614cf10011ce04c4a9cfcd","sha512":"1916cc8f9afd7d04feeeea4108b16ca49a1936a2195b2cf7f07313decc1a446eb8fd86fde41c5f45462451f8865b62d7535552432b8f1bf166262630e43c3881","ssdeep":"768:SfFMCh5sfdiHYuTLg3KSsNjgCGJMR76a164464w4JC7xtEmYVoImYVojTED:SmXfY/Lg3KSsNpGJMB6rxFUA","tlshash":"82236c719832186f02a7cee4f4a4fb9a7d96d20ec51f144496b813890fcbff458ad24b","dom_hash":"domhash3a9b5d554b1d5c105f461a0ff953e2de","first_seen":"2026-03-25T13:14:42.454367Z","last_seen":"2026-05-26T16:31:30.069073Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"api.erssegd.com","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-29T15:52:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"chat.bnc-a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.erssegd.com","ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"domain_registered":"2026-01-07","domain_rank":0,"first_seen":"2026-01-25T08:47:54.792417Z","last_seen":"2026-03-25T13:14:40.798217Z","alert_count":180,"request_count":45,"received_data":1579736,"sent_data":21499,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"chat.bnc-a.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-01-21","domain_rank":0,"first_seen":"2025-02-25T14:32:08.186955Z","last_seen":"2026-03-25T13:14:40.784892Z","alert_count":4,"request_count":4,"received_data":0,"sent_data":2212,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"abf2b4678b77d13059627df62f388c97","sha1":"1e6d9ecb18ed780dd7203358f1d2560050523279","sha256":"7963f15b9da208e941fb7ecbee184c5bdc4275db496bbb1781f904a4705e0ea8","sha512":"7b479aa0b5623a0606085e548542b11b4a6c8473482f9fcca56d1717c863f8bbafe62e0b6652c29a5c9a39b7f0c48aaf7b064fa6d1754e20791dca6e358e6d16","ssdeep":"","tlshash":"19c08cc9a0c32d113602a91110af38e4a038842774482b828c98d8882e220f09233e9c","size":147,"data":"","first_seen":"2025-02-17T15:24:03.227369Z","last_seen":"2026-08-09T06:30:16.469416Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"450292bbafcf8c24b313085dabcf0bc9","sha1":"c4cc86143d3b0bf71a953654949f17744b5e415a","sha256":"78f1750c57e821494b006ac7fe63215734c07bdca3443663ad92b3a7076db7d7","sha512":"6c638e699fba32b4e2c88197d6944f5217661153579ee8c6838bbd4eaec4fda01ddbc286b3b2cdea36473ae0aeb314fcb44b04058ab6ef8b1e5e29b408e45d1a","ssdeep":"","tlshash":"b3c08cc9a0c63d006603662210af38e4a0344426704c1b12ecd4ec882e630f08333e9c","size":150,"data":"","first_seen":"2025-02-25T14:32:13.574697Z","last_seen":"2026-08-09T06:30:16.507437Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/Market-BEFBsJHx.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"ff76275b7b3a9328da19f824d3fa3710","sha1":"707868248dcacfc9ddfa2f8e0705f936f524b7ab","sha256":"3bedefd85f6d86f17c8e15af3aacbd0423dc8890844e6259895be9ad9529bd42","sha512":"83fddd54c48a60828204265eaa04bc8e3a2f378ff87b9ca479e51cce80a26c5543fe5e6c33f5d858a4c4fdd4acbb642f1e1550965d2ebde8f636c1f11b4fddff","ssdeep":"","tlshash":"1c41739ee839c6faa4aa08b491254031321a39dde202c14f63bd582633c3d6ca6cd3a1","size":1888,"data":"","first_seen":"2025-10-09T15:09:31.419517Z","last_seen":"2026-05-26T16:31:30.078677Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/#/home","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6c4b63197790d25a07f25a43bd99b082","sha1":"9cf651883e08001a9ec271a0c3c2d4ba8cbfda2d","sha256":"cab5094ca7bb9e74a1d0753500ab633f54ee468f574b0c71293e95e0eeb863b6","sha512":"019ba7e344e3b8e2fb0b9b422fc54931b8f5650f519c8532a13b38b604c7761110390b28f6531300602e1e130ef426834d9ce94baa0654db26da7edfbba9b19e","ssdeep":"","tlshash":"5dc08cc4a0c23d101a02641020ef24e8a024806a70881b028c94d8482e230f08233ed8","size":140,"data":"","first_seen":"2023-06-19T06:03:31Z","last_seen":"2026-08-08T20:09:49.408633Z","times_seen":846,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/#/home","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"86b5182fd9aca9c7a8e3ac1bb668d620","sha1":"c1a4e6804bd0f2f9e66dffa1ca6a7633e9dc032d","sha256":"607cf6de3e442b45cc71c85bd6ca19f0949465cb5c4e598284c693f6c902febb","sha512":"6334faefc7ded38a7d64d72c5e4d290ae730e0b224da0cdd1f89e671f6ae930f0471f62b52a6d108c10356f0bc67ac3792f9a794c6c5ec56fd07954c8b6ee88b","ssdeep":"","tlshash":"aac08cc4a0c26d005612641010af34e49038402674482b528ce9e8883e230b08233e98","size":142,"data":"","first_seen":"2023-10-22T00:48:11Z","last_seen":"2026-07-22T20:58:17.938388Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/#/home","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b2f4cea747f024ebfbc20c84e6b19a4f","sha1":"b25b1504c4db2b4230ac57f636f84565356e2354","sha256":"fe0e92529614dee9941b6b4ef76ed1d8307c4713ad54777c4896b06a735025fb","sha512":"063eee4ba32f4d7c95fd437519c187b1c5c0b6ab1cca93e595608eb255722aec7b3686ae524534e5b13c882d880f2dc730f6930830f5596933b4fa6d9cad4450","ssdeep":"","tlshash":"d2c08cc4f0e32d002602642010af34e4a024402670881b028c94e8482e230b48333e9c","size":140,"data":"","first_seen":"2024-08-19T13:12:00.806171Z","last_seen":"2026-07-28T19:34:47.987882Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/#/home","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a4bdcb8203f55c2a0d42fe2daeba7f94","sha1":"28d4fb637c1f7d7cfc979d90f4f388d62eb58a51","sha256":"386fe5926fc7fa712f45c79142ec5390c9082ce14bd96a609004647fb1f4d823","sha512":"09dd6e53cd308472025baff2f600acd0b5be74b4d557bf48d7402cf6147449fa01db100adc90a5ea3930e80b42a5a2a1782265620c3f940cc93f60e873363d5e","ssdeep":"","tlshash":"c6c08cc8a1c33d001602661060bf35e4a0288026714c5b128cd4e8492f230b88237e98","size":145,"data":"","first_seen":"2023-06-06T19:23:28Z","last_seen":"2026-08-08T09:33:40.055914Z","times_seen":1404,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"3c53e1f9a9fb8cee771899e56e0a5e37","sha1":"dbf1e26ff9dc710cb41d70a71c6d9f0bbeaae2d4","sha256":"fa1610e433b107798812b3af0837903afc8ac2c60c68b7acd6f2d113850712f5","sha512":"f5890a1692badb991188023514ca4e9db1364a2981344d345e9a284597644e3ae5e68977fde9d695a2746c62753d4273ae43fd56c961cc9dd3a035cac1d98712","ssdeep":"","tlshash":"3fc08cc4b1c66d105a02646015af39e5a034402671482b968ce8ec592e230b49237ed8","size":149,"data":"","first_seen":"2025-02-17T15:24:03.18593Z","last_seen":"2026-08-09T06:30:16.506801Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"8c438f696d519787f425726f68c384ef","sha1":"15d4dd21d64a61e5fe1fcd117dec7ec880d4f685","sha256":"0816b87e99bda018135834ed60a92f3b679dd87b315c08c5e39b656059179744","sha512":"b6b70d9990d97552fa4c26df6772191e7beeb20d0872e439ab0354869b187976fabc54e6b8a6d9a0c550c8b6924f329729e350e4bc5f298eecb032aa235b2b6d","ssdeep":"","tlshash":"dec08cc9a0c32d202602651110bf38e49024442774482b828c94d8483e620f08233e9c","size":143,"data":"","first_seen":"2025-02-17T15:24:03.21427Z","last_seen":"2026-08-09T06:30:16.484739Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"c91843a128ff2c266e665e4b8fdd4551","sha1":"80dd171a3d515d0a54aab75e0ec409e4195cc7da","sha256":"d65e619c2a8c65dbb7559701dea539eb9f9dace7810be7ac5ca14425b41a52f7","sha512":"60b30ce253ad34a211557417362b889b3c6a7aabb0f84054ac170d660ffb4d6c3c4ab1152e49cb26704b998d9f2260f1fe60adb8528d1ceb2e0887f507ed6af6","ssdeep":"","tlshash":"afc08cc4b0c32e002603a96014af24e4a024402b728c1b539df8d8893ea30b49233ee8","size":154,"data":"","first_seen":"2025-02-17T15:24:03.202475Z","last_seen":"2026-08-09T06:30:16.504083Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"166d436233d756ddebdb13320e7202d9","sha1":"b848d149a1e6c05e38917f28aa5f359a01155f77","sha256":"45e447f81079be863980d60bdaa5f2479c8b6d258d2dd2a549e583ee1761c0c9","sha512":"905cad78ca099b0e00c522c964bffb2dffe5ebfa9eecc58b8b3fff2a4dd6d91690e08b476a858daab48de350a45acca4e2dd348700c7b068c722df8be5a5659f","ssdeep":"","tlshash":"3fc08cc5a0c62d102602a52190af38e89028402670481b42acd5d8882e220b49233e98","size":141,"data":"","first_seen":"2023-12-03T06:20:29Z","last_seen":"2026-08-09T06:30:16.489747Z","times_seen":340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"61c633daa7bd5c89d3d21ced9631def3","sha1":"31c72835a39c751ec0a93825e4dbd8d47552b40b","sha256":"330511dc8179b44e5760ecbdb00c2575f9d627a2a3423edcca152d60054e5a1f","sha512":"eda59a22c515611f898f9cbc5591de83eb1d2a920ccc4795099011d439c85de10f2ffc471eafe9fd1729c142868273e4eb0b35060fa78362b50384544391e600","ssdeep":"","tlshash":"ccc08cc8b0ca2d003a06a45134bf34e89025802770882b06cce4eca82e334f09233e98","size":151,"data":"","first_seen":"2025-02-17T15:24:03.205804Z","last_seen":"2026-08-09T06:30:16.493516Z","times_seen":116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-DRxx_djq.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"d4c799ffe283a77d550be72c99434db5","sha1":"f643dec0784cc9d03afbe765da81a9532fd49cc7","sha256":"1d5d727e100e494acb0458a67aefc16441ffc97e58a8b537abce34f5917afe66","sha512":"19c66f6fb83c808516b11ae5fe010f0f0920671707bec6b56463345ba990e0e31e666eb9db92a392f91ecc5d5a847d514e0d948ca106e85ace41ba5ec34b618b","ssdeep":"","tlshash":"7941b4c434aceeac93baa58455184c19c5041b5f7533c4e2e37e38134bdaec0fd36a98","size":2011,"data":"","first_seen":"2025-10-09T15:09:31.417231Z","last_seen":"2026-05-26T16:31:30.08548Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"a9534f2bacc1ef20d742f7d51e75b8b3","sha1":"4cf9bc530c66a4decb6c3aa666c8e2dd2bddc9fb","sha256":"bba98d15aa76626f03be125de6f934733978204c41c3c1779d7180c73b2a2c90","sha512":"16cbc95043e431bb3cf643ceb17b5b848c2a605d1c279d550a3445f0c609a1d38529b6bdd517c61ec86f2d2f646e6bfd8a88bc43a230fe1a55f0724e0c0676c1","ssdeep":"","tlshash":"d9c08cc8a0d22d002602641015ff24f89034402774485b03ccd4d8492e230b08233e9c","size":142,"data":"","first_seen":"2024-08-19T16:03:38.578424Z","last_seen":"2026-08-09T06:30:16.468221Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-CKR-_Zvi.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"bb8043428a5fed8a9a31160dfdfe2d55","sha1":"6b2368252e7eb231997fafcac295920c1b6bd762","sha256":"dfd71180b14630fa6d0c66c0803c1f623b394327e561fac96f9e3089a0ee390a","sha512":"569d18e269f3213d755bfc5812e4c259e2f3bb0a52b49c0bcc373657a935ab5d6bde8d84b896168628d63fcf40517b838a737e409ba2fa9d2cfdfb5448cc20e9","ssdeep":"96:CB7yzzWGXC/upmGc9XY25Ds/RrbQtASx6+jXDPB3ES/7e9wgVk6S6YWtu0y:CBhUCgmGaY2e/RrbqAS7LDlErk6GW40y","tlshash":"7cb1a3e23190fdb7c339a6cd405100d0a7ad97d4311ac6ddb11f5e03264aceca6faa4a","size":5148,"data":"","first_seen":"2025-10-09T15:09:31.405753Z","last_seen":"2026-05-26T16:31:30.089498Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/#/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ccd150b26b19436bf630d3e55d886c56","sha1":"b1b0a07a69d04c4d3fd477f645bdf45520f62f80","sha256":"c24d2e1417d4808466ba562ca2a899798ce86afc46131750f60e27caee231f57","sha512":"10c397a1dfd5c74118cfe0e9e2ebd5eaff92efb8aa9790b59149d433b53ed52b58f56be0a4ba2700f418bf659071fe8e9a854c0b42ae798f805c1c77cb64f4c9","ssdeep":"","tlshash":"3dc08cc4b0c26e105a02651014bf3ae490244036b4481b128cd4e8482e230b08233ed8","size":139,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-08-09T13:48:46.17118Z","times_seen":3078,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/use-tab-status-CWZc7TFI.