{"report_id":"c2f9b135-b64f-4634-a987-630ec0840327","version":6,"status":"done","tags":[],"date":"2026-03-04T13:15:09Z","url":{"schema":"http","addr":"mercuryonlinefinance.com","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":0,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"mercuryonlinefinance.com/","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"title":"Mercury Online Finance – Business Soluitons for small business","dom":{"size":235663,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64049)","md5":"afcef9669568761f9ac0feef5d5c403c","sha1":"7f6bba64ebb4e452964061e6e3d6a140d1764df5","sha256":"b870a0bf54ce94a9fea3459c8a9fa62ef35f14cac9e110f2c575f7c851c1fd94","sha512":"ede893bf297917ec3102d657fa993501f95210245ade722cae585e808b4d6c5a0de40041781ecc043752939bb10d0e2d5276614923dc77544b655709cc3ed398","ssdeep":"3072:+6+S23SvsKipovi9gbM7jdCsZgMNWI+6KGfRdP:x+S234i9gA","tlshash":"e234d861bf522436213b03dff067270c20e6da4bea1a54e1f5fd415886eafd539b260e","dom_hash":"domhashe0dc4592ad730fe80854dba981892898","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mercuryonlinefinance.com","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":0,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T13:15:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":3,"received_data":130435,"sent_data":1709,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":4,"received_data":61420,"sent_data":2201,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mercuryonlinefinance.com","ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"domain_registered":"2026-03-02","domain_rank":0,"first_seen":"2026-03-04T13:15:11.259078Z","last_seen":"2026-03-04T13:15:11.259078Z","alert_count":88,"request_count":88,"received_data":3770716,"sent_data":45738,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.35.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Crisp Live Chat","description":"Crisp Live Chat is a live chat solution with free and paid options.","website":"https://crisp.chat/","common_platform_enumeration":"","icon":"Crisp Live Chat.svg","categories":["Live chat"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"bxSlider:2.6.2","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"client.crisp.chat","ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-06-09","domain_rank":168029,"first_seen":"2017-07-02T12:33:45Z","last_seen":"2026-02-26T04:22:57.359544Z","alert_count":0,"request_count":6,"received_data":513789,"sent_data":2939,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"coin-images.coingecko.com","ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":550283,"first_seen":"2024-05-30T15:11:00Z","last_seen":"2026-02-27T15:31:18.062329Z","alert_count":0,"request_count":11,"received_data":173874,"sent_data":5460,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"client.relay.crisp.chat","ip":{"addr":"64.227.36.222","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"domain_registered":"2017-06-09","domain_rank":159579,"first_seen":"2017-07-02T12:24:26Z","last_seen":"2026-02-26T02:21:51.776259Z","alert_count":0,"request_count":1,"received_data":440,"sent_data":603,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mercuryonlinefinance.com/astra-flexibility-js-after","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"acd1942358f0720601e366495b39384a","sha1":"0f75ecd22219658e9a20ed4001d998111f42b94e","sha256":"bc071cac7e7d5e3b2c9e17fd95160a73d1d4758ab1f893c51fe3786ad0c73303","sha512":"4c658e963ecac9c5d9afce86987361d76c1f7209ebe614a8a973944cdafad5e173e7b6972e604f6d574865e94a942af25295ba669c665f1e911d04f6e07cff1a","ssdeep":"","tlshash":"e1c092b5c2e0a52705bb097ba8e7e60964609821eab7b168811cc32c8872ac01da1bcd","size":179,"data":"","first_seen":"2026-02-11T04:15:58.002671Z","last_seen":"2026-05-12T00:50:44.835373Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"966afd982b5d6278b9d5d4ca234f4a61","sha1":"01ce9137cb89fc93cdf377a2a263ea2397839f98","sha256":"e864bd0b749bff7cdec9d0b0e99efd29901e6e5391e511d6b1713547fcbc6cd8","sha512":"5bb386942485912c3412d67f637042a744334a85574fac5a5b6e1bc4f347e560676df3e6f32f123689649455e3ee99fe5c836ce1f997d4b0149b7844e1b9784a","ssdeep":"","tlshash":"dc81879ae77638dbb2f900f2697a0d47e7614435d6c8d438c9bea3141cb5893c274b46","size":3881,"data":"","first_seen":"2026-03-04T13:15:17.575415Z","last_seen":"2026-03-04T13:37:46.397261Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.12.3","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"424d1bd49a0f7bf705d9342a91c0089b","sha1":"94166e2c3fb906fcdacd8976d14638201d0a7bb9","sha256":"66b713cb51fe6103cd8729bc0c245c9497295b6873bdb9be7e8196caf5e5326e","sha512":"1694d2c8689eb7fb9e580bbe8184a6636cf6d05619ed16edb914155bf8f4488921d99ebfcbe5d1f5b3504435f13e2050934ae8d1eefdc432a4a98560180cb52f","ssdeep":"768:uYEPx6KoYcFDTHjCqoKoCo9or6jCRcjC5LltbmxPE22Ve8KTX6VzSD0tIzQ6IFNH:uYEPx6VGe6jCRcj6lBmxPErhdSLWNdio","tlshash":"12c272a66300293604fe17e7f5daabc5767114affa0944111838cc2e19a8fd352f5afd","size":25965,"data":"","first_seen":"2025-10-07T10:54:39.300678Z","last_seen":"2026-07-24T15:59:20.627309Z","times_seen":20989,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/astra-theme-js-js-extra","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"829355638f01bd6a166bee588b83d58a","sha1":"0c61e4b45579c694360952f52dd77eebf96774f5","sha256":"04d2ecbd05212f4b678451bff0e0bc441124cb4b0c721a06ea7efd3d028a3045","sha512":"cdb156cc2cc30ba6d2e758fb59b35b76359cb218a83b4526f3f0b317cfca58b872da0c0631043415e6654dd839aed46df780e40ec9986bc32452cf03e52f4fdc","ssdeep":"","tlshash":"5511a914c2d22e01b6db4cb290218fa8b0fd9080d1d8f0ddea7c8e4862e6a1a1b68209","size":1055,"data":"","first_seen":"2026-03-04T13:15:17.577556Z","last_seen":"2026-06-17T16:24:52.482589Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/l.js?ver=6.9.1","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c1e9c90f66c7a8e94eb7d602c744303","sha1":"e42f6c321634ad9b03d6fc164483dffd84aedc31","sha256":"6ec8d9d97667b4a6a9f2f9fef150a86c75ed4fba0944c02c3cbae478309de88d","sha512":"abbb47a7a2fd18c5a825cc7b4173b2e15339f158634ffd28455bb32f8d151f9f6186535fbfb304938d0a600c6b684e940d40f95b230773066a623a56006f3a57","ssdeep":"192:qKSfZ0VsU+ZO09SOQal5eK5Y+91Edlng99dgY3AjL/7Cb/+io:K+IHmMeK5Y6iu9uY3Abkk","tlshash":"29f172173269603105a362ef123b6a45f03361295c85825cb569ecf1297ce4fa13bffe","size":7755,"data":"","first_seen":"2026-03-03T14:46:23.623289Z","last_seen":"2026-03-04T13:37:46.283586Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.5","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"73c07e9630db2adbba0c6bc0bf568719","sha1":"dbeb1065ce0ea1fc9fa6b9df9e5e1700a8dee09e","sha256":"f4bdadf362076967230901fdfc69c8df84957f6615dec226b99ad2abb64c2c76","sha512":"d48774149b65604aeee68cf2936bfe5c84714bab61a46a190952b595ee79ce8aa2c0549a3755768b3a3615c2b6abe0cfdc69c398a77296b8ceebc69bfea8f8dd","ssdeep":"1536:yuyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:C+uhIAu","tlshash":"cf33d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","size":50503,"data":"","first_seen":"2026-01-29T11:04:52.803648Z","last_seen":"2026-07-24T16:05:57.152864Z","times_seen":30018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor-pro/assets/js/slides.c0029640cbdb48199471.bundle.min.js","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"1696ab7674d7aebdaf13ab1a4a7770e5","sha1":"0086840a013722550a9a968a0656fdb2187c6846","sha256":"957ed5554e160536d559e7a0afa9297cd69c11c4053de9abcff2ffc39e0730bd","sha512":"9a3793c060da9ff135b4662b4c33755f861112b0b009567f935cbb1ea0f5b7f3e653666f148393e008584e63744cadedca9b2d596d3c44752fa0741e3a1165df","ssdeep":"","tlshash":"5c81878230413c3719ef89a7301684619fa107c47902b2ee79e9889ed0bb996136f7f5","size":3926,"data":"","first_seen":"2026-02-12T06:14:15.540255Z","last_seen":"2026-07-24T12:56:41.958707Z","times_seen":827,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/elementor-frontend-js-before","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"246eb4495bd6671ea793933452d753f9","sha1":"3f782d6adab0571da5d8bb8be9ed7213bf38c7a7","sha256":"760961a52dd578d18a016383ff088914ad85d076b151c5900a3a42b07660c092","sha512":"f80c1bf26b271ece4d19a5977fcf0e349602ce885bba0beb165b01f85a2c4d01160b9ebe176537540e91f92d2f19411069c833091c6fb36ccc2003fdc7bf6653","ssdeep":"","tlshash":"d6717321f9451ebb83e39b713927bb0b54ac0625e04178a5f4ad08bd15f69783207d57","size":3526,"data":"","first_seen":"2026-03-04T13:15:17.579461Z","last_seen":"2026-03-04T13:37:46.39565Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/ccpw_bxslider_js-js-before","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"374a038ff048e8a91c9f2ef4474c674f","sha1":"a9a50766c82166c9959ccba8242bcaac191e125a","sha256":"f31f7bd9289086963090d0ed7d7778bfdffcb66d3e05275b09d696e31f0832ac","sha512":"0116b3b93a39121edd5948f01d2b24a9e1b19da178a983957cbbf6b95d2a01e14bd002ae51a2669fda9c7afbd03e94a6ea7ce1840312a9f0112db0466ff0a9aa","ssdeep":"","tlshash":"4f1192aaeeedaa4614f70a789537db92f22bf025f417046ac98d206448bda5a0385d40","size":981,"data":"","first_seen":"2026-03-04T13:15:17.581207Z","last_seen":"2026-03-04T13:37:46.391539Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.35.1","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcca4162426ebc5a6493fa8e031437b7","sha1":"c4c2eefec9d2dab14564503a39d731d497d69133","sha256":"f3f5488126e1c6bb29e31937c79985cc4820c58e277ac345bfb5cd7071a7f0c4","sha512":"7394048e92d30386f83300affba4f5081abbc7d3a2fe9981fda9b47b1b28b275e664396eac531ee3d7f55f71bb6e994a45b29737b340e25e542be4898d115947","ssdeep":"96:BifNg2SXdvjUq7VbocvCHHAiam4NBEPnh3CDjl2D/VTKV47YQGLo7cu8k2:IVNSXdvZVbocakNOPEDe/QOkQQbk2","tlshash":"c2d153980a589e2f26e13ad8b0976b701a3dd0723c19e991e651eddc18f8fd143da932","size":6248,"data":"","first_seen":"2026-02-11T15:12:19.188492Z","last_seen":"2026-07-24T16:05:57.169212Z","times_seen":14143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"83e9b29f0086bba50d653f1cb8dedc3c","sha1":"f8f89387c9aca9d524bb638eae457d4659efca52","sha256":"2ac3af00c283c0b2ae6108fa83a2053e51274a2a812fb063916cbe19bc4f96b5","sha512":"c8018876ee96b4600ae32342ec6d21b452ad4109d605fb838f146b734de274ef5e37179567a2c67ec828dc1b673364637fc82e7dfe8f7adbb18e20555577160c","ssdeep":"3072:pJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/Yvr:pJLC4dkEUYnafpl9v8cIWybV4y+oGMMG","tlshash":"fce3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","size":143709,"data":"","first_seen":"2023-03-14T09:12:04Z","last_seen":"2026-07-24T16:51:14.532851Z","times_seen":102043,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-24T16:52:45.528884Z","times_seen":308844,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-i18n-js-after","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"86ba8acb927ad449cb64e725575bbd50","sha1":"7939f07916b8f620d1bacbda3ba0f571455d5dfa","sha256":"e1b883257a8847387fbe9df820516470836d426e818f31246fd494db7951d45d","sha512":"2c15d02731ecbdf66ba17ab4e084230dab838c7f36e99bbed4b40ffe159138fafe3e4064523165c5ccf5d5c5f10b0cdcb7a6def2d7f4885a1af214ef8cb81c62","ssdeep":"","tlshash":"6b1112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":987,"data":"","first_seen":"2025-12-03T01:19:42.169161Z","last