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"e3ae63d0e719b45c4d2617343d4c46bc","sha1":"931ae4b2c1306ca5e0e1a31ac9673f068d2d580b","sha256":"502b677d55313de6313106c91ba89f338cd3ab76fc53f463b3ffa3279fcbc51c","sha512":"4bd7ebed5496b500664b67c2a045ce7eaa85c256c35bad5214858513f8a5fb9510c98403bd2e4bf35cda3c0409665cf8d1768187c7c23cbaa99f41d238fd7bab","ssdeep":"","tlshash":"2cb0121f580013fe04090e8e230858374390dd5aa3929ef0620c457013525d6f60d991","size":97,"data":"","first_seen":"2025-10-09T15:09:31.40087Z","last_seen":"2026-05-26T16:31:30.086251Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/use-id-BO-cMGpW.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"f7392ed76ee3b7b49a2dd2c367da89c5","sha1":"6c4d650eedc486142608e052829046aa5a2a1ec0","sha256":"0041e3a3e8375ca9ba6703c7f575cb9d7d3a9268cebe3ef27cc28d0e3b3d3d04","sha512":"90fbb7a633e9ca4fc7ce4c4c534305e5e92a2198d366a55eef2e81a2f3b75c3be205fd3db4f360cafdefb8484064378698401c59a1ee787eb6d764aa88591e95","ssdeep":"","tlshash":"1bc08c49744821f5260a0ce9e22a4a7b812a7810531aaaa1f2780b2605a226a43baf50","size":151,"data":"","first_seen":"2025-10-09T15:09:31.368337Z","last_seen":"2026-05-26T16:31:30.088066Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/#/home","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"cae68ea6f141e4d10555797b47a00137","sha1":"6d7487ad2c6cd92d7b0a57c7671d65ea34816136","sha256":"621aec1748ccd29106df6b756539d8363900d1bb9e6a155f105e538561488bc7","sha512":"802598a54385e66c4aade9d8089953400177bcf218415227baf3edc88bdc4236c6625635fc4ae2814940a6a46be01540afc18ba5334325b4fc4840b2cac33967","ssdeep":"","tlshash":"e8c08cc4a1c22d001602681010bf28e49024802670481b028d94dc892e620f0823be9c","size":140,"data":"","first_seen":"2023-04-14T08:59:55Z","last_seen":"2026-08-09T05:01:31.380409Z","times_seen":1896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/#/home","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c2583fb50c063f4d0405b9e7cb3a0df2","sha1":"fe7125614901638e9e71adff4e308c31a521bfd7","sha256":"4ab0cbd030b4d18015e917c0acfaa1e0b4585afa96b38be83cad11d75d99590a","sha512":"edd5192afea49ddfa80981cc7eb00666be3a0a9293212ac11a64dd0e371fc99311abd29ecf5c6788bbc4369b06f6faa64013383787910a413ecf9fc5d94ed509","ssdeep":"","tlshash":"dec08cc4a0d22e001602641060af38e49028402670481b028da4dc482e620b08233e98","size":138,"data":"","first_seen":"2023-11-21T13:50:08Z","last_seen":"2026-07-12T23:26:43.211288Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"697f3c3bb7d1eb158a912966c54b97a6","sha1":"9b982f6d3a1c024861bc7eb4d24a719c0ab7ff21","sha256":"9b3309698cf9b1a269d7391a4576589c62071c1f08b1c51a7d4b3bd973c7b730","sha512":"64dc4d74aeaa5a62f6ec230ad4ee02916dbe41db943d6a8496bc423166aa0d37318f5c6913b78c59de4ac3b33e2adcc0e0be0703026912be1cf54728b33d386d","ssdeep":"","tlshash":"d8c08cc8b0db2d146a2b685125bf35f89026482770881b528ca8dc683e730f0a233e98","size":159,"data":"","first_seen":"2025-02-17T15:24:03.230956Z","last_seen":"2026-08-09T06:30:16.485455Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"f16f28a9c4872061b2b36f384e4ea78e","sha1":"cd56a42bac5ec346486cec73bf12604846d80bfb","sha256":"54fa6a20458789668b5911a657c305875a98ad1a64d1327adaad92f5ebb9df6d","sha512":"036b8267ab3b8a98839d09e030023e245f1640b78259abfde2c6303dc2f76ea608e3cf8992d3822b8bba41758359c2f3d639e927de4d3368e8a6648fbefb57c9","ssdeep":"","tlshash":"7dc08cc5a0e76d002616685015af34e4a028402678881b038c94d89c3e220b49237ea8","size":144,"data":"","first_seen":"2023-12-03T06:20:29Z","last_seen":"2026-08-09T06:30:16.486396Z","times_seen":341,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/#/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"661c744d2f07d3e897e9ab2fe2c13c17","sha1":"12459f399c5f1293a66c50c38b7e41dfe18e595e","sha256":"e75054b5c2da92089a68662a0eba3a6bf7a5193a9fd6bc94c77bf0dc289c5272","sha512":"00a3ce93ab1cced9ad5eb9aa6637506526c1aa0ad1fe52bb7a924881c503e07995a81fbd4cdd4d4d3e562e6d55395e5523ae4c931e5332b49f0f3642284c7e09","ssdeep":"","tlshash":"2ac080c4f0d62d101613591118bf38e4f0244026b45c1b42ddd4d8c83dda4f88233d9c","size":163,"data":"","first_seen":"2025-02-17T15:24:03.189313Z","last_seen":"2026-08-09T06:30:16.470983Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"d50b124b5654a850fd40e3f91b87e5a2","sha1":"6221e0edf8cf0b0e57306e073db4351f4b97f6ca","sha256":"40e35832f1a370fdbc47f20dff5fa2f592dd1ec85e622d90fc6f9a07d35b9d2a","sha512":"33ce743718eac58927c9868fc5e8e54b3ae36a595698ceabc545bedaf73f85697e38767155e66127ce77a2fcab86471dc2e4ee491acc93bcf94f3906c94c5f64","ssdeep":"","tlshash":"b0c08cc9b0c62d106602695010bf24e89024402a704c2b028cd4e88a2e230f08233ea8","size":146,"data":"","first_seen":"2025-02-17T15:24:03.232199Z","last_seen":"2026-08-09T06:30:16.491975Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/i18n-DSAA-f0j.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4621446c38971ef0b61516bbddacd40","sha1":"7a789ab4ee22f729419bf6eda90bbdb8a079f5b5","sha256":"54aa0a55b4fff47ef6aba9d5cb4f8743743498ecdb20431403da8f586e873dcc","sha512":"a1a27fb1625e8f5a2a55b5325884c89174b1f09fd102d214262b4337efa020100fb9347b2eac6013c9858ba01ad744417426bdd8b299cc2e73e6f955ca15155f","ssdeep":"","tlshash":"6fb01206600083fb1007189ca3075c0b18f1529802855680121d05502bf54dfd30ee54","size":98,"data":"","first_seen":"2025-10-09T15:09:31.415675Z","last_seen":"2026-05-26T16:31:30.071101Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-BG4rLZAS.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"2c9f431050838b5168751e1b1a5a6333","sha1":"15b99dd1df808d038e84643416e8f437e38bc211","sha256":"91242a6517f206dd33844f9d5801025b77b879ffa1d8f8b396db89d3eeafd96a","sha512":"02d12ecf338c048526b4615d7b537964859df7e53dc554007cc6dfc54eaaa259469fcae3fc96c80d72a373a54295a1c3e95e89c51022925d153d0d84a8069f51","ssdeep":"","tlshash":"6a314455fdd9a0701393cac8812a4ca1d648139bb57ce3d2e0ab28541bb569da478f08","size":1844,"data":"","first_seen":"2025-10-09T15:09:31.398993Z","last_seen":"2026-05-26T16:31:30.073337Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-B01Ct82_.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"7d142af21c8441aa9d9ea0257fdbd7e1","sha1":"4196c8fe7914e943169ed4da6fe3a1f2cf167277","sha256":"eabc40e5590951a06d63761edd21716c97fb0bdf05fbd2d6d45df786105f13a4","sha512":"7049ecb639e3c3e1a8c469cfc971cb2786becfddfb97e585355ea49ac639af9b0f662ab306e25cc6d59936addae75d81c215527ca572eb143ffa52e9cbf50a1e","ssdeep":"","tlshash":"01f00eaea981e971b1093a44adae0c0313088005b190cc60e88d8ae423d00c8f3bf23c","size":530,"data":"","first_seen":"2025-10-09T15:09:31.36979Z","last_seen":"2026-05-26T16:31:30.077883Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/#/home","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5a7861615b0953f5924edbdf07264fc3","sha1":"91c2cb6bb36a16afcad16608f1d231ad837c00ad","sha256":"ca058538f3f7eeee17bf7579fab3da464f47c7049c3cbac0ef0300727e726681","sha512":"aff5d13cd895faeb804050ce25b4313bdaab73897f9ed8ddb7c72e1614af61bb39f240fbc02dfaed281389cf1e0b03b911f07edf1a2e121547c7289c4400d885","ssdeep":"","tlshash":"a7c08cc4a0c22e002602651010bf34e490244026704c1b228dd4d8482e230b08233e98","size":139,"data":"","first_seen":"2025-02-17T15:24:03.190757Z","last_seen":"2026-07-12T23:26:43.183757Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"fda026047e8eb1a5882e868c6621ecb4","sha1":"94912222851f4eef4664202cb513d7f3d45993e5","sha256":"389ca4866842c71e748f3385526f79ec5d78e6fc86cf71a48a0c44012c59fd8a","sha512":"c7ddb08213f5190b3cb67a8b6cdb51338e1763bed5a088339a123b7fb1f6e67f25289f103a5664785612b1782a4301d3d9d16f8a6d466cceca1e1c1814af3145","ssdeep":"","tlshash":"d3c08cc4a0c62d002602681111ef28e8a028842a70481b039cd4d8893e620b48233e98","size":141,"data":"","first_seen":"2023-08-10T20:40:22Z","last_seen":"2026-08-09T06:30:16.511236Z","times_seen":324,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"76546f311604c7eff4b08bee3e8dbb40","sha1":"3a09b3c820e5b59439c0deb5779cc28b762f1795","sha256":"0aa612bdf6c82fd0d271f82d985663da0b83dfb1e1b8d07c383a455e778aae57","sha512":"fc0b738476ef37052b6fd9e88a3b5dd902c91a21271fafe9c1340d8669898f2a4a04cae373f724546d2af0a3709edd1763c4d33030b1824af132e8a4d502881e","ssdeep":"","tlshash":"1ec08cc9b0c62d106603aa1020af38e490254427704c1b169d94dc882e220f4823be98","size":148,"data":"","first_seen":"2024-08-19T17:43:12.102875Z","last_seen":"2026-08-09T06:30:16.47379Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/utils-D84phxC7.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"77827fcff716dc690173902150f2a9ba","sha1":"ddd79b76f1d2f57bd86c213bcddafa1ba72177d4","sha256":"66cdad73e9342f14ea876d7319cb196d9dfad2c7acdc202f78979f1e811a26f7","sha512":"25bc865ec817d0b0f26651eddd97b4c3aae6cd9c7600f683789b0bf680fdcaef6880e711a7d2d6ceb6af6873f9100d80882713aea32483784027edce16087979","ssdeep":"","tlshash":"46d02341144061fa90540cd85531b8462431eb3c411d95cebb5d414405c15a5055cd79","size":209,"data":"","first_seen":"2025-10-09T15:09:31.421315Z","last_seen":"2026-05-26T16:31:30.08035Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/#/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a75ab93c4db9073c13fb419ef7c2c46a","sha1":"856072c405dfaa708e23622cad35d78372e23f07","sha256":"da656c2f3889dfb9eaeecb26f30c2b5ff695b991d6c5fbdd8f8978fc0ed2907e","sha512":"0dd74743f8822d86d634c325d0f3f6148960d7c9ba0cc668fde3cfe6475b7a0ffa5ab23cc7f229fd0313dcf0d1d427c60df140423c158354408f96f86faba2bb","ssdeep":"","tlshash":"cec08cc4a0e62e601a02692418af28e8a0248026b45cab02add4d8482ee34f48233e98","size":149,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-09T13:48:46.140396Z","times_seen":1136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/#/home","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1fa7a8bc0f1ecf8b6da179daf9033372","sha1":"f286feb22a81108dcc4f31bb6de57f27b1af1252","sha256":"a28aab8d51368d638be23e21545935cb713d9fbc613db622ddf04dcf649e4194","sha512":"8908dbf215c8cb564b15123e9f6172a6531361b5cbd285766e8b0e2b0a4a393925696e3024691eddbf280ad090870e7287ceadc9f8ed04492e7c442ab83d4db2","ssdeep":"","tlshash":"93c08cc5a0ca2d005a16642325af35e4a438402a714c1f038cd8dc8c2e221f4c333e98","size":158,"data":"","first_seen":"2025-02-17T15:24:03.17261Z","last_seen":"2026-07-12T23:26:43.177743Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"0b190a0448c5ffd8b8b57dbd8c24e442","sha1":"00e2899081426374447243f095c2b221f610bc73","sha256":"6e3325a70f50d7e189eb39d8fda7eeebe0c4aaf7127854f8f792c27df59dee34","sha512":"68c9c6792d32967e84a38a9ba8472d8007be2060cbc7fd973bc5829db72fce5bdc446adb3da02c98410471826e0eca4312ef52a9ed36921c3d79213df2c23fdf","ssdeep":"","tlshash":"3ac08cc9b0c22e502602ad1510af78e4