_seen":"2026-07-24T08:09:04.122377Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1e61eabb0c508a4034e9463f5c21415","sha1":"447d61fbd289f19c196dca6db57fdabf396f37ec","sha256":"14a0347940d8cd4bb00302adc1f0e7a52331a4e1453dbca140e5064622f4d1ce","sha512":"f0d5eb7750e9bd24c160562d63b62a3e8fa761d0e9e9dbdc522c1ea848868eb301bccad139ac58e713a32abe4c899064b7c179ac43ccf87eee0d9a1b23322426","ssdeep":"","tlshash":"1bb092b502e0952705ba055ba8a7e609646098216ab7b168811cc32c8872ac01da1bcd","size":119,"data":"","first_seen":"2026-01-06T15:13:01.552784Z","last_seen":"2026-07-16T23:33:25.965473Z","times_seen":10502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T16:51:14.503279Z","times_seen":988941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","size":5520,"data":"","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-07-24T16:51:14.442419Z","times_seen":199350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/ccpw_bxslider_js-js-after","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f6002dc88b2a5ac8e8d5aa4075003bd","sha1":"fd4ce85d0b6fed3088f5ab76ef7ea1089902a209","sha256":"52b2521c6550b1b1f765732f37e63ca8deb8c30120f01734a5b20d874084e0c1","sha512":"b0a3b2c4cbb106b9ca683aa2cd48d15306bd7de3e198e614fd3227fcb04bfa18eb9edec5572c62bc8fef929751f20a112713733c0418f62ffe3165706596d366","ssdeep":"","tlshash":"19215591ff6f5527a173347a0aafa592a9ae6038e81248a7fcad501803ec80a11d94a1","size":1350,"data":"","first_seen":"2026-03-04T13:15:17.585519Z","last_seen":"2026-03-04T13:37:46.37687Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.5","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"883a3e2185da852f4ac19d9dfe07980b","sha1":"67320a1df0d605176054ca2ff86b18ad1caa96bb","sha256":"529e8e21ae7e2becebfc8b809e0137e68546d7c9a1b2bde77755897878590406","sha512":"978f820b79fda69e8eb814b078199f262b71882e762fbedc4fb917182a6636cfdf5e03f8e43f2c7cf0258d5a616d03784db406cd2c398024f546b8c41e4bbdfb","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDgUl8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNg5RmH0IW9v7G/2","tlshash":"e6c163981a54fd2b31e139d8e01ba734252ec0373c1af981fa31eced64e4ed187aa531","size":5677,"data":"","first_seen":"2026-01-27T11:31:27.113729Z","last_seen":"2026-07-24T16:05:57.099271Z","times_seen":12930,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/js/ccpw-bxslider.js?ver=2.6.2","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fa1fae4c40bdd5643c7cb63270feca5","sha1":"7a5b846accc96729c87134923db3b7c9f8d578c0","sha256":"f7bb97557e3a600f74d24deeac38c9a7b8cf7fcc6c1728336ca6d349dd4f8cbd","sha512":"3476cdf904a2a2b9f8f16356d39d695fab34446013f2e0ca62120e24bd663b2544e33256e548008e5e10f86cfdc8e0504918c272e38a29d138a88cc6ebaae8c2","ssdeep":"1536:MOUfau540Dhgu9Y1B8CMlFbBqHWngYbGACsV:M1v40DhPg8CMlW2ngYbGACU","tlshash":"5e632f1561a022761932333deb8aed00e6fa42178525d1a5f9fd871cdfb066401fbfea","size":70023,"data":"","first_seen":"2023-03-07T13:03:24Z","last_seen":"2026-05-24T03:48:28.890749Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dd361b7473936c5c8f5bf661c323973","sha1":"5c8f2bcac20956a31c9cff999d50b99f9ee8f9fd","sha256":"55922883b583583787dd3e36a6ee97b5bedc12eec38a24b6bd271d53b8ebf1c2","sha512":"4181a000ecc679d08f6cad5ddac0283744c6dcb07822a19d2552105e4a9191f1baa4a1590975a71325c56714a37084f8122afe463170ce54b5a56d1a1c7780c4","ssdeep":"","tlshash":"a4f05c7a70d278ff200b44520a97105de6a81cf5012961417fbd44382a75ea4a23139f","size":449,"data":"","first_seen":"2025-06-30T23:09:48.860419Z","last_seen":"2026-07-24T16:59:59.802435Z","times_seen":90914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","size":1348,"data":"","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-07-24T16:52:14.341885Z","times_seen":123265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","size":8481,"data":"","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-07-24T16:52:14.340495Z","times_seen":144803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T16:51:14.517893Z","times_seen":907000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-07-24T16:52:45.514343Z","times_seen":202669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/javascripts/en_default_6e82e2f.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5dba00db99c05d364837e2c402eca29","sha1":"5b3c70249c0481f42c79005fada3e8f1adcd6922","sha256":"464ecefa27355e15ba392fa6937a098dea82dbeae01874a007c3440fe8fb25a4","sha512":"2302a00d715ebab42b428f52fe0a110e9a852b5c4ef3cf12d85f78c157e0ad5effeb3c1b6e20e8499a0edec1c657189e459c90290ce9b879e752781b4f739345","ssdeep":"192:YFmXDS8ajwhwPteE2WZXikEeMeTAFGySAU1RrUWYGfu7nOmrY2FYXC+LvvKTzHrO:YFmX28oXikEeMeYGySfRrLzmCQrO","tlshash":"2e52a60eef36ce7b02774b83b084b6124eb111b106d0687ed45d497d02a4ec9b6abf4d","size":14213,"data":"","first_seen":"2026-03-03T16:23:17.028431Z","last_seen":"2026-03-04T19:20:54.626Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=4.12.3","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3f609a6ebd5b8fede4abc63e105a7b7","sha1":"6cf96160fa67d56a7be3c68b1941d3af0061a69d","sha256":"cb7b88e5a91d97805b4efcbb6d4076cf93a62fcee29a5a363ed66dafca0dec09","sha512":"afd5aca3d8468c121b02d8b93f219bf9157c36f94a1df1511c3803ea70671d872bdb2ff6a04bcaf1110355a10ec5f9f2b2e28f9d50cb3447ee845d6ea00303a4","ssdeep":"384:uOgKnOUyVosSYlDjp1CAWa54XoO4qd7auYk4FozQ5rY3cYaTtlUBETID9g4ST6C7:Ng0OlVosHlDjp1CAWa54XoO4qd7auYkA","tlshash":"07620dc73a4c342246028e88fdab9a1578a60f6e0b2c4758d157b97400b6d571debbff","size":15525,"data":"","first_seen":"2025-10-07T17:03:00.325877Z","last_seen":"2026-07-24T15:59:20.68661Z","times_seen":17613,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/crisp-js-before","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a46cb6ba72397b4e37b070fbaa238339","sha1":"e9d3d72f927a700dd23251eed6ae21608235415f","sha256":"2cd093453ff7b30487a8f5a6414fe55428be2af6e7c10183c52f8f6ef84bf185","sha512":"48e3760bf5cf0b09026634ce24fbf40a5d4eb7e7592012105af56e12f64077909e07a24b1293832323b6d8934dd52d22ca19322f80c28964ea79a0809c4b16f5","ssdeep":"","tlshash":"6e1112f9e7ae121544c549fc1346a505541049bbc1275905f516c2021f7954e5e4ed86","size":1011,"data":"","first_seen":"2026-03-04T13:15:17.587157Z","last_seen":"2026-03-04T13:37:46.386504Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-07-24T16:52:45.605348Z","times_seen":199631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.5","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceb183b138eac316a5cb0741ec23696a","sha1":"c9fcfc71c8f7229d96289ba702eeffc7827bd7e9","sha256":"2464e81935f8e354704bfd7c9dc5b722b7c2c3456f325be881556bf351f762e0","sha512":"7fc177991c5640b9b0113881747c7af234e6c7cfdcd5ef6d4cb4e3e9b6823499183071a398c7e505b8796028200107ec83fe3194512cd6ba1809d4fa33ec7cfd","ssdeep":"768:D1c+6idHZRdPM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Glr:ZcURdPMMBOBjmFatJR8RjD8/xHVlEEnV","tlshash":"61e208523296e866069f48a3f0231119f3765dd9b80bf0d5b2bcdce6a471e877362b34","size":31880,"data":"","first_seen":"2025-10-21T21:24:49.242369Z","last_seen":"2026-07-24T16:44:17.53827Z","times_seen":70266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.35.1","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc9534a95ea09033bc91a3ebb43e5f04","sha1":"114a3d58226c2515d72d8b05689e41365f8df53a","sha256":"0a12e29b5b61329aefdd77b77ba14bc6aa455e96e42fcbac02352aaa74916a19","sha512":"20cbbccdd2547a9df9033d1d396b7f385f4f566d78db3bb8ac2ccadee1e75bcd271aab91fdcc795dae485a98b123d58feb523a453075f7ece5f8c2804ac151f5","ssdeep":"768:o/Xt95D1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdiePm7Lc:mtDD1+WE9A5yLcWJ9mBtIoERuWfRMBKB","tlshash":"5d13955171aaca6941cf84abf463164fb7225c9cf413f0e67afc8d82b564e87a390731","size":44258,"data":"","first_seen":"2026-02-11T15:12:19.193565Z","last_seen":"2026-07-24T16:05:57.164364Z","times_seen":14150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/javascripts/client_default_6e82e2f.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc9c0b7fa7dfcd5c87cbf271efd5e5cf","sha1":"b1f1c537761d4c1a5c86019a52ae1ebdd8f7f5da","sha256":"6a6ece4a22a86b89082728851c2d9296fb0056a9610d0b7ba5e8f69902b2db8a","sha512":"c15b43b0f73e30665b2f25e516a5039e836e1bb09a3076837d2ce5b94bf44ff5fbd72631dd0242db2dfadc00de9bb9e2ad475cce7f326a0b983435fb302a039d","ssdeep":"6144:rrHe9YIHOYcMcYtQaHabPXeYvDFDcyp2zopnqV6V:3H245MYvDBcypyopnqYV","tlshash":"a464188a7261a83213f582d7a4320942f339255d7486843cf36cadef664cec671e7bb5","size":328597,"data":"","first_seen":"2026-03-03T14:46:23.727304Z","last_seen":"2026-04-22T15:08:59.136099Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/elementor-pro-frontend-js-before","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"abd42e94a56d5309896aa98f935a082b","sha1":"6d2d8609e062e0472b8b78787dd5c93a358266c3","sha256":"3012729dfb20aaec7e7969adbf2a1b1f82023519dfa1634362333295c539c243","sha512":"2e6218c55e7ca8c39864279fffb1bfb5901ab0d3339bfac007fc313ac9da55017d6f18ed09dca67288f3720754f8daa7fe1bce92185560bf5b0ad5c18d3165dd","ssdeep":"","tlshash":"8a41cb56de210e6087eea2f831da3b6f44c44732e9c0b94d569ae4b401f7cddf0552a7","size":2268,"data":"","first_seen":"2026-03-04T13:15:17.589068Z","last_seen":"2026-03-04T13:37:46.384745Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e434b0b4f43ec7216073eed1f3ffb51","sha1":"8d8a4ab1ed63889095bdf38ba646319b639feabc","sha256":"dd0ec57abf154d52c161fae92db6014f042417d9660679097ae55287041ec52e","sha512":"20978b9f1afc586c91351ef67791224fb5469004a1ebb5af608a05f643103a358e605d2c54cdba2174bc35c266ec963690d5d1fc3f80a045f4c33fc5f67b9ab7","ssdeep":"","tlshash":"6d110cf3b3dd907fbaae6d66193402cd6a1c90735c100a5bfeac3575cc8042538b1d40","size":922,"data":"","first_seen":"2024-04-08T18:49:14Z","last_seen":"2026-07-24T16:41:24.061785Z","times_seen":217879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.35.1","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a32d558234aaf2a5a40d2084b2d7b68","sha1":"d5a885a2641bf1782917c15bf1d7026a0669807c","sha256":"3235d41729730b91d3cd49961af32b579444981808c025a6c6da4817a1ec6dd4","sha512":"967be003aeb2d6132ab1173f540b70361f415877d9ab89595d754c06a8402d3271d31d141eebadbae420e83bbe5fb22e82a11d629fc2790115a5b60c94113952","ssdeep":"384:cGy+EVxFm6cKJskdHd7glQtHuGJswg/i+TSQDTWmMo7YtDT5HJiIqkoh+vFWN7Kh:cR+EVxFm6cKikdHd7glQtHuGJswg/DT6","tlshash":"efb2d9023163ac3a50cf815be067420e7b374995b40570ed7abc6cdba5b8d9a33ea335","size":24047,"data":"","first_seen":"2026-02-11T15:12:19.189108Z","last_seen":"2026-07-24T16:05:57.175225Z","times_seen":14149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-07-24T16:51:14.500438Z","times_seen":331899,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:48.