a0348027b0581b028da4dd483e238f48233ed8","size":152,"data":"","first_seen":"2025-02-25T14:32:13.534447Z","last_seen":"2026-08-09T06:30:16.505045Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"751093f341c73cb555ba030fa25e40af","sha1":"489346d8d2199edc86b0cf6f2b03f9196524c97c","sha256":"acfad071fb5778e7d43214329de4ea08cf79dc3a55e3302fef7a8e806678c4d1","sha512":"d0b1a013d8cb9ee6a341b6e8eb7928eb1cacadac1a89115d606ff762cf86a05fb889e33f1eb1c928d4e10da85e23f1cbf22a1730cfbd380d364cf3d0aad23790","ssdeep":"","tlshash":"62c08cc4a0c72d101a52745014bf24e4b034402a70489b438d94d8492e230b08237ea8","size":141,"data":"","first_seen":"2023-04-30T07:46:29Z","last_seen":"2026-08-09T06:30:16.483522Z","times_seen":158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/#/home","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"86607ac484109472dd26f2ec8aa528f7","sha1":"d864056f6c65c1c80ef852d6988cd845d4b4b9e0","sha256":"efe50c3b62779535d70ec1ce7ee577c8ae006671f14dfc1c8adf00c6523f0313","sha512":"92f38469bf09d0254e937a696fd23d1a702c41400abb4352c5f627ae517654cddedc768954ca1dd604c7e1449f4bb94916b5729aae13c9f933f172d441400d1b","ssdeep":"","tlshash":"b6c08cc5a0c62d022642641120af3ae4a024842a70881b529c98d8482e230b08233e98","size":143,"data":"","first_seen":"2025-02-17T15:24:03.196737Z","last_seen":"2026-07-12T23:26:43.202084Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"e06f1672b7a76c72c9e1dac70a969ced","sha1":"589430d023d70e4da4a4b475aa6938ccdaa49b14","sha256":"7dd29da79fb343c01433e36bd8f66af09e2957e2f34f4bd55f66899606368a6f","sha512":"ca48f8f9afd721b01a34c21148b49424c7a5799febb84091c5d5aeb88c0004b5aef4efce3e3df2cd34b961f604ccc50054da5437716f18a5595a60623b7803bf","ssdeep":"","tlshash":"18c08cc8a0c62d242616642054afb9e4a024402670485b038d98e8482e220b49333f9c","size":148,"data":"","first_seen":"2023-06-09T20:52:21Z","last_seen":"2026-08-09T06:30:16.488641Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"eb91014e314a529dd8ff5eb04936eb5f","sha1":"417c7ed2e52e9c6aac48138724fa945309368280","sha256":"2ae338bf09fab6392c5d113f6f2c19fe305fee311603544c80b638edfce20c8e","sha512":"772b6552256b5aab1eec91e224dd834ce65aa3bd2d1c61fff7e7f3fd5529ec06432dbb16d2835cacc2be86069ec5842809483bc342c946743fd69e4fb1567f85","ssdeep":"","tlshash":"edc08cc8b0c32d001602642121af35e490244426b4481b528cd8d8483ea20b08237e98","size":146,"data":"","first_seen":"2025-02-17T15:24:03.174765Z","last_seen":"2026-08-09T06:30:16.48267Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"76546f311604c7eff4b08bee3e8dbb40","sha1":"3a09b3c820e5b59439c0deb5779cc28b762f1795","sha256":"0aa612bdf6c82fd0d271f82d985663da0b83dfb1e1b8d07c383a455e778aae57","sha512":"fc0b738476ef37052b6fd9e88a3b5dd902c91a21271fafe9c1340d8669898f2a4a04cae373f724546d2af0a3709edd1763c4d33030b1824af132e8a4d502881e","ssdeep":"","tlshash":"1ec08cc9b0c62d106603aa1020af38e490254427704c1b169d94dc882e220f4823be98","size":148,"data":"","first_seen":"2024-08-19T17:43:12.102875Z","last_seen":"2026-08-09T06:30:16.47379Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-sMTUu6Hw.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"b18d75c1e055528fb4a507d9d8e9259e","sha1":"5ef290ab6d94d2adf450606e3add00ac8e1f46e8","sha256":"80a10e3d09b1f66db40ef02c2cd39714295810bb3883599d04a648bf680f76db","sha512":"41c7f2d79a7f507941f49ecdff8018269e54c8feacc7d55af483fc7cd3aee023cb6efee0493f85d3bd6341c523e6d09f38e1598774915f18212337538c1e5eb7","ssdeep":"","tlshash":"ab31a68ef9c29138c34bb4c0d0984051810c9b2ae969a4e4e07bdf841fac585f55cb2c","size":1658,"data":"","first_seen":"2025-10-09T15:09:31.371623Z","last_seen":"2026-05-26T16:31:30.084538Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-KTuR9wD-.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"36eaec6c7067a788112f2bfc52569a27","sha1":"9ff982df9f11feda38af4d460cedbf73bc713abb","sha256":"789b41012e91308126a66dc95399ae3db6dffb677eedf7c5b35e144d9cc1ef09","sha512":"a9e67a516dca9f952dbd42fdfacf6bfe4f1dcfefeba8c1e6b094ac6621f03ac5a85f58966a80cabc416e85309f432858b819206a6a90c37541f86f191321d981","ssdeep":"","tlshash":"e231459df5b294389335afe7813a9a51f10e1d8ab116f0e5d4fe0c051ac2c46a1af62c","size":1773,"data":"","first_seen":"2025-10-09T15:09:31.381461Z","last_seen":"2026-05-26T16:31:30.074198Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/#/home","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8b17ec51c3be85680686a0f9b5a3d759","sha1":"a049720c0d0cdcdb78508d928c1f666ef6abcbe6","sha256":"35a7d9b0e99f54c15b521945303e543d18204865e928edd366da3f15f10a5180","sha512":"17bc8c0a70a385c273c57142367d4cfd1deaa95949f8f07459b6a1a548740fd5940a903dcaa3a885299cc5d8c8517a3d2408289540828587d5eedc61fb1b4f40","ssdeep":"","tlshash":"0bc08cd5a1c22d126602641920bf38e490248027708c1b128c98d8482e230b08233e98","size":144,"data":"","first_seen":"2024-08-20T08:29:42.434295Z","last_seen":"2026-07-12T23:26:43.210539Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":true,"md5":"464488a9d7067eedc4ee377535271a8d","sha1":"fed661698b6167fd52a2f71774e25baf6c0a81b4","sha256":"6a4c55458c8ef1940e1e25a94bd8f07d8580c354c778fc0994f905c9a14d0eec","sha512":"12574cd082e124296988d4cf351ae071b6b9be8fa7e11ff2f3d96986d1ea42ee34f5e513760a19c51446814301b84674f403fbf6e48331daefafb370794b8860","ssdeep":"","tlshash":"1490025458219009982c85192621154555456432074cd06cb9089164ab744cb4400f44","size":48,"data":"","first_seen":"2025-10-09T15:09:31.466612Z","last_seen":"2026-05-26T16:31:30.112644Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"57ba3e001432b356b49631c653c30383","sha1":"71398a3b0749853d0247ec426d182d4156a5937b","sha256":"f26a17e4cde6d415afd4a70d06c50ac976947700499988e31889190680cdea4f","sha512":"9daf0fcb42f8eb7c7aa102f90ce1dc28ea9557ef4d4a6f1ccf1c78ef054633999858f5c3b6b67cdf8ed9bf8513a21d2f8ad9bb820535b4831068de8cf3899fad","ssdeep":"","tlshash":"b0c08cc4b0c62e102606a91814af24e49034402770481b128cd4dc483e220b0823be98","size":142,"data":"","first_seen":"2025-02-17T15:24:03.216051Z","last_seen":"2026-08-09T06:30:16.468814Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"ae455fc13cae166f33694871368e0333","sha1":"b0339bd88c98ce949779d10a804ad8a4793fe449","sha256":"55f534fdf02de222147dabf89effb35048cbb3bb86c01c12e3dbcd70389d5cc6","sha512":"1788e28258e79aeb1edf776483173cdaffb18508824543f923fd67cc9433f135cd58864c4d5da83a6ea252f8a465d4ee92435f3fe5b7a3a0c7ba63965b1db3b9","ssdeep":"","tlshash":"97c08ccaa0c62d009612651525af24e890244426704c1b528cd4dc882f620f09233eac","size":150,"data":"","first_seen":"2025-02-17T15:24:03.221582Z","last_seen":"2026-08-09T06:30:16.487322Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"16433b29e8090f9771f0586f51d1218b","sha1":"fe810f8814ba0246f240b62bcdb575c4cc895d34","sha256":"b3f7d641e0a012af7895b2dd0df252a8e9c6523ae236f4d350e4c7996d035dec","sha512":"03dbba075bfa3f08ac7109054220d14a766af6d167161bf5b18d5b6cf3f40c104878dbb393c597b0c03cf6aff1f75232f2062a3b676be6a2142892b0c48533a2","ssdeep":"","tlshash":"82c08cc8a0d26d002602a55610af38e4a0288427b0881b028de8ec883e230f0923be98","size":148,"data":"","first_seen":"2025-02-17T15:24:03.233407Z","last_seen":"2026-08-09T06:30:16.473162Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-DEFiRqZv.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"f9aa563094d25e656d1e79d4b4022fdb","sha1":"565b5a2af48c87436899dda81896cbed92e42f1d","sha256":"e9dfaf173d9be616056f3aeb1bad15898c690b0c6f11dcd31e928ed00ad48c3c","sha512":"4e31346905901db1fb8b7105e96b1cba4abcabf5166c68f372715027ec2c7320cebf077f6114fbf5f4efaa8227b07c503d2bb1a3a9ed3d5ca75f5ca39f98b1b9","ssdeep":"","tlshash":"aa31b8cbb8dbc13dd33bcd5e4014442022583f8d7138c1d6b26b2b1cc779ad9ba29619","size":1813,"data":"","first_seen":"2025-10-09T15:09:31.376188Z","last_seen":"2026-05-26T16:31:30.077178Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/#/home","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"33d3d67c36cb66bdc0d2c35cbde79940","sha1":"874d8afccac03dd528685dbf5f33836b8b58bae7","sha256":"2c00932815353b6273b15a427deaa4374967ec8ace9cbac9229cf563c3f80513","sha512":"aa02159c5c272ba479938ab609cde6a79f2e7453600d02366a36d4f3c3536b381d9024a2f11042a9d3a9e6726612a77c8f4334a04e32a9fc524e808506b6e8e0","ssdeep":"","tlshash":"fcc08cc4a0d77d001602655121af24e49034402674881b22dc94d8482e220b08233e98","size":143,"data":"","first_seen":"2025-02-17T15:24:03.21078Z","last_seen":"2026-07-12T23:26:43.171704Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-Cd382mLR.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"76f15f5468ba447bf46a62a1bdee0f86","sha1":"a64d50fd50bc38ee0e5bf29a6c892f342cef58aa","sha256":"e3be463bbd1f561a8c8809b9da1b62cf334e84c27fb8d1dbfa392268b5c8ec6f","sha512":"3a404bcf2a822324fadb4a3fcbf977cbb33f9cb80b3e69bbc4be6e40a0099e438e7f2b1957f6199e75a8695c6616380973e3261d4cedad0b7361bd9fa292ea7d","ssdeep":"192:FD1qkLXNUE1orZQTdp6DUtb0c67z/w4cAeH1a6f8r9TpgZ8dVwDPNDUWYPoC2Rz:FD1qkLXCLa50//NZsc6Er9lbwDlDUboT","tlshash":"1122e74574407072d77ba9c9d01849e0162d2f88b619c6e1b0af6d5927da4f0f4eef2e","size":10381,"data":"","first_seen":"2025-10-09T15:09:31.407065Z","last_seen":"2026-05-26T16:31:30.095973Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/#/home","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a15c447f08875de3100ed8997d5994ea","sha1":"b77d1c8bbbbcc5d0ac532e1362d796508029192f","sha256":"edd33609ab9f781e02fcf2c8e5ecd9f1e9b7bfdcbb576f01e9b2e78747b47e47","sha512":"55050de7b026795f86b16a8f6a67428555e9d05c394d87abf47b1bde43968be03e16569d97d1f38f6d37a1cc8b9bb5349cabe354e3def7dcbd5187640e3ac7ce","ssdeep":"","tlshash":"b8c02bc8b0c33d002602645010bf39e490344027718c1b43ccd4ec883e230f09233edc","size":139,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-09T06:30:16.4665Z","times_seen":920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/#/home","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a37bf99064f26f1e1d5fbe72d8a946ce","sha1":"589badf3b0294a0117d583455d2c061a8c91d824","sha256":"45a8e88d5dfdce0b3242e86c6ece986f436e1b516dbeb7c6e12bb98dfe118189","sha512":"e3e152126173ea271a5d079397a13c20d0a9979545444baeef9410e482959185e8835258ab2e82c5bc7aa7d39c6ca969cf0bcdb0816f9fd6a3fee0803f9c322e","ssdeep":"","tlshash":"adc08cc4a0c22d001606651010bf24e49028802670485b028ca4ec593e260b08233ee8","size":139,"data":"","first_seen":"2024-08-20T14:49:00.530128Z","last_seen":"2026-07-12T23:26:43.181068Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"0f5fe0787cd8e0ecbcb4cd952894a8b7","sha1":"d43628197fcab15076d66a35b34fcf121e313189","sha256":"cb48ecc1b44293573353b165ece68d9f1fe13f50556b5f8d3ae683fc5a9b619b","sha512":"ccc2d734bb0f275c05eb1ce6db8049e726211a3785705442496d241b2369dbd0c739d4ebbed713c3883ca59708b6bcddca34c1c23906cb487f15580bf6744452","ssdeep":"","tlshash":"01c08cc4a0d36d101622ac2010bf24e490244027725c2b028cd4e8492e630b08233ed8","size":144,"data":"","first_seen":"2023-10-05T08:35:43Z","last_seen":"2026-08-09T13:48:46.156336Z","times_seen":1271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"9ee6d1e89c55944824e63c0be7644859","sha1":"fedf0c4b305648473fdb4b2d77a4e6afb4a13073","sha256":"5a05cd8dc6fb82ad2d1a511fa8762bfe29606869b86d99af9fd0558d3f9daeaf","sha512":"e290c838d1924062531bbbe9c0457854fc3fd7e89f2c992b0e04646d222ce5628bec29d9f5d22e8fcbc09374fcb7b95afe4191539bd7386894d89e57e4606428","ssdeep":"","tlshash":"32c08cc8b0d72d046a17645629bf35e89025482770881b528ca4dc582e730f09233eac","size":153,"data":"","first_seen":"2025-02-17T15:24:03.220467Z","last_seen":"2026-08-09T06:30:16.503384Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"1eeb203a76be04805b83b692507f76c7","sha1":"a768cee451782fb86cb10d827ba7ad4597d5c5f8","sha256":"6c298b04ce4b8b0be3bc98403a613224248322e06f100a26f1e3b705dd7f3f57","sha512":"40cf821e8854ea9d0ed7383397372b0212f8d2a91031785e0e82a3f76eb36778ff3675ceadbce7a2bafd5924597cd6315e3483d65cf17ab9abc4a27c7e6b6e80","ssdeep":"","tlshash":"d1c08cc4b0c32d005613a82015af25e890244027715c1b528de4dc492ea30b08233ee8","size":149,"data":"","first_seen":"2025-02-17T15:24:03.173774Z","last_seen":"2026-08-09T06:30:16.475496Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/home-BqARKqVa.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"048cda5c3432fd6a86a0d02ae946b561","sha1":"894838ffc4d0c09e1a587e763d247d9c954839aa","sha256":"28f06b7c9837d44cb0fe8decbb37ff89ea0743974ffc44eef8f02bd11af787c3","sha512":"79fd80c16f1e5a9ebbeb771c659dbe938ae70848752f21520b24cdd8fcbd5ac9890f59cbb6407ddb59ee2031d09b25fac7faa30b9cd34c6e3ef4608b89bad612","ssdeep":"96:9XXu/IT9/zv7uFee4IdByqgxr99Bx/Paajiid5PTzJ2eJ2f3M4aOOmp2t2TpGRzV:9nhzv7AH3yTxrdxq65PTNJJ8MbcQ2NWV","tlshash":"4be1d609b426d5bfac1351e8305a4940710d1fded2b5ca65b1fc8d201be1df8a75db2e","size":7329,"data":"","first_seen":"2025-10-09T15:09:31.386725Z","last_seen":"2026-05-26T16:31:30.092372Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-09T19:22:15.83678Z","times_seen":7202,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"14a17c414f312ee2d4265b01fcf5a089","sha1":"f06a8e488ec44cb12972c74969c92d2f9fe12e01","sha256":"5c2d7cd8785162604035b38c78c0f23a55729acea7287b68b334e502f1fd3528","sha512":"953460329439cd6158d7e5479c1ceb50dd9b23a941515ceee7a489785cffbbf255023abb0badd1329befcfc7a4e2d8205759a62d7d1d35e584f066f9647b3f06","ssdeep":"","tlshash":"3ac08cc4b0c37e002a16a55014af74f89038406eb48c1b56cd98dc792e630b4923be9c","size":156,"data":"","first_seen":"2024-08-19T13:12:00.768018Z","last_seen":"2026-08-09T06:30:16.481864Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"4f1fc0c8c1c0e0de17fc0789a3c1efda","sha1":"c2123b2188aaf414d24c8147e7846f3d9139d8f7","sha256":"24f7aad53572ec6787707c98745c6090ffc2c3991c4f1d4b5c12c2b718edcaa9","sha512":"d6ac9c8fb338d9072a55a1fe60f49e234d407efc33f0358af246f04a51a0855fa67cd7cd58a40858d8630cf62af87ac9c7678331ad33148f418964278fb5694f","ssdeep":"","tlshash":"19c08ccaa0d62d001a02649420af2ae4a038606ab0882b52acd8d9482e230b49233e98","size":151,"data":"","first_seen":"2025-02-17T15:24:03.177524Z","last_seen":"2026-08-09T06:30:16.466983Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"c6c787adf23b16e14fbc6e557da2df8d","sha1":"868df39477396f72e531af8ba27a06c9e4379795","sha256":"ed6d850e8060a49cad23a1c87b5ad26d6b996aef98b85449628556b382359344","sha512":"fd5dc483539a9006d11c17a61759f987253367545d6b9d709544245a049db0bbd73048abaf79d538e7af2f9ff54dfa5c11c5dfbe2e53f0cd2e9bf9e64d118682","ssdeep":"","tlshash":"e8c08cc9a0ca2d006602652111ef3ce8a028882ab04c1b029c94d8893e620f48233e98","size":148,"data":"","first_seen":"2025-02-25T14:32:13.53655Z","last_seen":"2026-08-09T06:30:16.470014Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-EevdVP_3.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"19bcd23dc44fdfbe1d5afe3873d36a9f","sha1":"863e66e8d3e01908cb63cdd8dd073f621db530c0","sha256":"8c77e24fb3ed2115b4332c266afc28020bd514dfcfe9dad46b914faefc2f1612","sha512":"4c1a2e269db9473c064e087c9962962e4e3325010d23929834a6621f0c1df6fc2e220d70eb7403221d7d3701d2211e46ba0ab250ffe537db30dab35882e99d67","ssdeep":"24576:1nFg6W2O+UjOwBHOgTnaCiMW/rVRNvXMen7+B4g+HTLOyTchCW06uX5NMaRyO4bv:1nFg6W2O+UjOwBHOgTnaCiMW/rDNvXM9","tlshash":"b355cf3534ca2429c3d01785512b3e0de22aafa1f789ead0539e99d633e3e06e55df34","size":1287274,"data":"","first_seen":"2025-10-09T15:09:31.442339Z","last_seen":"2026-05-26T16:31:30.105574Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/#/home","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"909e35ce121b5d7253565586b3df9305","sha1":"37caa9bdea469f9cd7acbdf777e409cebc1bc485","sha256":"c1ea724ba946b7d575951e93c17e8450f521cb54eebf1b2ead4cf39048add883","sha512":"7724fd61837afc55dc70cdd5ef8affd38a6ade288f6d4ee2707d212d9a867c78284f152f58137fb656d9c8aaa1338edcfeed203e84ff74687a170570ceddbb90","ssdeep":"","tlshash":"92c08cc4b0c63d102602641124af24e4a028402770482b02cee4d8893e635b89233e9c","size":147,"data":"","first_seen":"2023-12-04T02:29:51Z","last_seen":"2026-07-12T23:26:43.180467Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"a15c447f08875de3100ed8997d5994ea","sha1":"b77d1c8bbbbcc5d0ac532e1362d796508029192f","sha256":"edd33609ab9f781e02fcf2c8e5ecd9f1e9b7bfdcbb576f01e9b2e78747b47e47","sha512":"55050de7b026795f86b16a8f6a67428555e9d05c394d87abf47b1bde43968be03e16569d97d1f38f6d37a1cc8b9bb5349cabe354e3def7dcbd5187640e3ac7ce","ssdeep":"","tlshash":"b8c02bc8b0c33d002602645010bf39e490344027718c1b43ccd4ec883e230f09233edc","size":139,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-09T06:30:16.4665Z","times_seen":920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"Function","is_inline":false,"md5":"27237ac6a76bf58eb7323b811ad7b1f9","sha1":"c9c574bbd37fba13f98eacbde2e9e40d9d3a36f3","sha256":"4899153c09253641553fdc250cd9df333c3cca6b2c51ae84bcf6b1733127fbce","sha512":"064956c6e92f7ea2ab8cb7f7f125a23c8b9a018379864bd89137963db428544c499c526f6c29bb0332921a8ead93b97d9eacd0cc8f94f692aad47b547ef64ece","ssdeep":"","tlshash":"abc08cc9a0cb2e005a02765025bf25e4a024406a704c9b038cd5dc882e230f49233ee8","size":151,"data":"","first_seen":"2024-08-20T15:23:09.305651Z","last_seen":"2026-08-09T06:30:16.476455Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-B-pImdcz.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a3feea3bad2cf704547b8978344c21e","sha1":"f540a863087e9dbbe1c019083f909b7a5fd15643","sha256":"2c097088fe7f7e111858510b64d3610cf845e03a381e5ca435723d163ae87708","sha512":"f2d3c6a29f630b985399c2d67e7d2396fc6bbb07417ff04995b0ac65d77ff93d8b60969d649cb8105a5cd51f2953c9016a4c863ae43aeb166d50f1995d9fa695","ssdeep":"","tlshash":"5a6184ac78f0b972966b5bc0240bcdd1a90a27cae138c3d0f5aeac6123754f4913935f","size":3321,"data":"","first_seen":"2025-10-09T15:09:31.413869Z","last_seen":"2026-05-26T16:31:30.090368Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/#/home","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"046be361ac432a93dfc66526e048cf8e","sha1":"1474d8bee5618368bfe182165e12a651dd2385d3","sha256":"fa81a3a14d508ae38a08c59cb3f59bb82685ea3c69a4720aa3e3aa63d9a262f5","sha512":"92c3657207df59d19076c18c08727eb5069c988238f06399aa31c5cbc22aef485f474b7989b1d4f7bd1babaeeea561ef143e8d42866d0870dc6e811e68c588a7","ssdeep":"","tlshash":"fac08cc4b0e26e202616681111ef24e49034402674885b0b8c94dc582e324b48233ef8","size":151,"data":"","first_seen":"2025-02-17T15:24:03.197972Z","last_seen":"2026-07-12T23:26:43.217373Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/#/home","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5107b652a3654245a26ba460c2e27556","sha1":"d065373153f3f78d29ff83ef4ce256cf6a686d13","sha256":"8f424b8fa31f979fd74c9de1dbd26c2aa2baa43fca68d430d0822dc0f023baf0","sha512":"c3b67c78526a92f92d950628c3c7bf64780694226b29d428eda994d241c58390ad81b3b89137a73cdb82bc0f5f505b8ba77b3a6da293a176f96cc94cc1167df3","ssdeep":"","tlshash":"67c08cc4b0c22d046612642064bf39e49024402674487b228ea4d8482e634f08233ee8","size":150,"data":"","first_seen":"2025-02-17T15:24:03.16637Z","last_seen":"2026-07-12T23:26:43.182567Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.erssegd.com/index/index-B01Ct82_.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-B01Ct82_.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.erssegd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 530\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\netag: \"68b00ed6-212\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":530,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (529)","md5":"7d142af21c8441aa9d9ea0257fdbd7e1","sha1":"4196c8fe7914e943169ed4da6fe3a1f2cf167277","sha256":"eabc40e5590951a06d63761edd21716c97fb0bdf05fbd2d6d45df786105f13a4","sha512":"7049ecb639e3c3e1a8c469cfc971cb2786becfddfb97e585355ea49ac639af9b0f662ab306e25cc6d59936addae75d81c215527ca572eb143ffa52e9cbf50a1e","ssdeep":"","tlshash":"01f00eaea981e971b1093a44adae0c0313088005b190cc60e88d8ae423d00c8f3bf23c","first_seen":"2025-10-09T15:09:31.36979Z","last_seen":"2026-05-26T16:31:30.077883Z","times_seen":7,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/use-tab-status-CWZc7TFI.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/use-tab-status-CWZc7TFI.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.erssegd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 97\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\netag: \"68b00ed6-61\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"e3ae63d0e719b45c4d2617343d4c46bc","sha1":"931ae4b2c1306ca5e0e1a31ac9673f068d2d580b","sha256":"502b677d55313de6313106c91ba89f338cd3ab76fc53f463b3ffa3279fcbc51c","sha512":"4bd7ebed5496b500664b67c2a045ce7eaa85c256c35bad5214858513f8a5fb9510c98403bd2e4bf35cda3c0409665cf8d1768187c7c23cbaa99f41d238fd7bab","ssdeep":"","tlshash":"2cb0121f580013fe04090e8e230858374390dd5aa3929ef0620c457013525d6f60d991","first_seen":"2025-10-09T15:09:31.40087Z","last_seen":"2026-05-26T16:31:30.086251Z","times_seen":7,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-KTuR9wD-.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-KTuR9wD-.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.erssegd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-6ed\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1773,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1772)","md5":"36eaec6c7067a788112f2bfc52569a27","sha1":"9ff982df9f11feda38af4d460cedbf73bc713abb","sha256":"789b41012e91308126a66dc95399ae3db6dffb677eedf7c5b35e144d9cc1ef09","sha512":"a9e67a516dca9f952dbd42fdfacf6bfe4f1dcfefeba8c1e6b094ac6621f03ac5a85f58966a80cabc416e85309f432858b819206a6a90c37541f86f191321d981","ssdeep":"","tlshash":"e231459df5b294389335afe7813a9a51f10e1d8ab116f0e5d4fe0c051ac2c46a1af62c","first_seen":"2025-10-09T15:09:31.381461Z","last_seen":"2026-05-26T16:31:30.074198Z","times_seen":7,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-CKR-_Zvi.