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 02 Mar 2026 21:48:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 229\r\ndate: Wed, 04 Mar 2026 13:14:48 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":449,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (449), with no line terminators","md5":"9dd361b7473936c5c8f5bf661c323973","sha1":"5c8f2bcac20956a31c9cff999d50b99f9ee8f9fd","sha256":"55922883b583583787dd3e36a6ee97b5bedc12eec38a24b6bd271d53b8ebf1c2","sha512":"4181a000ecc679d08f6cad5ddac0283744c6dcb07822a19d2552105e4a9191f1baa4a1590975a71325c56714a37084f8122afe463170ce54b5a56d1a1c7780c4","ssdeep":"","tlshash":"a4f05c7a70d278ff200b44520a97105de6a81cf5012961417fbd44382a75ea4a23139f","first_seen":"2025-06-30T23:09:48.860419Z","last_seen":"2026-07-24T16:59:59.802435Z","times_seen":90914,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/uploads/elementor/css/post-697.css?ver=1772598951","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-697.css?ver=1772598951 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Mar 2026 04:35:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 348\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1229,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1229), with no line terminators","md5":"3945746db7eca885b1f368f56c730796","sha1":"3f89766a625fc555d43931eaa240bdf4f753530e","sha256":"5a3474090361e4a91d5fe264f5279a911c07ddbfd717759742439c9e8238df00","sha512":"3944281b82a8ab2655d1073e779802a2537bcfe0147bad2a76fbe53b95a857ef9da9fb3a9f93858140b3ad5ea2da6c2bff58282c26798122f8a754de7433a32e","ssdeep":"","tlshash":"182138457a27d031e17b052fd1c3b02c112cd85fa25f8aeff42d9649f9bfa462228647","first_seen":"2026-03-04T13:15:17.346662Z","last_seen":"2026-06-03T08:54:26.815009Z","times_seen":5,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/l.js?ver=6.9.1","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 10:11:33 GMT","end":"Mon, 20 Apr 2026 11:11:30 GMT"},"fingerprint":{"sha1":"CF:0C:FC:2F:34:74:7E:49:1E:7C:40:BB:59:F3:B6:C9:67:38:8A:6C","sha256":"FB:3B:C5:60:19:2B:8C:0C:EC:D7:A6:9A:D4:D3:E5:A4:A3:67:2B:44:09:99:21:44:6B:96:A0:65:53:27:D0:26"}}},"request":{"raw":"GET /l.js?ver=6.9.1 HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"69a6e455-1e4b\"\r\nexpires: Thu, 05 Mar 2026 13:14:47 GMT\r\nlast-modified: Tue, 03 Mar 2026 13:38:29 GMT\r\nvary: Accept-Encoding\r\nage: 84736\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9d71255d79c7a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7755,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7661)","md5":"5c1e9c90f66c7a8e94eb7d602c744303","sha1":"e42f6c321634ad9b03d6fc164483dffd84aedc31","sha256":"6ec8d9d97667b4a6a9f2f9fef150a86c75ed4fba0944c02c3cbae478309de88d","sha512":"abbb47a7a2fd18c5a825cc7b4173b2e15339f158634ffd28455bb32f8d151f9f6186535fbfb304938d0a600c6b684e940d40f95b230773066a623a56006f3a57","ssdeep":"192:qKSfZ0VsU+ZO09SOQal5eK5Y+91Edlng99dgY3AjL/7Cb/+io:K+IHmMeK5Y6iu9uY3Abkk","tlshash":"29f172173269603105a362ef123b6a45f03361295c85825cb569ecf1297ce4fa13bffe","first_seen":"2026-03-03T14:46:23.623289Z","last_seen":"2026-03-04T13:37:46.283586Z","times_seen":26,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":13,"connect":12,"send":0,"wait":141,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/css/widget-divider.min.css?ver=3.35.5","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-divider.min.css?ver=3.35.5 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 21:48:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 678\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4258,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4258), with no line terminators","md5":"3d78dc83d20515d554c4a45df3500bb0","sha1":"36fe7b5ebfeb079e9e20b12222766b1922382586","sha256":"f042f3243af9c3e339447b3aa8acf5776c9c12bf03b67e87013750ca5ad7fb0a","sha512":"c61feebb9eeb0cc5ef3029e7c6e94797face0f9bfb4905a51e96d2e59c63978688aff83fddea3326cc5d197e3cace6cf42c94f6cfb98ff7c6c16da61e7a28f32","ssdeep":"96:voAhZrOq52pydTYk0+5FD1852KELxrFrRevYJocO:voIOq5a75slUmor","tlshash":"a5918555b94f8218b79f141b8e173e4cf04467c9fa618a81d9f37252f0aed842f209e9","first_seen":"2025-05-04T13:14:28.472981Z","last_seen":"2026-07-24T17:10:59.943556Z","times_seen":42605,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 21 Oct 2025 07:14:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1852\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-07-24T16:52:45.514343Z","times_seen":202669,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/polkadot.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/polkadot.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 468\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":893,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"486e7eef2bde968d41679b90906dcfdf","sha1":"ebf5d377002c72eea48d860ba4bd78fe22255405","sha256":"28b435de1f05fb44e8fa6af6980777d71482c2bea13db52cffebafd98d45ccb3","sha512":"e4c50c669713ae2d2d03def9af706690185fe63f82005057797ad03a7779e11ee32e087c2bddc866f57c0c00037880f89bd6d017eac5fa3cc8ca5d49fee155fd","ssdeep":"","tlshash":"e911c0f837b666cd388b4dac9e58aea84011303b33fae54b29a15b10c043c99fe42d10","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-07-21T08:07:36.391747Z","times_seen":61,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/litecoin.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/litecoin.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 229\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":331,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cdae08509e949c7b6216a744b14f0087","sha1":"fa98336203093e0b00048946f9dfd7d8be578971","sha256":"21b1ffe201826ba5d027f814baab9103938898c0be374d3cc948bd119b55ce66","sha512":"91fb66a90e8b08b16a88d091b8aa02f8ddcbf180b5fcd5a2e84a425a3d42437efd698260e142556e7606052062fb82d00492daf8147c75c33897a3778c786da7","ssdeep":"","tlshash":"5ce07db7a5a8f84c188e4178ee2b7191202f20cc0d6e0decf5e42c15f1475dbf4459d8","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-07-23T16:39:23.270728Z","times_seen":4063,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/monero.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/monero.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 298\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":522,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9749f02708e42f52a0ad631801edba5a","sha1":"373c019e0e0b901949ef1a2de20d7c339b5565ab","sha256":"cc4563c4a67b5bb8860345332b6d00e32a3cfa4073248b6e8007f6dd0a4dad6e","sha512":"1a3c0826edca1f5e01dddd262f80e89ee36625b3f4bb8b78481260e7c553afa1530246a7e7e0c2245ee2c5ac2fbee0e7fd98f644e9a57a8e56686fe3e1a675e1","ssdeep":"","tlshash":"b3f050a0b0786c88149e8b7ca47d70d32b9f74ae36594a5cf2647f7cb0971526600e44","first_seen":"2023-05-21T22:41:19Z","last_seen":"2026-07-22T10:26:59.273088Z","times_seen":40,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T13:14:45.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.1.34\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://mercuryonlinefinance.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://mercuryonlinefinance.com/wp-json/wp/v2/pages/958\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://mercuryonlinefinance.com/\u003e; rel=shortlink\r\ncache-control: public, max-age=0\r\nexpires: Wed, 04 Mar 2026 13:14:46 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 04 Mar 2026 13:14:46 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.35.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Crisp Live Chat","description":"Crisp Live Chat is a live chat solution with free and paid options.","website":"https://crisp.chat/","common_platform_enumeration":"","icon":"Crisp Live Chat.svg","categories":["Live chat"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"bxSlider:2.6.2","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":201190,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (63997)","md5":"c2c3162a26973f4377f92b8b25ec392f","sha1":"78135580aad98d6354e69eb493a0c6daed5bbd5f","sha256":"8842078bf0b83c102fda07f0193081033d40662003a47ca055d3659ff3100415","sha512":"190097c7c19c706238dbc7f918dc571f6a933374231ca993b95e76095a6298da6e9aa3acaa223c430d288138c4804dcc76e0cdb31291c138bf0b851d771c912c","ssdeep":"3072:+P+S23gHsK9po+lGzrM72dCsZgMpuWX+6KGfRgf:M+S23IlGzw","tlshash":"b014c7a17f512836213b03afe067670c20e6de9be60e55e1f4fe815846e6fd235b250e","first_seen":"2026-03-04T13:15:17.360394Z","last_seen":"2026-03-04T13:37:46.367047Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1695,"timings":{"blocked":300,"dns":44,"connect":124,"send":0,"wait":1094,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.35.5","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.35.5 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 21:48:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 96\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":214,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-07-24T16:51:14.525462Z","times_seen":113903,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/tether.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/tether.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 375\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"66f1b14738c83efe0e08e5c27b7d54ee","sha1":"c93aabec5bf0a82f150a2aa715e26cb75fe097b5","sha256":"8719df878f684eaa466fe63f67a1d744e526de3fcba95369592d3a95e807626c","sha512":"496ee303dc983179f185023f7d625107106e21fb5760f6e499f0a4528f397b1fba541486312e0cdcce59f53eb9d4592242db17b0633ac9076e07dd0b8aa3e9cb","ssdeep":"","tlshash":"adf0d3d96630d5c04862ca6eef3f1f89286b30e7664d068af069790ff4430d630141cc","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-07-22T10:26:59.333209Z","times_seen":135,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":334,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/uniswap.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/uniswap.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:42:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2070\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4718,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da51f3ab3bbce47d05a520b530c0dd44","sha1":"d03055770fe7fd5940f65ea9158bf3c79760e1b4","sha256":"5b2c366a1c14fd5dc2d793d42065f3a6d813b15fb6a617fe4bf45cbc7cdee5e9","sha512":"94acbbf752ce1e3fe4cbc86605d26332763c10ece6c8dce10f0168951391e910723d2f9e143acfa2e703d9bf15019fd8760536fac3f95772d08964cd018d5ec4","ssdeep":"96:2vfqi0XMnHQZGWYagdgoBBcGrhkQnqt7sSJ+iIPpI+:uqi4ColgdJfNkQqySJ+iIi+","tlshash":"04a18b470300c7befea5452ca59810d9b5d0e99ad4b0f2d0fbbb6416d54c8e4a65c3fe","first_seen":"2023-05-21T22:41:19Z","last_seen":"2026-07-20T14:55:16.180989Z","times_seen":92,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/internet-computer.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/internet-computer.