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-CKR-_Zvi.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.erssegd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-141c\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5148,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5147)","md5":"bb8043428a5fed8a9a31160dfdfe2d55","sha1":"6b2368252e7eb231997fafcac295920c1b6bd762","sha256":"dfd71180b14630fa6d0c66c0803c1f623b394327e561fac96f9e3089a0ee390a","sha512":"569d18e269f3213d755bfc5812e4c259e2f3bb0a52b49c0bcc373657a935ab5d6bde8d84b896168628d63fcf40517b838a737e409ba2fa9d2cfdfb5448cc20e9","ssdeep":"96:CB7yzzWGXC/upmGc9XY25Ds/RrbQtASx6+jXDPB3ES/7e9wgVk6S6YWtu0y:CBhUCgmGaY2e/RrbqAS7LDlErk6GW40y","tlshash":"7cb1a3e23190fdb7c339a6cd405100d0a7ad97d4311ac6ddb11f5e03264aceca6faa4a","first_seen":"2025-10-09T15:09:31.405753Z","last_seen":"2026-05-26T16:31:30.089498Z","times_seen":7,"resource_available":true,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"chat.bnc-a.com/","fqdn":"chat.bnc-a.com","domain":"bnc-a.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:25.222Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: chat.bnc-a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://api.erssegd.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: +kmNXFfj6ZCKh/iyEPcL0g==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T19:49:09.059463Z","times_seen":17805050,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"chat.bnc-a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/LOGO.png","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:25.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /LOGO.png HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: text/html\r\ncontent-length: 146\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-09T19:50:06.499889Z","times_seen":547763,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":256,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-sMTUu6Hw.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:25.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-sMTUu6Hw.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/index/home-BqARKqVa.js\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-67a\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1658,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1657)","md5":"b18d75c1e055528fb4a507d9d8e9259e","sha1":"5ef290ab6d94d2adf450606e3add00ac8e1f46e8","sha256":"80a10e3d09b1f66db40ef02c2cd39714295810bb3883599d04a648bf680f76db","sha512":"41c7f2d79a7f507941f49ecdff8018269e54c8feacc7d55af483fc7cd3aee023cb6efee0493f85d3bd6341c523e6d09f38e1598774915f18212337538c1e5eb7","ssdeep":"","tlshash":"ab31a68ef9c29138c34bb4c0d0984051810c9b2ae969a4e4e07bdf841fac585f55cb2c","first_seen":"2025-10-09T15:09:31.371623Z","last_seen":"2026-05-26T16:31:30.084538Z","times_seen":7,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-CKR-_Zvi.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:25.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-CKR-_Zvi.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/index/home-BqARKqVa.js\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-141c\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5148,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5147)","md5":"bb8043428a5fed8a9a31160dfdfe2d55","sha1":"6b2368252e7eb231997fafcac295920c1b6bd762","sha256":"dfd71180b14630fa6d0c66c0803c1f623b394327e561fac96f9e3089a0ee390a","sha512":"569d18e269f3213d755bfc5812e4c259e2f3bb0a52b49c0bcc373657a935ab5d6bde8d84b896168628d63fcf40517b838a737e409ba2fa9d2cfdfb5448cc20e9","ssdeep":"96:CB7yzzWGXC/upmGc9XY25Ds/RrbQtASx6+jXDPB3ES/7e9wgVk6S6YWtu0y:CBhUCgmGaY2e/RrbqAS7LDlErk6GW40y","tlshash":"7cb1a3e23190fdb7c339a6cd405100d0a7ad97d4311ac6ddb11f5e03264aceca6faa4a","first_seen":"2025-10-09T15:09:31.405753Z","last_seen":"2026-05-26T16:31:30.089498Z","times_seen":7,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-C3bWaTfJ.css","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:23.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-C3bWaTfJ.css HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:23 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-16f71\"\r\nexpires: Thu, 26 Mar 2026 03:52:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94065,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"15e3f94555aa51c9c3cee4e6b63c6b72","sha1":"21152967bafda08433c21961040fa190d42bf687","sha256":"b227d8890990c61b03bb2b93fa5214a98b3eae79450006f64f7eb6253742788c","sha512":"c718aa3e0a768817744ef2e2a48f90bd0d3ffbfdbcf80ce84e057e637a179a02847009a414883e80da3f04fa9669eb4f88a62821b1a7fb7616c709a9d715b15f","ssdeep":"1536:B1IyNBi3MFYaQj7FCwsBlDOFIxuVox83CjOVO:BvNIClDsIxuVS8y5","tlshash":"1993f6a4aac410fc7f2ad2b6db8276e8f22df5a1ce41dd94f00552190fd77f60513a2a","first_seen":"2025-10-09T15:09:31.410032Z","last_seen":"2026-05-26T16:31:30.091159Z","times_seen":7,"resource_available":false,"data":null}},"time_used":840,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":840,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/i18n-DSAA-f0j.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/i18n-DSAA-f0j.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/index/index-EevdVP_3.js\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:24 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 98\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\netag: \"68b00ed6-62\"\r\nexpires: Thu, 26 Mar 2026 03:52:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"b4621446c38971ef0b61516bbddacd40","sha1":"7a789ab4ee22f729419bf6eda90bbdb8a079f5b5","sha256":"54aa0a55b4fff47ef6aba9d5cb4f8743743498ecdb20431403da8f586e873dcc","sha512":"a1a27fb1625e8f5a2a55b5325884c89174b1f09fd102d214262b4337efa020100fb9347b2eac6013c9858ba01ad744417426bdd8b299cc2e73e6f955ca15155f","ssdeep":"","tlshash":"6fb01206600083fb1007189ca3075c0b18f1529802855680121d05502bf54dfd30ee54","first_seen":"2025-10-09T15:09:31.415675Z","last_seen":"2026-05-26T16:31:30.071101Z","times_seen":7,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/utils-D84phxC7.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/utils-D84phxC7.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/index/index-EevdVP_3.js\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:24 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 209\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\netag: \"68b00ed6-d1\"\r\nexpires: Thu, 26 Mar 2026 03:52:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":209,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"77827fcff716dc690173902150f2a9ba","sha1":"ddd79b76f1d2f57bd86c213bcddafa1ba72177d4","sha256":"66cdad73e9342f14ea876d7319cb196d9dfad2c7acdc202f78979f1e811a26f7","sha512":"25bc865ec817d0b0f26651eddd97b4c3aae6cd9c7600f683789b0bf680fdcaef6880e711a7d2d6ceb6af6873f9100d80882713aea32483784027edce16087979","ssdeep":"","tlshash":"46d02341144061fa90540cd85531b8462431eb3c411d95cebb5d414405c15a5055cd79","first_seen":"2025-10-09T15:09:31.421315Z","last_seen":"2026-05-26T16:31:30.08035Z","times_seen":7,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-CtKl_1Of.css","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-CtKl_1Of.css HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-cb1\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3249,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3248)","md5":"398ec457b51f2bf61c650c8604f9382b","sha1":"5caf5cc099c0142118feb7516d55bf4da8f7e6a4","sha256":"743f387ac9c3585e37c3337cbd49dfa41b8d49b6e8f3b6ce96d0ae5c79420cce","sha512":"0a322088a6ac185df8fcc0fd17d34af8e1e0a44bbb2b178942db48a8fbd9f77d777a778dd1701acdc3b4f8821b1dc0153a7cec5835c6bbfabf970e29ee0a2ac9","ssdeep":"","tlshash":"f061ab36a370a17b9f02f67dbb5a6adcf128e7714d01b3a5b281201888c7bfc1532917","first_seen":"2025-04-17T21:25:00.131083Z","last_seen":"2026-08-09T06:30:16.465081Z","times_seen":104,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-CQ0jj5mE.css","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-CQ0jj5mE.css HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-633\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1587,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1586)","md5":"4bc5777c04875c84c1e31fc89065d4fe","sha1":"0303ac9cdec1d72a1dac191b7c56f1afde2d6ed9","sha256":"9b63b805907cf76717a81e19b4316475a7296d566b7a315321fee3b1aa17861b","sha512":"a24a539e7428c174fe9398dedfaf0e376a7eddd7d0705404d24a909be6e361d53bbceabf798a027751266ee960af93c40cfd7cb042b0de7cae913cf0f92b31d9","ssdeep":"","tlshash":"78310735ec905877dd227124b6e165c8a03cf1717ea1899a712d7918cbaf6f4071b20b","first_seen":"2025-04-17T21:25:00.101735Z","last_seen":"2026-08-09T06:30:16.445559Z","times_seen":181,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-DRxx_djq.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-DRxx_djq.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.erssegd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-7db\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2011,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2010)","md5":"d4c799ffe283a77d550be72c99434db5","sha1":"f643dec0784cc9d03afbe765da81a9532fd49cc7","sha256":"1d5d727e100e494acb0458a67aefc16441ffc97e58a8b537abce34f5917afe66","sha512":"19c66f6fb83c808516b11ae5fe010f0f0920671707bec6b56463345ba990e0e31e666eb9db92a392f91ecc5d5a847d514e0d948ca106e85ace41ba5ec34b618b","ssdeep":"","tlshash":"7941b4c434aceeac93baa58455184c19c5041b5f7533c4e2e37e38134bdaec0fd36a98","first_seen":"2025-10-09T15:09:31.417231Z","last_seen":"2026-05-26T16:31:30.08548Z","times_seen":7,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/home-BqARKqVa.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:25.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/home-BqARKqVa.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/index/index-EevdVP_3.js\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-1ca1\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7329,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (7328)","md5":"048cda5c3432fd6a86a0d02ae946b561","sha1":"894838ffc4d0c09e1a587e763d247d9c954839aa","sha256":"28f06b7c9837d44cb0fe8decbb37ff89ea0743974ffc44eef8f02bd11af787c3","sha512":"79fd80c16f1e5a9ebbeb771c659dbe938ae70848752f21520b24cdd8fcbd5ac9890f59cbb6407ddb59ee2031d09b25fac7faa30b9cd34c6e3ef4608b89bad612","ssdeep":"96:9XXu/IT9/zv7uFee4IdByqgxr99Bx/Paajiid5PTzJ2eJ2f3M4aOOmp2t2TpGRzV:9nhzv7AH3yTxrdxq65PTNJJ8MbcQ2NWV","tlshash":"4be1d609b426d5bfac1351e8305a4940710d1fded2b5ca65b1fc8d201be1df8a75db2e","first_seen":"2025-10-09T15:09:31.386725Z","last_seen":"2026-05-26T16:31:30.092372Z","times_seen":7,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-DRxx_djq.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:25.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-DRxx_djq.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/index/home-BqARKqVa.js\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-7db\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2011,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2010)","md5":"d4c799ffe283a77d550be72c99434db5","sha1":"f643dec0784cc9d03afbe765da81a9532fd49cc7","sha256":"1d5d727e100e494acb0458a67aefc16441ffc97e58a8b537abce34f5917afe66","sha512":"19c66f6fb83c808516b11ae5fe010f0f0920671707bec6b56463345ba990e0e31e666eb9db92a392f91ecc5d5a847d514e0d948ca106e85ace41ba5ec34b618b","ssdeep":"","tlshash":"7941b4c434aceeac93baa58455184c19c5041b5f7533c4e2e37e38134bdaec0fd36a98","first_seen":"2025-10-09T15:09:31.417231Z","last_seen":"2026-05-26T16:31:30.08548Z","times_seen":7,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-25T15:52:22.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, userid\r\nset-cookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2; expires=Wed, 25 Mar 2026 16:16:23 GMT; Max-Age=1440; path=/; secure; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":548,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c3f2493f76cad1b8b0d8cf0ffdc88bb1","sha1":"982c2dca120e56a4b84eba6dbf0e6df5e9c27f37","sha256":"dfab672ec19a6a915ad8641ae748d4d93aa5c6c0c6e6879915814f8a52dc4118","sha512":"f19aea827d09097e11ee5517f7127903f3243c4fedf66418590c2045fa4553fde30e8135e6363c38c65d29c01376dabe6b6be2a2697dbe2512a5e1eae9a836a7","ssdeep":"","tlshash":"2ef0208688f0ca0e91144a182ee0fa0d2dc7e6534709dc4436ce607d8fc4bc6ce9f96c","first_seen":"2025-10-09T15:09:31.402046Z","last_seen":"2026-05-26T16:31:30.075846Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1243,"timings":{"blocked":488,"dns":61,"connect":210,"send":0,"wait":267,"receive":0,"ssl":213},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/home-D1yqgQlI.css","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/home-D1yqgQlI.css HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-7c9\"\r\nexpires: Thu, 26 Mar 2026 03:52:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1993,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1992)","md5":"e2ad3f17eefea74efa0ffebc303cd038","sha1":"4f7411b5c1e198d1c2f349581d73164db0456679","sha256":"a9a964a5299793c8fbe5bca1fd68d5b7268b95f909bf3e33d1830046087c7ab4","sha512":"d4cc4603d7e0793cc7c653425ac66e0140ef4d6c5215f88572f0fb614969eec8fc9f0c5fe125434be29aebdab6de76e6b41d2d42651ebd4ec1d110ca9639d260","ssdeep":"","tlshash":"89411275685c8078ef23a175339635c9713db274bc59ca9db01b20acebf76b90d63620","first_seen":"2025-10-09T15:09:31.403226Z","last_seen":"2026-05-26T16:31:30.094708Z","times_seen":7,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/home-BqARKqVa.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/home-BqARKqVa.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.erssegd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-1ca1\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7329,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (7328)","md5":"048cda5c3432fd6a86a0d02ae946b561","sha1":"894838ffc4d0c09e1a587e763d247d9c954839aa","sha256":"28f06b7c9837d44cb0fe8decbb37ff89ea0743974ffc44eef8f02bd11af787c3","sha512":"79fd80c16f1e5a9ebbeb771c659dbe938ae70848752f21520b24cdd8fcbd5ac9890f59cbb6407ddb59ee2031d09b25fac7faa30b9cd34c6e3ef4608b89bad612","ssdeep":"96:9XXu/IT9/zv7uFee4IdByqgxr99Bx/Paajiid5PTzJ2eJ2f3M4aOOmp2t2TpGRzV:9nhzv7AH3yTxrdxq65PTNJJ8MbcQ2NWV","tlshash":"4be1d609b426d5bfac1351e8305a4940710d1fded2b5ca65b1fc8d201be1df8a75db2e","first_seen":"2025-10-09T15:09:31.386725Z","last_seen":"2026-05-26T16:31:30.092372Z","times_seen":7,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-sMTUu6Hw.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-sMTUu6Hw.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.erssegd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-67a\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1658,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1657)","md5":"b18d75c1e055528fb4a507d9d8e9259e","sha1":"5ef290ab6d94d2adf450606e3add00ac8e1f46e8","sha256":"80a10e3d09b1f66db40ef02c2cd39714295810bb3883599d04a648bf680f76db","sha512":"41c7f2d79a7f507941f49ecdff8018269e54c8feacc7d55af483fc7cd3aee023cb6efee0493f85d3bd6341c523e6d09f38e1598774915f18212337538c1e5eb7","ssdeep":"","tlshash":"ab31a68ef9c29138c34bb4c0d0984051810c9b2ae969a4e4e07bdf841fac585f55cb2c","first_seen":"2025-10-09T15:09:31.371623Z","last_seen":"2026-05-26T16:31:30.084538Z","times_seen":7,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-B01Ct82_.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:25.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-B01Ct82_.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/index/home-BqARKqVa.js\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 530\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\netag: \"68b00ed6-212\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":530,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (529)","md5":"7d142af21c8441aa9d9ea0257fdbd7e1","sha1":"4196c8fe7914e943169ed4da6fe3a1f2cf167277","sha256":"eabc40e5590951a06d63761edd21716c97fb0bdf05fbd2d6d45df786105f13a4","sha512":"7049ecb639e3c3e1a8c469cfc971cb2786becfddfb97e585355ea49ac639af9b0f662ab306e25cc6d59936addae75d81c215527ca572eb143ffa52e9cbf50a1e","ssdeep":"","tlshash":"01f00eaea981e971b1093a44adae0c0313088005b190cc60e88d8ae423d00c8f3bf23c","first_seen":"2025-10-09T15:09:31.36979Z","last_seen":"2026-05-26T16:31:30.077883Z","times_seen":7,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-DEFiRqZv.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:25.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-DEFiRqZv.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/index/home-BqARKqVa.js\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-715\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1813,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1812)","md5":"f9aa563094d25e656d1e79d4b4022fdb","sha1":"565b5a2af48c87436899dda81896cbed92e42f1d","sha256":"e9dfaf173d9be616056f3aeb1bad15898c690b0c6f11dcd31e928ed00ad48c3c","sha512":"4e31346905901db1fb8b7105e96b1cba4abcabf5166c68f372715027ec2c7320cebf077f6114fbf5f4efaa8227b07c503d2bb1a3a9ed3d5ca75f5ca39f98b1b9","ssdeep":"","tlshash":"aa31b8cbb8dbc13dd33bcd5e4014442022583f8d7138c1d6b26b2b1cc779ad9ba29619","first_seen":"2025-10-09T15:09:31.376188Z","last_seen":"2026-05-26T16:31:30.077178Z","times_seen":7,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-KTuR9wD-.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:25.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-KTuR9wD-.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/index/home-BqARKqVa.js\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-6ed\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1773,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1772)","md5":"36eaec6c7067a788112f2bfc52569a27","sha1":"9ff982df9f11feda38af4d460cedbf73bc713abb","sha256":"789b41012e91308126a66dc95399ae3db6dffb677eedf7c5b35e144d9cc1ef09","sha512":"a9e67a516dca9f952dbd42fdfacf6bfe4f1dcfefeba8c1e6b094ac6621f03ac5a85f58966a80cabc416e85309f432858b819206a6a90c37541f86f191321d981","ssdeep":"","tlshash":"e231459df5b294389335afe7813a9a51f10e1d8ab116f0e5d4fe0c051ac2c46a1af62c","first_seen":"2025-10-09T15:09:31.381461Z","last_seen":"2026-05-26T16:31:30.074198Z","times_seen":7,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"chat.bnc-a.com/","fqdn":"chat.bnc-a.com","domain":"bnc-a.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:30.234Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: chat.bnc-a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://api.erssegd.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: SdJLgnvD+vJfvSrKpvNnbw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T19:49:09.059463Z","times_seen":17805050,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"chat.bnc-a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-DP49Ldot.css","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-DP49Ldot.css HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-bda\"\r\nexpires: Thu, 26 Mar 2026 03:52:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3034,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3033)","md5":"909ea3d480f8fb95c857c098e7ac223f","sha1":"8ba2e7eea615f8dbb71faf2374692cbaf1e995d9","sha256":"f0784bc6c7c5be80cc2f7a637a3c37dec63173a0c0ad31a7f3138fea5e45c514","sha512":"f4c85e1d458459d4deab9d2b40d2beda9d9264c5fd8979d191ae3ea44f89e3e52305b6d62568fda55b8c34500326a4692cd7689c961bdf1e976de7823103509b","ssdeep":"","tlshash":"f251334ef7acd5baaf1e3999b34b56ecb13c6b608c0082a7f300565c0bc3af70212215","first_seen":"2024-10-27T19:54:01.442597Z","last_seen":"2026-08-09T06:30:16.446105Z","times_seen":208,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-CCa8FFJF.css","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-CCa8FFJF.css HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:24 GMT\r\ncontent-type: text/css\r\ncontent-length: 562\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\netag: \"68b00ed6-232\"\r\nexpires: Thu, 26 Mar 2026 03:52:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":562,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (561)","md5":"400218fe243bf189827dff67121ead69","sha1":"0b30978e1e2c1f9750d857ec50dd5ceffbbaa3d5","sha256":"c23222dbca6ec0262b1025d434748c09445bfd8a5c369f174aa84ddc3f2f83ce","sha512":"79dfe7fc04b4b8f2b142053caf8f0af415d0ce8f8a2dc6dcb5335c668e13c1a82055bc0b86a0d0bd10fb56f8b5c51582e2b9d72e6ba0ec155368513e8ea425c7","ssdeep":"","tlshash":"99f087c66274e5387ed4307b2319b4e4a46ce88b8a22c5b5b2d382058cc35f22f20215","first_seen":"2024-08-19T20:20:38.836335Z","last_seen":"2026-08-06T20:40:33.626558Z","times_seen":155,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-Cd382mLR.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-Cd382mLR.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.erssegd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-288d\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10381,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (10380)","md5":"76f15f5468ba447bf46a62a1bdee0f86","sha1":"a64d50fd50bc38ee0e5bf29a6c892f342cef58aa","sha256":"e3be463bbd1f561a8c8809b9da1b62cf334e84c27fb8d1dbfa392268b5c8ec6f","sha512":"3a404bcf2a822324fadb4a3fcbf977cbb33f9cb80b3e69bbc4be6e40a0099e438e7f2b1957f6199e75a8695c6616380973e3261d4cedad0b7361bd9fa292ea7d","ssdeep":"192:FD1qkLXNUE1orZQTdp6DUtb0c67z/w4cAeH1a6f8r9TpgZ8dVwDPNDUWYPoC2Rz:FD1qkLXCLa50//NZsc6Er9lbwDlDUboT","tlshash":"1122e74574407072d77ba9c9d01849e0162d2f88b619c6e1b0af6d5927da4f0f4eef2e","first_seen":"2025-10-09T15:09:31.407065Z","last_seen":"2026-05-26T16:31:30.095973Z","times_seen":7,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/uploads/cert/20260228/0d51510e6a9838200635d11f03da8bc0.jpg","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:26.