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1007\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2227,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4aef1c8c525a908760b744697e02f16","sha1":"c73b1016fa365794913e3f34f8abd561c5c48299","sha256":"287dce9eb34e124007f3ea1fe722403d3cc7d94f32855da88045de049ae8930d","sha512":"dfc5b72e62b5fbf0e38df4713618eb32170632a430cec84219096b132a4fe3eb5afe54562966326de93d4173f97eb8eae7d1e146dca59c18a61c26f6884d2dfe","ssdeep":"","tlshash":"77414139c3679e3bdc0281684aa114b572f099afe060d3e8d9ef7aabe06ccd0054c3d5","first_seen":"2023-05-22T14:37:33Z","last_seen":"2026-07-14T12:58:06.737433Z","times_seen":35,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/25751/large/kaspa-icon-exchanges.png?1696524837","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:59:29 GMT","end":"Thu, 14 May 2026 16:57:50 GMT"},"fingerprint":{"sha1":"46:94:B7:6F:CE:F9:AB:87:E8:C9:D6:E3:32:37:0D:47:C9:79:37:38","sha256":"8B:3F:CF:AA:1F:57:3F:0B:D7:4E:84:70:69:3B:0D:C1:70:8A:86:B0:9A:53:F5:C6:EE:65:BF:3D:44:12:A9:E2"}}},"request":{"raw":"GET /coins/images/25751/large/kaspa-icon-exchanges.png?1696524837 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 9117\r\nx-amz-id-2: wYG38GVCEJqcD9O5UIenKiWizsh/emYkch9iAolvo/oZTicpJAzVQ58KZ2LnRy4e68nmol79mHo=\r\nx-amz-request-id: YFZJ5KDNEACEQEW7\r\nlast-modified: Wed, 29 May 2024 02:45:55 GMT\r\netag: \"51aa1cb4ce68906f5eb7ad1ac77b611c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: DuNTazhiS.AhaYcANOacqD0QWQzagBkI\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 3513\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8aHW4DiOWI6q4bSZ4xuLU8kuRHs%2B7ULM8SdokJ8QqJyBxC%2B5J2AZ%2BMyUbYr72S30H%2FT59pIKMCalI4oKu%2BdX7nwN3JItW0G8FlHDkt2F06rZfz8aiI1eH2w%3D\"}]}\r\ncf-ray: 9d71255d1d15516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9117,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"51aa1cb4ce68906f5eb7ad1ac77b611c","sha1":"9c30ad71390f18bd99488a1a0c2fc5f59a299463","sha256":"37018f6a4d134a5bca96b77a1b49ccb54af5f6972d0b29894b04073260027bd4","sha512":"ab1766add523de2ad35cde4fda95b185d2529d6afbc0a1cb8c2db0cf6f979a23c8f385f0e1724949ed9edea04c9eaaba31297408f0f1913e7b21262221d3cbb6","ssdeep":"192:/ytN0Xfb2DPJAFkCEVT3xPMRaBd20bZnfHWXQGN0A:/ytNNja1EVT3xVZdH6D","tlshash":"cd12bf5cd61c12c325570bb242fc229d69735f2126ff4a36aafa3d008219ad5a427646","first_seen":"2025-05-17T19:12:50.406261Z","last_seen":"2026-07-23T06:21:09.884523Z","times_seen":106,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/cosmos.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/cosmos.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 773\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1689,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"01295875cc6d71aaba5e750b8ba2e266","sha1":"cfa3216a1e3397f61bb184ec8b868d592fff4865","sha256":"e4ad7c3bdc0e8106ac66d57461d3d9f34fa19cf9d42e65b7ffc8f6c8066640e3","sha512":"09d0890525b8ed58e6cae442beeaa8ae3069025775d70ce847c8361e492b1bb0366f32a13ee68e39e04e91b337df22d9de2ee9e2888b1633f2cd484e96b006ee","ssdeep":"","tlshash":"f43145d11734f744214e8dadef2339f2158fb0f91bb643c8669d3a12b5d84d67800964","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-07-23T14:12:00.604522Z","times_seen":46,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/ethereum-classic.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/ethereum-classic.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 382\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":736,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc290deb2b3b4cadbc8cfeef41a2fd46","sha1":"20ce2a5ca8410c2902e44486bd4107ee180b50ef","sha256":"d8e9654408cb133a902c38004281998dd1d778402c8b88998e5373f5e5a962de","sha512":"082eba945627e2bd66600f04eb6b0aa9c4a22055f5cf9e5fbd096c12fddda20228be802161ba4f64f0f0b5f16a03a12b19394cc5eb970844e0ad0d84b1cc27e5","ssdeep":"","tlshash":"a2019cdf616895d4083f8fbcb73da0d1209770ea2a4909f5b7502934e911a531c82d68","first_seen":"2023-05-21T22:41:19Z","last_seen":"2026-07-23T14:12:00.618007Z","times_seen":48,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/filecoin.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/filecoin.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 545\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":997,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b66dcda075aea13c64df32be22091f0","sha1":"db7960bc0d9a8d8153caf56246df479c176976bb","sha256":"5b6103f0e558ec50e903ed5018fa99183896dcc297e988f2fcd00c69407db956","sha512":"0bb91f21c6f92b2d812af9e562fb5ec3caa87714d6fa8e76c0a295a87f4b0a685b961a9ecd4c263049d1f2ae4a2896a4e1623ccb5a9ed302bba6da2b5ed0aa97","ssdeep":"","tlshash":"a01135d12270ea057dc5927eff377491648bcc5a582a60e828416b04fc9b6dffa40d88","first_seen":"2023-05-21T22:41:19Z","last_seen":"2026-04-27T23:35:30.608617Z","times_seen":18,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"client.relay.crisp.chat/w/f90/?EIO=4\u0026transport=websocket","fqdn":"client.relay.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"64.227.36.222","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:48.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"client.relay.crisp.chat","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 03 Jul 2025 00:00:00 GMT","end":"Mon, 29 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"CE:90:EE:6D:D5:63:F5:A1:37:0F:51:0C:32:82:59:67:AE:D0:33:E7","sha256":"B4:16:9C:53:C5:9E:50:98:26:14:D8:A8:13:14:9F:B0:2D:AF:A3:3A:52:8C:70:C7:1D:23:EB:2B:39:D0:CC:71"}}},"request":{"raw":"GET /w/f90/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: client.relay.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://mercuryonlinefinance.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 0hoBmWt3ySAOBcpDvi4GdQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Wed, 04 Mar 2026 13:14:49 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: MVLc65CrGz1aj5N3fPFl7PSHmeA=\r\nX-Crisp-Ray: website w:f90 10.133.35.18:3000\r\nAccess-Control-Allow-Headers: Content-Type, Origin, Upgrade\r\nAccess-Control-Allow-Methods: HEAD, GET, OPTIONS\r\nAccess-Control-Allow-Credentials: false\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 300\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T16:51:04.15564Z","times_seen":17507359,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":0,"dns":175,"connect":199,"send":0,"wait":45,"receive":0,"ssl":214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/themes/astra/assets/css/minified/frontend.min.css?ver=4.12.3","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/frontend.min.css?ver=4.12.3 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 21:43:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9218\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":51488,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (49306)","md5":"9835e0cd2ae68c0e28b3de120f5da17c","sha1":"3b9468ccb6bf23fa975cc040640ef491ebb7e4ff","sha256":"c759f73872c6e0e69462d193db26be4e3d343ea20f4c61ddfa5e2eaed595a57e","sha512":"b21f05c03f324935125626eb2c6d1ac3d8ab9a68197e4933df0bc0fb370c3d727afb9c6b7f1cd3f7855b0131d508ccc56a774f3b6c8c3bb1efbfb447a3ed6a4b","ssdeep":"768:m9Mnru0p0rP1rhDYollnk+FHk3YCzxdvN3JR2/WLmiyCFS7OHQtBU5PT1enhm2aK:ywu0p+YY+tHQtBU5PTwDua9","tlshash":"f433e86057d034295233473efe96b9082a258213e35f6ad7f8e78fa889c5bc70971e4d","first_seen":"2026-01-22T12:39:21.035979Z","last_seen":"2026-07-24T13:23:55.250826Z","times_seen":397,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor-pro/assets/css/widget-slides.min.css?ver=3.35.1","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-slides.min.css?ver=3.35.1 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Feb 2026 10:21:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 515\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2342,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2298)","md5":"8bde14404e717ff44ec7e249a3d8cde5","sha1":"8d9a5451c39563afbb32a1c66861964458284ccf","sha256":"718ac59d9ff53d6d16960d5b3f208fecc0e3ccaf02f7ad0756fc5dbc5607a46c","sha512":"463271f6278fb15ded8c64afe61b3cf1893ca29bfb828d5d80e2b172861cac16dd3cb03717cad7935a428780457b7f8306a228e0ac9300a7fa6b29ac0535517f","ssdeep":"","tlshash":"ee413710fe43ac6a61bf4a13781be15c30d840c0ca1635b4eae55adef2b99d1321d7ed","first_seen":"2026-02-12T06:14:15.580765Z","last_seen":"2026-07-24T14:15:08.344111Z","times_seen":618,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/binance-usd.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/binance-usd.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 244\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":528,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8705fd81e119294bc526887bc154e5c5","sha1":"f0c483201922ebf93d938fd9f1b4f1896e81bede","sha256":"d303bbcd89a42382dd9383f9e86568ad84c835a09cd9399303008c7389d5d7d7","sha512":"2130e252feed6d15b8229599bd9687775066bed42134776ab62a832eebb3af2460fefd82016ce538613f3af8181d33852625f972ff7ceaf260c1b3e878620726","ssdeep":"","tlshash":"9ef0599b521d1e3ea51b82ad57891341e4ad70afc2a984fc64e6307ec104df96c9db43","first_seen":"2023-05-19T19:08:22Z","last_seen":"2026-07-12T20:24:56.466712Z","times_seen":31,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/30980/large/token-logo.png?1696529819","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:59:29 GMT","end":"Thu, 14 May 2026 16:57:50 GMT"},"fingerprint":{"sha1":"46:94:B7:6F:CE:F9:AB:87:E8:C9:D6:E3:32:37:0D:47:C9:79:37:38","sha256":"8B:3F:CF:AA:1F:57:3F:0B:D7:4E:84:70:69:3B:0D:C1:70:8A:86:B0:9A:53:F5:C6:EE:65:BF:3D:44:12:A9:E2"}}},"request":{"raw":"GET /coins/images/30980/large/token-logo.png?1696529819 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 14027\r\nx-amz-id-2: ooZusvovJxF/a6MtnBHdJgnBpUTi20TF9MySRf03pfNZ0m0VQtXlAgkdXQPD4n11PamKITR3AQqIyvLbm3iSwLgHD4dKtLxe4L9VqfItJeE=\r\nx-amz-request-id: WCXVAMHS41ZN7JZH\r\nlast-modified: Wed, 29 May 2024 02:51:11 GMT\r\netag: \"52a4dd1f834eaa5064bd09003d78e8a5\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: FMJFC.768_9N2yE3vUiXTZe8DzzaWoBz\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2osXMVLe%2B6%2FeP0GHElcC1xDePiCqMMoj0WMT1lp%2BHQZk%2FZkKHnrGTH9Qvez2QI2Qam9ClACB%2FU%2BwLXcYWGRmY%2Fh8dw3kKhFCGZtV8ADtGJk3qTQaH8bXDQk%3D\"}]}\r\ncf-ray: 9d71255d1d17516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14027,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit gray+alpha, non-interlaced","md5":"52a4dd1f834eaa5064bd09003d78e8a5","sha1":"77dd68ec5b4855eb968cfe2f201aca7b627beea8","sha256":"f7988abfea19d3fb9f42d0a36dc236105df86f72344ab2e3ea449149cf0b4574","sha512":"7af06ab2f153f9df77f9f6d17bdbe9f94a5905c593ca88bbc4a3b0b36e549260b6f4baed3225e6aeaf36af098bdf358e73c25e9ae0604d333ee016f323eb57d6","ssdeep":"384:lNJEeE5SUceURWhiG7fn+ValLpEjmLQcn3HdNOzO:jJEeE5nceURQiInpKjm33HOK","tlshash":"ae52cf843e9010c5eea78136bf8903ff996345908fc28c21857ca12db4b13edbe6b246","first_seen":"2025-07-05T16:50:07.579966Z","last_seen":"2026-07-15T05:49:23.662971Z","times_seen":21,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/uploads/2023/04/GettyImages-1269677040.jpg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/GettyImages-1269677040.jpg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/wp-content/uploads/elementor/css/post-958.css?ver=1772598951\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Mar 2026 21:42:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 496941\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":496941,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 2120x1414, components 3","md5":"ee86df6c9303c2b7150ac2d205109aa4","sha1":"debca5ad360098ed208ce9e0b7fed1ae6a340587","sha256":"07558098db2683f03bd9d4209243b9d5c0bac4d4d71cfaf03e54ca2430df6cfa","sha512":"d1fb0f8d860ff463c6c4bd5c092e2a4678c12eb20a955cfddfa90dc4e99ff180165c3c629014c0800d106bdf89d40f32c2cb1f298bb489e66c76f396f61cdc42","ssdeep":"12288:sFhOFKI4/p3aAOWPzLLNMkDntc3+nJ+N2f22rpofHKdOT6NQ4wKtU:sFhOFKIup3aW6kzt0+J+N89ofHKM6efl","tlshash":"c9b4238843ed8e43de7d24b2f1ca5310ab10ce3c7f392a19ab55c4a05f5768569b86f3","first_seen":"2026-03-04T13:15:17.374538Z","last_seen":"2026-03-04T13:37:46.298764Z","times_seen":4,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":345,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/solana.