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /uploads/cert/20260228/0d51510e6a9838200635d11f03da8bc0.jpg HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:26 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 28 Feb 2026 03:28:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69a260e8-14f5a\"\r\nexpires: Fri, 24 Apr 2026 15:52:26 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85850,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x720, components 3","md5":"e5521b27443ff439e0ca8ef02885cd0b","sha1":"a7a2fb98bb688ecefae2fa3bfa1d966cfeca021d","sha256":"5eae7d59bf6a7b03cc1e844a029dc8b3baccf563cd5cf9682a67272a96702bae","sha512":"125a19d2207c882fbb7e402d5e9ec5f3190f017c6c662cbf873b47a6dfb36b83fbf61ca1a9f661525a94a5072e1eaf735a5aad08a6025e55c48b32d0bc303aef","ssdeep":"1536:e+4qyjfize2utt08S9fLG6dCWCJoCZuVRdeWwunFgBUgoemBr6P8B:V4ierILFcrCLVRsluyWgM9N","tlshash":"0a831270ae4821f0d4fdaaf989f103198d6136a2b3db5201d275ca5203f26f334f5a67","first_seen":"2026-03-25T13:14:42.482903Z","last_seen":"2026-05-26T16:31:30.079443Z","times_seen":4,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"chat.bnc-a.com/","fqdn":"chat.bnc-a.com","domain":"bnc-a.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:35.250Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: chat.bnc-a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://api.erssegd.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ALda5/EeYgSfrS5VDahAxA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T19:49:09.059463Z","times_seen":17805050,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"chat.bnc-a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/Market-BEFBsJHx.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/Market-BEFBsJHx.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.erssegd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-760\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1888,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1887)","md5":"ff76275b7b3a9328da19f824d3fa3710","sha1":"707868248dcacfc9ddfa2f8e0705f936f524b7ab","sha256":"3bedefd85f6d86f17c8e15af3aacbd0423dc8890844e6259895be9ad9529bd42","sha512":"83fddd54c48a60828204265eaa04bc8e3a2f378ff87b9ca479e51cce80a26c5543fe5e6c33f5d858a4c4fdd4acbb642f1e1550965d2ebde8f636c1f11b4fddff","ssdeep":"","tlshash":"1c41739ee839c6faa4aa08b491254031321a39dde202c14f63bd582633c3d6ca6cd3a1","first_seen":"2025-10-09T15:09:31.419517Z","last_seen":"2026-05-26T16:31:30.078677Z","times_seen":7,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-BG4rLZAS.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:25.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-BG4rLZAS.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/index/home-BqARKqVa.js\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-734\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1844,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1843)","md5":"2c9f431050838b5168751e1b1a5a6333","sha1":"15b99dd1df808d038e84643416e8f437e38bc211","sha256":"91242a6517f206dd33844f9d5801025b77b879ffa1d8f8b396db89d3eeafd96a","sha512":"02d12ecf338c048526b4615d7b537964859df7e53dc554007cc6dfc54eaaa259469fcae3fc96c80d72a373a54295a1c3e95e89c51022925d153d0d84a8069f51","ssdeep":"","tlshash":"6a314455fdd9a0701393cac8812a4ca1d648139bb57ce3d2e0ab28541bb569da478f08","first_seen":"2025-10-09T15:09:31.398993Z","last_seen":"2026-05-26T16:31:30.073337Z","times_seen":7,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-D7jqPvu7.css","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-D7jqPvu7.css HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:24 GMT\r\ncontent-type: text/css\r\ncontent-length: 963\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\netag: \"68b00ed6-3c3\"\r\nexpires: Thu, 26 Mar 2026 03:52:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":963,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (962)","md5":"41310ae0aa754e74debb017495f0acc7","sha1":"30175464b46f4a36cdb95849e1f87b1a2204c022","sha256":"5f12e0f5bd4d45ab3d15e7c41e13886a1e3748ec9a1285b2c3568e16a6b1bb59","sha512":"df61eb518f08cdaee1cd97abefe7b076ce75eb1a61b03f6f0595b65774b1f42e5b3b3d89a832ad141fb08dfca2f3e4a78713b715a3005e3736bc91bfae38f305","ssdeep":"","tlshash":"79114c2aae8f8474fecd76d1f78b51dab73c22208c80c9d7b20814791683af68572129","first_seen":"2024-08-19T16:21:07.354115Z","last_seen":"2026-08-09T06:30:16.444928Z","times_seen":142,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-DYQdpHvT.css","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-DYQdpHvT.css HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-a86\"\r\nexpires: Thu, 26 Mar 2026 03:52:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2694,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2693)","md5":"3f28253ee7f3d1cb19aeafad1111187f","sha1":"3130fac7725b7f6a5fff4a7c9df18a1067aa012e","sha256":"02bc3b1cad3d4bb9b0160135e6b16eb62133091d879c8d0d0a5b4ea831149626","sha512":"d07d7a8607add532475e31995dc647464951961675fbe74b8f202ce19ae29023272d997a3f873542094654e4e0e4a5fbcea3dcf88f602e8bb4ab9e162260c329","ssdeep":"","tlshash":"6051b3424892279d4693863e3198f3c8e07e74e33bb7dddaa1498dc1ac9b67509a3c53","first_seen":"2023-05-21T08:34:57Z","last_seen":"2026-07-30T19:41:10.372916Z","times_seen":232,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-BG4rLZAS.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-BG4rLZAS.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.erssegd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-734\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1844,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1843)","md5":"2c9f431050838b5168751e1b1a5a6333","sha1":"15b99dd1df808d038e84643416e8f437e38bc211","sha256":"91242a6517f206dd33844f9d5801025b77b879ffa1d8f8b396db89d3eeafd96a","sha512":"02d12ecf338c048526b4615d7b537964859df7e53dc554007cc6dfc54eaaa259469fcae3fc96c80d72a373a54295a1c3e95e89c51022925d153d0d84a8069f51","ssdeep":"","tlshash":"6a314455fdd9a0701393cac8812a4ca1d648139bb57ce3d2e0ab28541bb569da478f08","first_seen":"2025-10-09T15:09:31.398993Z","last_seen":"2026-05-26T16:31:30.073337Z","times_seen":7,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-DEFiRqZv.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-DEFiRqZv.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.erssegd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-715\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1813,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1812)","md5":"f9aa563094d25e656d1e79d4b4022fdb","sha1":"565b5a2af48c87436899dda81896cbed92e42f1d","sha256":"e9dfaf173d9be616056f3aeb1bad15898c690b0c6f11dcd31e928ed00ad48c3c","sha512":"4e31346905901db1fb8b7105e96b1cba4abcabf5166c68f372715027ec2c7320cebf077f6114fbf5f4efaa8227b07c503d2bb1a3a9ed3d5ca75f5ca39f98b1b9","ssdeep":"","tlshash":"aa31b8cbb8dbc13dd33bcd5e4014442022583f8d7138c1d6b26b2b1cc779ad9ba29619","first_seen":"2025-10-09T15:09:31.376188Z","last_seen":"2026-05-26T16:31:30.077178Z","times_seen":7,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-B-pImdcz.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:25.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-B-pImdcz.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/index/index-EevdVP_3.js\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-cf9\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3321,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3320)","md5":"4a3feea3bad2cf704547b8978344c21e","sha1":"f540a863087e9dbbe1c019083f909b7a5fd15643","sha256":"2c097088fe7f7e111858510b64d3610cf845e03a381e5ca435723d163ae87708","sha512":"f2d3c6a29f630b985399c2d67e7d2396fc6bbb07417ff04995b0ac65d77ff93d8b60969d649cb8105a5cd51f2953c9016a4c863ae43aeb166d50f1995d9fa695","ssdeep":"","tlshash":"5a6184ac78f0b972966b5bc0240bcdd1a90a27cae138c3d0f5aeac6123754f4913935f","first_seen":"2025-10-09T15:09:31.413869Z","last_seen":"2026-05-26T16:31:30.090368Z","times_seen":7,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-Cd382mLR.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:25.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-Cd382mLR.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/index/home-BqARKqVa.js\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-288d\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10381,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (10380)","md5":"76f15f5468ba447bf46a62a1bdee0f86","sha1":"a64d50fd50bc38ee0e5bf29a6c892f342cef58aa","sha256":"e3be463bbd1f561a8c8809b9da1b62cf334e84c27fb8d1dbfa392268b5c8ec6f","sha512":"3a404bcf2a822324fadb4a3fcbf977cbb33f9cb80b3e69bbc4be6e40a0099e438e7f2b1957f6199e75a8695c6616380973e3261d4cedad0b7361bd9fa292ea7d","ssdeep":"192:FD1qkLXNUE1orZQTdp6DUtb0c67z/w4cAeH1a6f8r9TpgZ8dVwDPNDUWYPoC2Rz:FD1qkLXCLa50//NZsc6Er9lbwDlDUboT","tlshash":"1122e74574407072d77ba9c9d01849e0162d2f88b619c6e1b0af6d5927da4f0f4eef2e","first_seen":"2025-10-09T15:09:31.407065Z","last_seen":"2026-05-26T16:31:30.095973Z","times_seen":7,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/use-tab-status-CWZc7TFI.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:25.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/use-tab-status-CWZc7TFI.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/index/home-BqARKqVa.js\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 97\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\netag: \"68b00ed6-61\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"e3ae63d0e719b45c4d2617343d4c46bc","sha1":"931ae4b2c1306ca5e0e1a31ac9673f068d2d580b","sha256":"502b677d55313de6313106c91ba89f338cd3ab76fc53f463b3ffa3279fcbc51c","sha512":"4bd7ebed5496b500664b67c2a045ce7eaa85c256c35bad5214858513f8a5fb9510c98403bd2e4bf35cda3c0409665cf8d1768187c7c23cbaa99f41d238fd7bab","ssdeep":"","tlshash":"2cb0121f580013fe04090e8e230858374390dd5aa3929ef0620c457013525d6f60d991","first_seen":"2025-10-09T15:09:31.40087Z","last_seen":"2026-05-26T16:31:30.086251Z","times_seen":7,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"chat.bnc-a.com/","fqdn":"chat.bnc-a.com","domain":"bnc-a.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:40.263Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: chat.bnc-a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://api.erssegd.