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/solana.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 631\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1785,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e6fecb2c83dd517ad34f5851b99ca82","sha1":"1f08ca68f7b9d5810f4048c90119b5f30a1d13c8","sha256":"767bd52ed4f4764f27243d78f441d6690b2024d5526044e06e55f49b8008d47a","sha512":"a932d777e8766aef3c077f636a6aa361d8afab191185092d28a353b765b8a86c26f9a71d611fa6d85d906a6ecff70451615fd8316947728aa63bd3cf0fe587de","ssdeep":"","tlshash":"b6310215e51a68bbf415c24ccee1197523e802eb9062d7e091a17e3ef5acce1001f3dd","first_seen":"2023-05-11T17:52:35Z","last_seen":"2026-07-22T19:39:47.741113Z","times_seen":753,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/dai.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/dai.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 386\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":644,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1c449c29fb22f5d5fbf800137a5a83f","sha1":"5c58d87478cbad19b5e2707ec46f9ee2fe160f85","sha256":"030fdb32f1563c8d0997ff87940587a65af3a41171bba668f55b361d5ce6b561","sha512":"0b129b103e1a7c774dd4c0fc90795f788d9d46cc575dc2278edec7ac6cfa6cce95485348a7e10a4c9d742f6d3b19e8d761f8d69b7369e1a70f26e791c7d2deec","ssdeep":"","tlshash":"42f023aa61746d5a88494d31983fb7377fb7308c1c4920903dd21a01f0633eba541984","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-07-22T10:26:59.337943Z","times_seen":36,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/31079/large/firstfigital.jpeg?1696529912","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:59:29 GMT","end":"Thu, 14 May 2026 16:57:50 GMT"},"fingerprint":{"sha1":"46:94:B7:6F:CE:F9:AB:87:E8:C9:D6:E3:32:37:0D:47:C9:79:37:38","sha256":"8B:3F:CF:AA:1F:57:3F:0B:D7:4E:84:70:69:3B:0D:C1:70:8A:86:B0:9A:53:F5:C6:EE:65:BF:3D:44:12:A9:E2"}}},"request":{"raw":"GET /coins/images/31079/large/firstfigital.jpeg?1696529912 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6517\r\nx-amz-id-2: w1fcUoBrRxRHziUF3RMLeMW+mf3FQDXNZ+a57BjR2xEJeZeUU7wRIGZpX13XhjaxpKn0vecax68=\r\nx-amz-request-id: 0MKKDJ7BWGTBW1E3\r\nlast-modified: Wed, 29 May 2024 02:51:17 GMT\r\netag: \"b1a0e5dcc270f7a33c8c108d3f4915ed\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Sxstn_ZOka1BBcw6iwULStrYvlds8WcP\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMSK1cDgWzbfO0gTNInYGbSudC0T22OoIi7WjGCMZz6%2F340BtA%2FMQarh7cM2HHtDnVPEb6ocwmxe2j1AdP0VpqiUglsNSnp7Ri1ZFLSk2ygr9NW66H7Hykg%3D\"}]}\r\ncf-ray: 9d71255d4d73516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6517,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x250, components 3","md5":"b1a0e5dcc270f7a33c8c108d3f4915ed","sha1":"5a74ec95b02e65c08c896482d12c70163ffce25d","sha256":"3f9eb1c10860bb7bec5d85e6ad3801f0f12f93e2193b5965b7a9ee7896282889","sha512":"c6013ea5f6dc8665e07a2d671ca8470754fa807b79c6619839440e389f8e439fe9babeb8000d9297e7da73dba63e6f2806166ee3803d96b1a17f58f471a1676c","ssdeep":"96:X894vwHrhXOYNtTfQdR1CMcbNIgXPHbuB7vP8eOG4Nu3Fexs3Hn5aPZ4Ops:sJNT7yR1C3fbuBj8k4Gee3H5ax5ps","tlshash":"e8d17de7e758c956f38d823426517b55d5f28f3192d383040d6241bdab3c44bde0e563","first_seen":"2025-07-05T16:50:07.602876Z","last_seen":"2026-03-28T05:11:09.392062Z","times_seen":16,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":487,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/blockstack.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/blockstack.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 404\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":686,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7bf3657355b7f1e7a390af81253aa7f7","sha1":"ab5fdb89dd3f1d044bbfb99ef027ebee68ecd66e","sha256":"fd8196c5a79c378d1e5581ae3f1c489880cdb9ed14c378050f0094d98d6ffa35","sha512":"10a789e52fd110a2195a8dd0a4abf7428c2481ceaeeb53e8a3d0bbc042df0b2e77328953e055b66879fb6c8a8d83c791ccc8598c238cfa5ae5a4abee39c881d4","ssdeep":"","tlshash":"8a01cb1cc648edfea419d29153f5a1c23371308ba1b58ce8d4e23cfafa5b84015856e9","first_seen":"2023-05-26T12:31:35Z","last_seen":"2026-03-04T13:37:46.326248Z","times_seen":11,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/uploads/2023/04/dribbble_2x-1024x768.webp","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/dribbble_2x-1024x768.webp HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/webp\r\nlast-modified: Mon, 02 Mar 2026 21:42:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 64392\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":64392,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x768, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0964bd4fdc21184eddafc58e37cfa524","sha1":"9439c3a36911e44d4e696f643fabd82fff037ae4","sha256":"c1dd6e2efb72f9b0828b0537473553baa7785ea73e5b07693a3d42d8bd52150c","sha512":"3d36f9436f805b712c6707c3dd81e9d87137416498ef5142e8af01cbe206e54e0538f4b3b48a02f8badc36239ff0cd39c873ea0879bb869f48c12b27fdbb6ed3","ssdeep":"1536:8CwEP8C7tMjclhBy3Yg+uYiK6AR3XTFnHdMCP5GsGn:17thlhByT06AR5HdMKcZ","tlshash":"685302ceb6e363b4b879fbca1ca49094c06798c4ca7ec9f5d21764424d9b96a04a71c3","first_seen":"2026-03-04T13:15:17.392567Z","last_seen":"2026-03-04T13:37:46.371042Z","times_seen":4,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/33033/large/weETH.png?1701438396","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:59:29 GMT","end":"Thu, 14 May 2026 16:57:50 GMT"},"fingerprint":{"sha1":"46:94:B7:6F:CE:F9:AB:87:E8:C9:D6:E3:32:37:0D:47:C9:79:37:38","sha256":"8B:3F:CF:AA:1F:57:3F:0B:D7:4E:84:70:69:3B:0D:C1:70:8A:86:B0:9A:53:F5:C6:EE:65:BF:3D:44:12:A9:E2"}}},"request":{"raw":"GET /coins/images/33033/large/weETH.png?1701438396 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 56185\r\nx-amz-id-2: nkv5xWYkxy04dLSzCovn1wZRqhOeT9e/MNt+EY0UQX3SNMYtPMCfmgeyVApOziv1oHuqar4nO5Q=\r\nx-amz-request-id: 0DFB8461FB8EFF2Q\r\nlast-modified: Wed, 29 May 2024 02:53:13 GMT\r\netag: \"5a2c197e38fd2b23ed59d85be061e482\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: f5iae4gTJ6VDX9jDDK9dlMQoEqpKeOdP\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 2005\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bcYJnFPHE2GRKvdzMSfBz%2FrVOL05qllB6KOM3aTAFuh5iUwMxgKcWifbkn32JNuSUBVHYnbE4zrU2bWRMeDqLrgC38SDP%2BtgMfs0lZpNKLDfCBKIg2H6K4w%3D\"}]}\r\ncf-ray: 9d71255d4d80516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":56185,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"5a2c197e38fd2b23ed59d85be061e482","sha1":"2c4141400c5ae9721c2b27340c7832f791eefaa6","sha256":"3ac59acecde092983601df6dba9a979c9be394acb38a76ab19f0561e0889a282","sha512":"968468b2c58589bc05c9c59ab5ca87b2df98e84ee5ee579341f3ab696570a269354d248c97ab7667bdeec79ddebd17e7b03f3e6deaf595975303951f07d9a27f","ssdeep":"1536:6tHn95wsn9GMRlvNdgt/J/hZqyG7ZZTKR:6xzrsYXgDbqro","tlshash":"3743028d7b04f19099059671827bbb39c63aa533b1be444ed6295138dc6d2c2fcb3f98","first_seen":"2024-11-27T11:16:54.388852Z","last_seen":"2026-07-23T06:21:09.760298Z","times_seen":122,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/js/ccpw-bxslider.js?ver=2.6.2","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/js/ccpw-bxslider.js?ver=2.6.2 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 02 Mar 2026 21:42:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13755\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":70023,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7fa1fae4c40bdd5643c7cb63270feca5","sha1":"7a5b846accc96729c87134923db3b7c9f8d578c0","sha256":"f7bb97557e3a600f74d24deeac38c9a7b8cf7fcc6c1728336ca6d349dd4f8cbd","sha512":"3476cdf904a2a2b9f8f16356d39d695fab34446013f2e0ca62120e24bd663b2544e33256e548008e5e10f86cfdc8e0504918c272e38a29d138a88cc6ebaae8c2","ssdeep":"1536:MOUfau540Dhgu9Y1B8CMlFbBqHWngYbGACsV:M1v40DhPg8CMlW2ngYbGACU","tlshash":"5e632f1561a022761932333deb8aed00e6fa42178525d1a5f9fd871cdfb066401fbfea","first_seen":"2023-03-07T13:03:24Z","last_seen":"2026-05-24T03:48:28.890749Z","times_seen":51,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 04 Mar 2026 13:14:47 GMT\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22365,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"63c1df95a2b11b7542db5b48c56125f1","sha1":"b4116959b5ecbc00779addd320d98d8863692210","sha256":"7ead28f8032c788137532c3a88e9a7bda1411143e54ed4c066271c29f90340b7","sha512":"a5e42a035be607f6a98d7f73a26c37ad2e03a81dd0b54f2cc7bc5dc94a41b3b80af855ce9604e2b2283a7936df9008f068a8285c4cd8e4e960ab411c9c687d4f","ssdeep":"384:bvWLvKvXvUwvzv+vLWaZOUPSVsWJqtUghWVWInkUBALWWXYjUyvsHWm1iUz+54WD:bv0vKvXv3vzv+vLrZOuSVsMqtNhWV1nR","tlshash":"66a2bdd6486ba405ab870cc163dfbfa2ad9e5151a081c4becbfd2cb86cd6d32136075d","first_seen":"2025-09-17T18:46:03.2743Z","last_seen":"2026-07-24T16:28:53.891127Z","times_seen":20441,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":322,"dns":1,"connect":21,"send":0,"wait":31,"receive":0,"ssl":403},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 04 Mar 2026 13:14:47 GMT\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100764,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"9e6b9ba92c3c07c25c3a64a82c98afc3","sha1":"3ddff674c5f9cd149de491cf5df81c1074eaf397","sha256":"3d675aa2a0daa5e5b0080f14f3335f2d7a15275badcc418deba1e740a5ea55ab","sha512":"097289d7ac1a663cb14fa54e87356c82d88f82ae9574fa4cdd23333e1a98d3e9241d11fbb3d3cf34b52bfa7aac3d625d2bccefeb40fae26970f0e20d0b4751ab","ssdeep":"768:yDdD9DADNDgBDUKD7DnDdAgTQgUUhaWWHncXgLUahdPuOJ+gaULUIIV1ClghUULD:GZQDSVUvWtALyl83uRf","tlshash":"e2a30e91041b5440ab834ce223cebf35fe1f92507141d0b9abfc9b6baddbca6526835c","first_seen":"2026-02-19T22:36:20.76028Z","last_seen":"2026-07-24T16:20:22.703518Z","times_seen":16290,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":323,"dns":1,"connect":8,"send":0,"wait":34,"receive":0,"ssl":411},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/usd-coin.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/usd-coin.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:42:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 529\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1047,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0d924d84fea6c805b7f560c34aea341","sha1":"74c66d9d36e2da05bb3df4758db7da071aad3822","sha256":"cab383c59e27bb3823ef52e76296db12deac09b4302b5c6bf9b1cc7f377079f7","sha512":"33b7b973adac19dbb9ae20be3b3e1cabd1f026d13cb7377b7596f78120c14f6087fdb70a7cfcd9e7f907a8050c635a7880aa40e898284e2d28089477d35cfaad","ssdeep":"","tlshash":"3f110ee12188d2fd3884cd886d396421e80fe15b31f9b75061439b37f82f4caeb41830","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-07-22T10:26:59.336958Z","times_seen":110,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/near.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/near.