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 00MXBssNuO1Fwve0IO7yMg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T19:49:09.059463Z","times_seen":17805050,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"chat.bnc-a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-D8G52Pc0.css","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-D8G52Pc0.css HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-791\"\r\nexpires: Thu, 26 Mar 2026 03:52:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1937,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1936)","md5":"8bcea6122f4da3a390e585a9cb955364","sha1":"5893fbd2b4bcf471737e4191cc04c2d28bfb0b17","sha256":"fd42d3f7845b3e4e864d1824382953519bea03bd4b8f249ba6e8b0ed6fccd74c","sha512":"a58954ada7927f6c872feb176f7ef01eaf3ab24e0165d18a458117bccbe4bf058d777ddca5147cd16d2bd25cf9d83bcff5232de3c924490db6766944d00f1593","ssdeep":"","tlshash":"7041d4726594713dff06f0e4936776d8a238f423d902c19ab30453188ac7ff566b226e","first_seen":"2025-04-17T21:25:00.096293Z","last_seen":"2026-07-12T23:26:43.164569Z","times_seen":98,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-B-pImdcz.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-B-pImdcz.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.erssegd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-cf9\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3321,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3320)","md5":"4a3feea3bad2cf704547b8978344c21e","sha1":"f540a863087e9dbbe1c019083f909b7a5fd15643","sha256":"2c097088fe7f7e111858510b64d3610cf845e03a381e5ca435723d163ae87708","sha512":"f2d3c6a29f630b985399c2d67e7d2396fc6bbb07417ff04995b0ac65d77ff93d8b60969d649cb8105a5cd51f2953c9016a4c863ae43aeb166d50f1995d9fa695","ssdeep":"","tlshash":"5a6184ac78f0b972966b5bc0240bcdd1a90a27cae138c3d0f5aeac6123754f4913935f","first_seen":"2025-10-09T15:09:31.413869Z","last_seen":"2026-05-26T16:31:30.090368Z","times_seen":7,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/use-id-BO-cMGpW.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/use-id-BO-cMGpW.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.erssegd.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 151\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\netag: \"68b00ed6-97\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"f7392ed76ee3b7b49a2dd2c367da89c5","sha1":"6c4d650eedc486142608e052829046aa5a2a1ec0","sha256":"0041e3a3e8375ca9ba6703c7f575cb9d7d3a9268cebe3ef27cc28d0e3b3d3d04","sha512":"90fbb7a633e9ca4fc7ce4c4c534305e5e92a2198d366a55eef2e81a2f3b75c3be205fd3db4f360cafdefb8484064378698401c59a1ee787eb6d764aa88591e95","ssdeep":"","tlshash":"1bc08c49744821f5260a0ce9e22a4a7b812a7810531aaaa1f2780b2605a226a43baf50","first_seen":"2025-10-09T15:09:31.368337Z","last_seen":"2026-05-26T16:31:30.088066Z","times_seen":7,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/api/Carousel/getList","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:25.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"POST /api/Carousel/getList HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://api.erssegd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, userid\r\nset-cookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2; expires=Wed, 25 Mar 2026 16:16:26 GMT; Max-Age=1440; path=/; secure; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":171,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7096f1e6a4de8475e64641124556b142","sha1":"e682842fe2c274a0007c783f1c92099130269988","sha256":"586e4743e0f8d8d54e300f38e1dc9a108e7d154d5d72aa0f13cc2137f1afef0f","sha512":"1b8b2dc3c6031a87a279c5853e856d49b3d5856579fbd2c7e1d105f66271d422d44532da860f1e5877297202ff3d9626eaf8e0a38a264b3ec56d1836cd3bc90b","ssdeep":"","tlshash":"a9c08045adf49c65d40911415899d5d54518360f0c81078415ccee69c05c1711567532","first_seen":"2026-03-01T19:14:38.27291Z","last_seen":"2026-05-26T16:31:30.075056Z","times_seen":23,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-EevdVP_3.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:23.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-EevdVP_3.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:23 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-13a46a\"\r\nexpires: Thu, 26 Mar 2026 03:52:23 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1287274,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41625)","md5":"f6ee84d4d306476818ea59bc3a99525a","sha1":"a974a54c365b238bea82fcfae8d28c26a257b824","sha256":"80df56d11c08c0a6b3eb1740e0401928dce5532245e33a9428b5d9c9760b0552","sha512":"f53375b3cd5e6bcee7403ebc644bae7807e3f07d003543962368a153e902fe11a1e3e4104c7dabcd5dd466fd6b267d69163341652ef867b1436e0081240870c0","ssdeep":"24576:1nFg6W2O+UjOwBHOgTnaCiMW/rVRNvXMen7+B4gCcchCW06uX5NMaRyO3:1nFg6W2O+UjOwBHOgTnaCiMW/rDNvXMD","tlshash":"6045af2025ca5715c3d027e011273e0da63aafe5e78ce6d5135f98e237e3e1ae64da34","first_seen":"2026-03-25T15:52:48.062945Z","last_seen":"2026-03-25T15:52:48.062945Z","times_seen":1,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-BFldImpd.css","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-BFldImpd.css HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-549\"\r\nexpires: Thu, 26 Mar 2026 03:52:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1353,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1352)","md5":"47eca8094b0571ef5429f0b8b75b90a2","sha1":"79f3ec8023d3944090043a9f30915c48592c537e","sha256":"d365937f9217242c8966e985403b568d8e833be8bb158f2ad9f34290ba8ad14d","sha512":"5711cb8179e0d5adc59a206d3a70f985644eff50984213fc35888e1863691681d86c730237f49c87e1a5b4d76efb3994e93af12578a005e91a4f9a5e2d3b3c8a","ssdeep":"","tlshash":"3821ce35a978993f6f1271251bda06da702eb768cc20f6a5f624a2d009c73fd1633313","first_seen":"2025-04-17T21:25:00.09228Z","last_seen":"2026-07-12T23:26:43.156742Z","times_seen":92,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/index-DRgSoRHP.css","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:24.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/index-DRgSoRHP.css HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:24 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-48f\"\r\nexpires: Thu, 26 Mar 2026 03:52:24 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1167,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1166)","md5":"06b93771602fedbaaeca00f18811caf7","sha1":"884cb958a064be2e09641de107de8d421324f58f","sha256":"09ccac2b7d89c874fa7e4c18fb8dbd51d7bab4e6cab1dd3df45917ccf7d02dad","sha512":"fe6b29c63bf0964dc93bb052b0a588aaa4345384ce62cfb723813cb9a4b77912f16fcaabcc8c41c7f6055819634130b483de286cd47ff5380d58249ed7e27cf2","ssdeep":"","tlshash":"4d21e7497ee1d2ff3f6aa624365f96c464380e524fd0c754bd00516098cf9723a32385","first_seen":"2025-04-17T21:25:00.075831Z","last_seen":"2026-08-09T06:30:16.448313Z","times_seen":170,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/api/site/getsite","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:25.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /api/site/getsite HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: Authorization, Content-Type, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, X-CSRF-TOKEN, X-Requested-With, userid\r\nset-cookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2; expires=Wed, 25 Mar 2026 16:16:25 GMT; Max-Age=1440; path=/; secure; HttpOnly\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":313,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c9e232dcdb37c55f0e832daf605743e8","sha1":"4d5469426bd062330c2b89c48356f5daca87e961","sha256":"bd6bcb54444456ec07a468fac48c1cf9d81491622feea315d6fec660e4518774","sha512":"aa66bce8e4c9d71389983ea47037f41f4e21e28843a84ae7fde7c46d2b9c32169bebf2951c2f5ae4d5e20cc2c8cfb4164ee5c67725d94b0ce8b0cc28b8142b08","ssdeep":"","tlshash":"9ce02609d6b874734a04618219df41058aed5383044a27a823acaf91829db7aa9118a8","first_seen":"2025-10-09T15:09:31.396541Z","last_seen":"2026-03-28T14:13:23.852077Z","times_seen":23,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/Market-BEFBsJHx.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:25.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/Market-BEFBsJHx.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/index/home-BqARKqVa.js\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68b00ed6-760\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1888,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1887)","md5":"ff76275b7b3a9328da19f824d3fa3710","sha1":"707868248dcacfc9ddfa2f8e0705f936f524b7ab","sha256":"3bedefd85f6d86f17c8e15af3aacbd0423dc8890844e6259895be9ad9529bd42","sha512":"83fddd54c48a60828204265eaa04bc8e3a2f378ff87b9ca479e51cce80a26c5543fe5e6c33f5d858a4c4fdd4acbb642f1e1550965d2ebde8f636c1f11b4fddff","ssdeep":"","tlshash":"1c41739ee839c6faa4aa08b491254031321a39dde202c14f63bd582633c3d6ca6cd3a1","first_seen":"2025-10-09T15:09:31.419517Z","last_seen":"2026-05-26T16:31:30.078677Z","times_seen":7,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.erssegd.com/index/use-id-BO-cMGpW.js","fqdn":"api.erssegd.com","domain":"erssegd.com","tld":"com"},"ip":{"addr":"34.150.85.92","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.erssegd.com/","date":"2026-03-25T15:52:25.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.japfc.top","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 01:27:10 GMT","end":"Fri, 29 May 2026 01:27:09 GMT"},"fingerprint":{"sha1":"EA:65:79:46:F5:AD:59:53:49:B5:09:8F:68:3C:AC:D2:4E:0B:7D:03","sha256":"AC:93:B5:68:DD:C2:42:D6:E7:C1:F3:90:AC:74:E7:4F:6A:26:36:1B:9F:4E:4C:86:19:6C:25:80:BD:A5:27:3A"}}},"request":{"raw":"GET /index/use-id-BO-cMGpW.js HTTP/1.1\r\nHost: api.erssegd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.erssegd.com/index/home-BqARKqVa.js\r\nCookie: PHPSESSID=a506a76e1650f88ca2eff469efca4bf2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 25 Mar 2026 15:52:25 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 151\r\nlast-modified: Thu, 28 Aug 2025 08:09:58 GMT\r\netag: \"68b00ed6-97\"\r\nexpires: Thu, 26 Mar 2026 03:52:25 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"f7392ed76ee3b7b49a2dd2c367da89c5","sha1":"6c4d650eedc486142608e052829046aa5a2a1ec0","sha256":"0041e3a3e8375ca9ba6703c7f575cb9d7d3a9268cebe3ef27cc28d0e3b3d3d04","sha512":"90fbb7a633e9ca4fc7ce4c4c534305e5e92a2198d366a55eef2e81a2f3b75c3be205fd3db4f360cafdefb8484064378698401c59a1ee787eb6d764aa88591e95","ssdeep":"","tlshash":"1bc08c49744821f5260a0ce9e22a4a7b812a7810531aaaa1f2780b2605a226a43baf50","first_seen":"2025-10-09T15:09:31.368337Z","last_seen":"2026-05-26T16:31:30.088066Z","times_seen":7,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-25","alert":"Phishing Block","trigger":"api.erssegd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-25","alert":"Sinkholed","trigger":"api.erssegd.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}