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 451\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":766,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4346ea2b21beb3f9b19455cd07638b17","sha1":"2a0990ebe46a6a85ef84d0b328e94187a6ceb263","sha256":"002da8e49b3d2d378eb78438934ac9a8d208e9441f7cc1e9190cccc29c12da61","sha512":"a223abee94e1beefa17cfce98dc43d51ecabac52beefd047df8e59fecb2fb33b2d44027956bc486ad73db65a6f25f66dd315183175fc2ca48b067eeee4a143dc","ssdeep":"","tlshash":"2d01202b8305c7eed3c08b106a94558a57f0b097c4b0d8c8fa9d1429f03c0e0a6cdbb4","first_seen":"2023-05-21T22:41:19Z","last_seen":"2026-07-15T20:00:15.683692Z","times_seen":37,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/29850/large/pepe-token.jpeg?1696528776","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:59:29 GMT","end":"Thu, 14 May 2026 16:57:50 GMT"},"fingerprint":{"sha1":"46:94:B7:6F:CE:F9:AB:87:E8:C9:D6:E3:32:37:0D:47:C9:79:37:38","sha256":"8B:3F:CF:AA:1F:57:3F:0B:D7:4E:84:70:69:3B:0D:C1:70:8A:86:B0:9A:53:F5:C6:EE:65:BF:3D:44:12:A9:E2"}}},"request":{"raw":"GET /coins/images/29850/large/pepe-token.jpeg?1696528776 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11924\r\nx-amz-id-2: eMfbZ3f93CoAsAI1tOcrxY5XJ3tnIIWksx/dWxTBjRfNCrVtU82WfgFeF09/SOIv8LHxrvLsWBE=\r\nx-amz-request-id: FV0XX70E8ZVWY5JJ\r\nlast-modified: Wed, 29 May 2024 02:50:06 GMT\r\netag: \"eeb0d83e0efc8902a2bc59404dbdd215\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 20Km2Em6QQNLQXDpfvdvDIkMGtkDSEG5\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 5455\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EnXRjmr%2FM4r5DtF3Y0atq4b1BDNnGGYpoXEeD3dpFLHhHCW1b%2FZmwx5Mq%2FdX6VURNB7FNj6s6v7kyZpr5t09FpFq1ylXVMLMl86hWC%2F73Vw%2F2mm2H7SMXoI%3D\"}]}\r\ncf-ray: 9d71255d1d14516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11924,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x250, components 3","md5":"eeb0d83e0efc8902a2bc59404dbdd215","sha1":"c2f8ee9b01fd4a097834df2ab22f2f742f8fda84","sha256":"e32b0e01e9266a98b945abea72adc7400432eab58118fdd238f3690a1328f17b","sha512":"b171b4196edb3cd999b739a45074cd4116283df402b71db327a651d133dbcf2832e67320eb8fe9cd3626fe1d651989a41a7ecc08dd10553122f17f934b51aaf2","ssdeep":"192:sffffk48THkzDbqDtL3Wy98oEStygOjx1hKMFVThbKHQ72xUKN7nbQq0FVfNf7H4:sffffdU0UN3V98SMFj/Zd72npMq0FVfm","tlshash":"50329e5da30f54b9c4efa5747c900a68f2ac0b10b967966eae807060b32fc45db3d8e4","first_seen":"2024-07-25T14:34:46Z","last_seen":"2026-07-23T06:21:10.208819Z","times_seen":202,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCu173w5aXo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/montserrat/v31/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCu173w5aXo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mercuryonlinefinance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18688\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 28 Feb 2026 00:33:21 GMT\r\nexpires: Sun, 28 Feb 2027 00:33:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 391286\r\nlast-modified: Thu, 04 Sep 2025 17:09:30 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18688,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18688, version 1.0","md5":"9e606da1cbeb392aefa88d31f35784c8","sha1":"a4f64ab8a0fa21a0b54511c56695fd5f52b384c0","sha256":"d857325c360f7128b347ca924c1974967aaa886ba47dad22e4042d6c38b26a83","sha512":"ca51a5588d36b308cb5b3851f55ec6cd370a92d3c98d047490442adf9946ce83884f9d1a4b945c4afefda044a41ee42a7b0338659ddef290146041ad7d4b7c8b","ssdeep":"384:1Ok9ouoF0LTHT1V93FgkajZ/Q23aRFqlJFdb7jRTV7g0mc8CF7C:1Muw25V9VgkaKzqN9/RTV7gE7ZC","tlshash":"ea82e1cc81081ae9ee05b5b718ee53772e0844a9373b140a3f7a9ba77f27254c0657ce","first_seen":"2025-09-05T09:37:16.845418Z","last_seen":"2026-07-24T13:35:50.883775Z","times_seen":4527,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":74,"dns":1,"connect":7,"send":0,"wait":9,"receive":2,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/okb.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/okb.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 346\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":977,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0dd44cf51121991641bf13b278bd6265","sha1":"b6461ab63fb1dfcaba91af9c12489a7cb1e5afd0","sha256":"6072326ff4afccfbaa11a5c20dc5ef17cbdad0efdc6ce973b38e250e4baef0a5","sha512":"b4e1285bb0e89d261b579fbd71a21dba142b2774e119f97fe20ebc076fb0cb780b724c2bd2f51bdb292df9903eb2f66a2dc4f0b3dd33a8fe1907f73a3ca7afdd","ssdeep":"","tlshash":"7911d677c2de5c0314118294abe672a749a9fe9773268b70b303543a2d1e5b378281f9","first_seen":"2023-05-22T14:37:33Z","last_seen":"2026-07-22T10:26:59.325663Z","times_seen":31,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/stylesheets/client_default_6e82e2f.css","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:48.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 10:11:33 GMT","end":"Mon, 20 Apr 2026 11:11:30 GMT"},"fingerprint":{"sha1":"CF:0C:FC:2F:34:74:7E:49:1E:7C:40:BB:59:F3:B6:C9:67:38:8A:6C","sha256":"FB:3B:C5:60:19:2B:8C:0C:EC:D7:A6:9A:D4:D3:E5:A4:A3:67:2B:44:09:99:21:44:6B:96:A0:65:53:27:D0:26"}}},"request":{"raw":"GET /static/stylesheets/client_default_6e82e2f.css HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 13:14:48 GMT\r\ncontent-type: text/css\r\ncontent-encoding: br\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"69a6e477-26604\"\r\nexpires: Sat, 01 Mar 2036 13:14:48 GMT\r\nlast-modified: Tue, 03 Mar 2026 13:39:03 GMT\r\nvary: Accept-Encoding\r\nage: 84733\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9d7125629f5fde91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157188,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65439)","md5":"31488ff65eb0e6d5e0fc5af474c52b68","sha1":"f28fd4f62f07d9985678b9f7f87f2959be063d64","sha256":"3b028b6ff84298c5edddc0a498ab5b1adb0fe867545c1e6ceae99fc99c8d230d","sha512":"f1a6f3270b7fa09901ebe6438a9894ca57130f60ea671a6d76395e40627b52df091f71ee6b372877809cc80762e395333ee73c2554ee21c9646c5de9a0c7430e","ssdeep":"768:oxS33ZT3kR4F40TDmjNKzVs//J5A7RPAbAHVq3R4YGuITyZOXj7Mj4+h4ANopRBm:z3zTMUXcZJ4AMB8H3YERnyy","tlshash":"1ce3864ff2aa506014d349a3b9c4b73d943da8ff92113a3dd62426b94f980ff53a5728","first_seen":"2026-03-03T14:46:23.558635Z","last_seen":"2026-03-04T19:20:54.610406Z","times_seen":26,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/lib/animations/styles/fadeInUp.min.css?ver=3.35.5","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/fadeInUp.min.css?ver=3.35.5 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 21:48:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 130\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":130,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"18b6260305b3bdc5100c937971d28906","sha1":"12c44b736a53dfa11c8286fe3ef05c2f64f47a47","sha256":"7263363f11b6184fe306b05a849db2de5a674258610578e594068bec72b4f2a9","sha512":"2c1751f012fd78fdf93ee1700536c117a4d9eac6fb442f3386aea7339f72ad2fcdf4835b309eafc6214da2c584bdfb47680291e191ac4b3721b21c32e5cdd2d8","ssdeep":"","tlshash":"78c092488aa4414d029a05fabcc4a951c53acbf6e9732edf7294494b4b81aad13892e3","first_seen":"2023-10-30T21:54:19Z","last_seen":"2026-07-24T16:59:59.835088Z","times_seen":44960,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/matic-network.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/matic-network.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 298\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":514,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"97e1612fd7124da5abcb4dde17286fbd","sha1":"497db3775be6e4fcdfd6b7694f86315854e82524","sha256":"a358c0f60a7d2c0b58eee1f54b635941ce811e410cbd5139e21b22f016a1ec87","sha512":"cc242203f0393a7ff66f04728bc3e3deb469020e7e1dc1b44f65c322e34c999065823d8681405593190236fe076d1e47f3b2c3d32c0a2e1d27692be3f6ec0c24","ssdeep":"","tlshash":"dff09ed16544d38c60840a78c73eb9e1283f30deb22c484c35d5e1a970542dfefe292c","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-03-04T13:37:46.364637Z","times_seen":19,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:48.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.1 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 07 Nov 2025 14:44:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4949\r\ndate: Wed, 04 Mar 2026 13:14:48 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-24T16:52:45.528884Z","times_seen":308844,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:48.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 02 Mar 2026 21:48:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 592\r\ndate: Wed, 04 Mar 2026 13:14:48 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1348,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1348), with no line terminators","md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-07-24T16:52:14.341885Z","times_seen":123265,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/uploads/elementor/css/post-958.css?ver=1772598951","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-958.css?ver=1772598951 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Mar 2026 04:35:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3481\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56159,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (56159), with no line terminators","md5":"022d13d9e6b3bc1e53dad452a5556cb0","sha1":"71b53594911bb2b55c8ed249d83eb4565bd728fc","sha256":"363aaf58bfa4d4ded7954aa16e0f4ea6b838b061787c4b7061baec3263c1b490","sha512":"389f9b04f3dfed25e20b8d4f33aa58cb07bf74a6818584b3421937978be8dfe87ed90e4cd39e7eee6bdfbd2578dba3046ad74e2daa0652f70dddc03816ea953a","ssdeep":"192:1xuFuzxZyuRSCTuRSZO9vreuzxZvuRSpuRSwOTFD8uzxZhuRSeuuRS+OV/qcuzxU:fF4za0HHAAekOuag3wg3ZVx","tlshash":"004311a87e534021782fa65f9053e5cc6b741cc9ddbdb2c6f8749023b475ea0b3e0a96","first_seen":"2026-03-04T13:15:17.416639Z","last_seen":"2026-03-04T13:37:46.351295Z","times_seen":2,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/ripple.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/ripple.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 253\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":399,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"84ce7542e288e2bf98a4da4dbde2594e","sha1":"e85496f0cf50b2158de788a0d87319e28dc9837b","sha256":"31fe41b6b3a4d98c9b46d7c37d60dea97fa5d9ebbd235ac5bfe23e4fd1eb8361","sha512":"5ab148cf574017486cc40e9f9ab0c94fb8065021114e4c226523c8aaf5ee6c97874c0dffe4dc843223454f1c8a1a94f8189acf2a2e091afe3181257a35bafcea","ssdeep":"","tlshash":"bee0aba935f4d405448a8ea9d52a30802011a11e3159067ab040f619f8a30e72c05ce8","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-07-23T16:39:23.27639Z","times_seen":4265,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/16547/large/photo_2023-03-29_21.47.00.jpeg?1696516109","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:59:29 GMT","end":"Thu, 14 May 2026 16:57:50 GMT"},"fingerprint":{"sha1":"46:94:B7:6F:CE:F9:AB:87:E8:C9:D6:E3:32:37:0D:47:C9:79:37:38","sha256":"8B:3F:CF:AA:1F:57:3F:0B:D7:4E:84:70:69:3B:0D:C1:70:8A:86:B0:9A:53:F5:C6:EE:65:BF:3D:44:12:A9:E2"}}},"request":{"raw":"GET /coins/images/16547/large/photo_2023-03-29_21.47.00.jpeg?1696516109 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11400\r\nx-amz-id-2: gE2ZEyQHeVRnX+1njXJy30qHZOzyxP1uFA+7NWAwJs5MYOwMw0hPnhVwBe04uJezy3QuxRlobTo=\r\nx-amz-request-id: WEQXN3FQD0B74S35\r\nlast-modified: Wed, 29 May 2024 02:36:06 GMT\r\netag: \"2023dfd9993ea9caf3779b230050df18\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 68NyI9z2KYs3Ws2aOTuijsPcoy5yiNYD\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p5q9SpC%2FvJgcUE%2BMvAA9rn6mT2k0qv6TNufNphjJSbMyhONrIlnfvrb2OTFE9dg2f45LGt%2ForQDBRzaNuz9%2B%2BJ%2Brg6JOyWKpuTiBWSeE0uFCSkuQCv0W%2FzI%3D\"}]}\r\ncf-ray: 9d71255d1d10516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11400,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 250x250, components 3","md5":"2023dfd9993ea9caf3779b230050df18","sha1":"56a133da7504a0544543c06809a324165548448b","sha256":"72f050727af44710453f64ec668a8c4d35689d88ab10041161f01c7ecd42d063","sha512":"283fee11992ad0d4302ef842b382bc835eb4898e256d4d885e32d757e5008fcf7fd317ee42239182a83cf7444e57658f2b73e1cf09b528a350c978239f67cfc7","ssdeep":"192:Vn4sfFk9pcM8BDLkVE9FCTKBAs71idwYttxJnXRGcfq0wNw12bw4lFO+50T3P9DC:VrfFkXcM+FqLK1OwGxJnhGci0A5tFETY","tlshash":"dd32b0b5b51c1f4befe13d04e62f72768a57e5532435ce6c3f8c8b2a13680f0622a615","first_seen":"2025-07-05T16:50:07.619803Z","last_seen":"2026-06-26T13:16:04.175954Z","times_seen":13,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":492,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/css/bootstrap.min.css?ver=2.6.2","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/css/bootstrap.min.css?ver=2.6.2 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 21:42:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1108\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6289,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6289), with no line terminators","md5":"f5d5a12c24b3914cac4fb07b6b1b43ae","sha1":"d4b7d81c9ab27693293f91ca015e57f1d409fa8c","sha256":"dc2d60d7486cccbae0821f16e0928f9ba9e9084445e6678fc6cbb09b2ccc5ec6","sha512":"373d709bc54e89fd4039da1a1eeeab5d1aced16028e60b90e6a491267915f9d6eae0b594247637724c54850bac4b8f432fad68a4f0a28efefe59fffad5ef3e89","ssdeep":"192:2YxHKDhhRJtZV8EU8Yy5T3LlJtpUWKEJUtP24LTr6ly:zKWL","tlshash":"99d14561c3003dc951a2f7a53e6c6dd23b0002b4e6cc4eb6b62a11e0470dfa587d7eab","first_seen":"2023-04-18T04:49:42Z","last_seen":"2026-07-22T10:26:59.336387Z","times_seen":243,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.35.1","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.35.1 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Feb 2026 10:21:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10095\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44258,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (44214)","md5":"cc9534a95ea09033bc91a3ebb43e5f04","sha1":"114a3d58226c2515d72d8b05689e41365f8df53a","sha256":"0a12e29b5b61329aefdd77b77ba14bc6aa455e96e42fcbac02352aaa74916a19","sha512":"20cbbccdd2547a9df9033d1d396b7f385f4f566d78db3bb8ac2ccadee1e75bcd271aab91fdcc795dae485a98b123d58feb523a453075f7ece5f8c2804ac151f5","ssdeep":"768:o/Xt95D1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdiePm7Lc:mtDD1+WE9A5yLcWJ9mBtIoERuWfRMBKB","tlshash":"5d13955171aaca6941cf84abf463164fb7225c9cf413f0e67afc8d82b564e87a390731","first_seen":"2026-02-11T15:12:19.193565Z","last_seen":"2026-07-24T16:05:57.164364Z","times_seen":14150,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":352,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=3.35.5","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=3.35.5 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 21:48:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 699\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5486,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5486), with no line terminators","md5":"f8ab0c98754e13666d2cd378bd023dbb","sha1":"a5226ce1f5dd1eaba7a6d2490eb081bfcc861a0c","sha256":"196f351ce1a780302b50e7b2404023102d7f555aa518d62ec678829c4b7b1185","sha512":"4d78e7fa90bccdf3ac5c09bae6cf94f7f249df6dabb23a510962d1b96072de072a6f81ada0e70f9087a6c38d909aaa42fb5350f7c8d1fa7f90be7578fb2698be","ssdeep":"48:VbD0j9UWW1KebuS9OwVFd4Rd8JN6JnDYQ1I1kFYFsFaFbdFvFblFaFbpFvFbX:Vf0RH1f0qYm6qg3B703VN","tlshash":"adb18c823f830123635f4e67292357bda2280dc44997b6aad2e1ac87e2b5cf5375f854","first_seen":"2024-12-17T09:11:11.376513Z","last_seen":"2026-07-24T16:59:59.780314Z","times_seen":84248,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4678\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-24T16:51:14.517893Z","times_seen":907000,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.12.3","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.12.3 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 02 Mar 2026 21:43:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5927\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25965,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (25965), with no line terminators","md5":"424d1bd49a0f7bf705d9342a91c0089b","sha1":"94166e2c3fb906fcdacd8976d14638201d0a7bb9","sha256":"66b713cb51fe6103cd8729bc0c245c9497295b6873bdb9be7e8196caf5e5326e","sha512":"1694d2c8689eb7fb9e580bbe8184a6636cf6d05619ed16edb914155bf8f4488921d99ebfcbe5d1f5b3504435f13e2050934ae8d1eefdc432a4a98560180cb52f","ssdeep":"768:uYEPx6KoYcFDTHjCqoKoCo9or6jCRcjC5LltbmxPE22Ve8KTX6VzSD0tIzQ6IFNH:uYEPx6VGe6jCRcj6lBmxPErhdSLWNdio","tlshash":"12c272a66300293604fe17e7f5daabc5767114affa0944111838cc2e19a8fd352f5afd","first_seen":"2025-10-07T10:54:39.300678Z","last_seen":"2026-07-24T15:59:20.627309Z","times_seen":20989,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mercuryonlinefinance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 09:06:23 GMT\r\nexpires: Thu, 04 Mar 2027 09:06:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 14905\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-07-24T16:46:26.43375Z","times_seen":250369,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":120,"dns":0,"connect":8,"send":0,"wait":9,"receive":3,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/the-graph.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/the-graph.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 560\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1111,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a8912014bc2be6e858f98ec2300d554","sha1":"17f231e3b1317c8c087be996e1a94e1b6e3d25c5","sha256":"467fdbb61ab20bfc9ea8f99ff26cdfcb7b1dbeaef233505605121f710d8c942e","sha512":"9dcece83159a97c6046acd862a66d2b77efcbc3914beeceed160334cb19e178f1a604aa92ea4cae48f204ae4002c2251fecd9aa39975861b055e4135341e49da","ssdeep":"","tlshash":"5f21eed90688d9fed476c13087ea7bc232257c4f71f096e06a934929de200e0155d2fa","first_seen":"2023-05-21T22:41:19Z","last_seen":"2026-03-04T13:37:46.314628Z","times_seen":16,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/uploads/2026/03/cropped-images-10-1-192x192.jpeg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:48.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/cropped-images-10-1-192x192.jpeg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Mar 2026 21:54:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3569\r\ndate: Wed, 04 Mar 2026 13:14:48 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3569,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3","md5":"81b95030f5cfada837de81c8e874b53b","sha1":"389bd590528de55554212f66d28a84f921e5c27e","sha256":"9f3de833cd40cebf8aca5dde81584fc96ef5dda8b5966964c824316b30de1b3d","sha512":"76f22c5d95d649156554ca4f55496eddbd6e8a97c9af6ce58da18f68abcbed02d0fa3dec66795fb0b8a3ac46dfcfcb186749bf6a6096c1e5942c4cd9baf6d62d","ssdeep":"","tlshash":"89715cba6134ca80df3c4e3c1207faca84011841ee710e46937af9dfa09d5c6dd54745","first_seen":"2026-03-04T13:15:17.426675Z","last_seen":"2026-03-04T13:37:46.346758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 21:48:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4248\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16471,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16214)","md5":"a2431bc290cf34e330e11ec4cfce1247","sha1":"32a53342901fef5f4f4dbb26a555e730f84437a4","sha256":"c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196","sha512":"87aef045472db25020faead697ec02813ba38d4e313caf437b4ca5cadbb7a7495805ac0b74e5de60cd84ccecab290b76d003eb1fadfcdaa70e650a597658ada9","ssdeep":"192:IbgmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IdUbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"fa7234681340282753274f374b71cbb9d9b444d24b93896e91c0ee88d7b6cbd236f6e9","first_seen":"2023-04-05T10:48:11Z","last_seen":"2026-07-24T16:51:14.51967Z","times_seen":137809,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/uploads/2026/03/images__10_-removebg-preview-e1772488415742.png","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/images__10_-removebg-preview-e1772488415742.png HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 21:53:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13557\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13557,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 164 x 114, 8-bit/color RGBA, non-interlaced","md5":"f71ee5f768e3494415e5aee490686542","sha1":"b87785b3200df92e12f955612344b9aceafc88dd","sha256":"cf7d16c18e4b57a870da6f3e3477e2e94880a302ea03aa5c968a5a83dd40a53a","sha512":"d6bff57f87e0b6b762a5bfd7dc3450d20739705960928dee81bfd9bba5489573f145f9cb95159a728f46a94f09b69218b11207c711731be28ce13a2fe34d3b02","ssdeep":"384:RlU2+MNkadnKyqto0QrO9/ewDTU2LnimA:RlU2+akWnIrvDTpi7","tlshash":"ae52ae4379e342b551ab4f2b7dbc39a779388ea1211746b1f324c9d4a160fd242417ba","first_seen":"2026-03-04T13:15:17.430548Z","last_seen":"2026-03-04T13:37:46.330084Z","times_seen":2,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/staked-ether.png","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/staked-ether.png HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 21:41:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8796\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8796,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"e65507d9c4e38c4dc1f523835f46ce64","sha1":"f4caa2d6d27c3609db5b5f9b307e11b06329db68","sha256":"f7d2457c519986054deb7ec466eb36f5fd6fa250eee75ba29974ca9617073dec","sha512":"b6fd4612a0c29ca954b9a6222bada9ec063bacacfbc18ce4ad738765a515d725bae435eebd1cc37494ae35d32ea1dffc83a3d9c949b16d0687373ea61a45a681","ssdeep":"192:V637Qa1mHAl3cN2r9kSvGyW/dDOwyTdK2+yoQ6S:V6rkMQGeyaMK2+nS","tlshash":"50029f92f9c6ccb1a85945f701d78fea1d3bd29b1b677801d729c8888278b255246337","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-06-29T21:51:12.690647Z","times_seen":97,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/chainlink.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/chainlink.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 235\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":380,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"74046b9638f36b220a18ab5e6238341a","sha1":"7922474189f6b5bcb0d4876552ee7d3cb01aa863","sha256":"2457990f68e333130633497d20456de38af8421aba8fdb4149900e4e051f10fa","sha512":"84c4a9c35951462b6686f55e4118f5d7b63158c546960c80edbeebb802b7277bc9a77205f468ff802496463440773fdb9a4dbc2c07e73238eff298c91281bcea","ssdeep":"","tlshash":"c9e068f8b2b8a6c7fc6fd598ab2935e1009b34492d48017472aa250af55b0f315adb94","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-07-23T14:12:00.624474Z","times_seen":65,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/render-token.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/render-token.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 826\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1550,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d8d59ea2bb88f36f0045d657bce6141","sha1":"c5d262c1249991b732a385f405b1ce6146512bde","sha256":"a5ae12b8a8c214e735147bb9e313f0b913cfc35d4ba5138f50e5e7f76c6875d5","sha512":"7e7184dcd46549c8e891ef2b7f3ec4a2e359a1482269fe072c64828edf5eed883c889d9aeff4a6fdbbc0e3082a9952676ef710f2671e4da85d0bee2fa90ffa82","ssdeep":"","tlshash":"cf31dfa8c46494bdc6d807814b79fbc84b3df2af44e53c7296c939854e4df654a9e700","first_seen":"2023-05-25T00:35:20Z","last_seen":"2026-03-28T14:06:10.721562Z","times_seen":8,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.5","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.35.5 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 02 Mar 2026 21:48:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15420\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50503,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50502), with no line terminators","md5":"73c07e9630db2adbba0c6bc0bf568719","sha1":"dbeb1065ce0ea1fc9fa6b9df9e5e1700a8dee09e","sha256":"f4bdadf362076967230901fdfc69c8df84957f6615dec226b99ad2abb64c2c76","sha512":"d48774149b65604aeee68cf2936bfe5c84714bab61a46a190952b595ee79ce8aa2c0549a3755768b3a3615c2b6abe0cfdc69c398a77296b8ceebc69bfea8f8dd","ssdeep":"1536:yuyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:C+uhIAu","tlshash":"cf33d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","first_seen":"2026-01-29T11:04:52.803648Z","last_seen":"2026-07-24T16:05:57.152864Z","times_seen":30018,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.35.5","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.35.5 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 21:48:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 126\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":560,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"c3be9e612baf8fc4af612de8af4c0864","sha1":"f6b1366e30a459deefca035c5563f1c929c8ed10","sha256":"f68e889145cb0e47b7b190b2fdf087a9213a264ad33951512880c9f8bb6d0cd8","sha512":"aee455fe10d8126deb4d1015b6b4450ace4851e5b32890505af619f7863469c56b788b5d822849986759aa85efde260da77ed12bbb236ce2bf6629bf6759f4ca","ssdeep":"","tlshash":"f2f0c0237e4b94aa383f1d571083337c74944ec893a0a8d8e9fa91435cf4cb27330622","first_seen":"2023-10-14T23:00:09Z","last_seen":"2026-07-24T16:51:14.49406Z","times_seen":117467,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/wrapped-bitcoin.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/wrapped-bitcoin.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:42:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 630\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1310,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6eaf8be6a72a14e2d687912ecd7bf08b","sha1":"3ea5ebe94d593fa547a67effc382db660ad7b864","sha256":"3a57d25e32ace908c7a33d8ca3e30b8f6eda95eff2604799c504a4509bd657f5","sha512":"5d95d3da57b45070f7216d3d094988d0e4a724c8a23854ac6eaa4c8a688c2561e813d00b6bca4aae575d2741d63586814eb0c3c4bf379a21cf2f5757efe8b522","ssdeep":"","tlshash":"9321eed3bb30719d19cf476bcf245924206e3476fa568864a54b621cf9ce4dbef44c40","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-04-27T23:35:30.767201Z","times_seen":27,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/css/widget-image-box.min.css?ver=3.35.5","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image-box.min.css?ver=3.35.5 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 21:48:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 297\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1657,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1657), with no line terminators","md5":"c5633b9e0526503125e387d5f42543ef","sha1":"92a9fa314349f364104e5ca5bd4f52fde0530165","sha256":"7738ac41dae333c277ec1132c7ffa496457af424a623cbf02b56fea00adaaf1a","sha512":"e1133cb93373e602894a12ee6baf278dcf3753780401d4c6d8ee90599a2eeb8a7faac76a4c4b409ef40bae967452eb9b80816a8259f168ba34020cfc20c024ab","ssdeep":"","tlshash":"843130c13c5b5457241f5b2f305f258d64a24cd8ab97e796e892a20706f9ce43732c5f","first_seen":"2025-12-04T23:21:35.463704Z","last_seen":"2026-07-24T16:48:25.951671Z","times_seen":12563,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=4.12.3","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/flexibility.min.js?ver=4.12.3 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 02 Mar 2026 21:43:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3759\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15525,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15525), with no line terminators","md5":"f3f609a6ebd5b8fede4abc63e105a7b7","sha1":"6cf96160fa67d56a7be3c68b1941d3af0061a69d","sha256":"cb7b88e5a91d97805b4efcbb6d4076cf93a62fcee29a5a363ed66dafca0dec09","sha512":"afd5aca3d8468c121b02d8b93f219bf9157c36f94a1df1511c3803ea70671d872bdb2ff6a04bcaf1110355a10ec5f9f2b2e28f9d50cb3447ee845d6ea00303a4","ssdeep":"384:uOgKnOUyVosSYlDjp1CAWa54XoO4qd7auYk4FozQ5rY3cYaTtlUBETID9g4ST6C7:Ng0OlVosHlDjp1CAWa54XoO4qd7auYkA","tlshash":"07620dc73a4c342246028e88fdab9a1578a60f6e0b2c4758d157b97400b6d571debbff","first_seen":"2025-10-07T17:03:00.325877Z","last_seen":"2026-07-24T15:59:20.68661Z","times_seen":17613,"resource_available":true,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/bitcoin-cash.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/bitcoin-cash.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 544\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":962,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"274d44f020650953069e6daaf4929b8b","sha1":"16399a20f681ff949301facce38fb81ad8cf49a4","sha256":"5c9f5d7e205ee3b07e6563abc08257657734754c99948d6f082d141923c6ab0b","sha512":"ad6ddb0e22a856185f30d3a9012a199f5fd363b1d7a01c3641f8dadc91956d05e9bda6b43a0437612aa970d54d3ab97765703cab4a47f4464dd6e78f75b3bb1c","ssdeep":"","tlshash":"2a1165d72354f8c4d99388ec6f14a8d21c2170ca49ba24e6a58fd90cb50a9cdb600858","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-07-22T10:26:59.239968Z","times_seen":47,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/crypto-com-chain.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/crypto-com-chain.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 740\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1799,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"719c330a5fe69343c49fa8c9170dcc0f","sha1":"297303fdbe475b43c487559ecd22a0a1a5d57870","sha256":"b12aff03e8238e585b21206a77995aa3408d1f0c4db4a2df78e2d8d341239496","sha512":"3e7ce000d61ff55e7428df48d808148e335a15f0271c5c427578b785745a111f6a395469fbe97276c4b27ec0d48f34892b1f3d4e57454d560edbdaaf90660544","ssdeep":"","tlshash":"01314618e68a7c2be0178140dbf835d553a935dbe1d5c5a480b53fba99588800dcd3ed","first_seen":"2023-05-21T22:41:19Z","last_seen":"2026-07-07T01:27:24.94244Z","times_seen":24,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/font/ccpwicons.woff2?89136625","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:48.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/font/ccpwicons.woff2?89136625 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/css/ccpw-icons.css?ver=2.6.2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 04 Mar 2027 13:14:48 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 02 Mar 2026 21:42:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9552\r\ndate: Wed, 04 Mar 2026 13:14:48 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9552, version 1.0","md5":"0c76077f29ea03ee9020c535a9784a62","sha1":"2f5f9d834dc30fdc1e1b53950480e2f81ae2a8ce","sha256":"77e72838438dd682f8a0811475a0157b894ddd7efa7e64c2b8894806b82623dd","sha512":"0ec1626b0ff7a6470d76da1ccdaf4e426ac8b5dd41b9c58b8c31e9eaa994b77dcffa244d4f5ce19ce06e2592eafef8fa51d2826e95ed592b9b6bf87076d4d0fd","ssdeep":"192:C8wRkLnD6tENNnW8FVmpOay898zsRMiKm8G8KpyC8/:yaLD6tEvnW8FVeOay8MmM8RpyCW","tlshash":"6712b0a564074052b20750799fadb94dd066d05bba6c442c7fac4d9dcaad2c6b2021a7","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-07-02T21:27:14.133923Z","times_seen":78,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":211,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/binancecoin.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/binancecoin.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 275\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":508,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f78cb0ac9030a7bec8aec4de2645b1fc","sha1":"ec21520c30e84dbd5a3b62fd86e446d0d7d38e69","sha256":"170d4e76633e910c49e41f4c0ce3ef0a425e6417d503fb381c741257f530cf1f","sha512":"e0ebeb3990bf9addb5a366581942f9528dbff8a5b2a3ea03a48c557ac8a3219c44c43482955e67baa00608be43e0e54350e214c51f09d87400d9bff171d81855","ssdeep":"","tlshash":"61f024d888147e11ce062d48df2bfc23045334254e4a79a6e24aaa2afd589ddb885e18","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-07-22T10:26:59.305803Z","times_seen":147,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/34753/large/Ezeth_logo_circle.png?1713496404","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:59:29 GMT","end":"Thu, 14 May 2026 16:57:50 GMT"},"fingerprint":{"sha1":"46:94:B7:6F:CE:F9:AB:87:E8:C9:D6:E3:32:37:0D:47:C9:79:37:38","sha256":"8B:3F:CF:AA:1F:57:3F:0B:D7:4E:84:70:69:3B:0D:C1:70:8A:86:B0:9A:53:F5:C6:EE:65:BF:3D:44:12:A9:E2"}}},"request":{"raw":"GET /coins/images/34753/large/Ezeth_logo_circle.png?1713496404 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 14262\r\nx-amz-id-2: Tatg2iRbtuUbgQ35/vbQWsquabG9HQ486PpLnwQvVMTx0OmKqyv5zCg907/abk+dwsTjGVXJOTc=\r\nx-amz-request-id: QEPM120PKNHW5R3P\r\nlast-modified: Wed, 29 May 2024 02:54:55 GMT\r\netag: \"66de75b87ae42b1a511b4077ea7f625d\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: IRUmpKepAirtiIxXvfGgn0jFBX_OdBRv\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BBjyqrobyxdxgR166ONNot3a%2FUVDkMVXPPCMWQNzDrGUWJSIwOc%2F3ppTwC0hMATDtyalEz9PMOJBxUr1Qz8hymGMSDyw1%2FNd7f409bAfMhk0reubU%2BpkXXI%3D\"}]}\r\nserver: cloudflare\r\ncf-bgj: imgq:85,h2pri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-polished: ok, orig_size=19920\r\npriority: u=4;i=?0,cf-chb=(105;u=5;i=?0)\r\nage: 93\r\ncf-cache-status: HIT\r\ncf-ray: 9d71255d1d11516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14262,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"e240927a18e786821df7b5255a2fbf85","sha1":"af7c475df3c3d367e6b4e50d06741ff1215fc2b0","sha256":"d05bf7c1245def4e4c6cf222d467e4093e4bc68e27b31f3258157bf13487c735","sha512":"38647fc6900c0a28d78b140ad4060ad15d592f7a2a64dc8b81dcee2e7395dd06586736299e9d6401d77af1347ca1e636b87fde6d5a206afd72162dd83de61de1","ssdeep":"192:291OVuplozohnBmQsziFg5KC5ZJhFCh3DVq6tGDDUsgIb/xUJuagyk+JQ/mH1CD0:HulzB8FpbClko8QsgIrxUJuakNmH1Iy","tlshash":"3752bf4be9d87c29ac4d7c30c27092629caae8676475904fefbd49c48d0de78d9d416c","first_seen":"2026-03-04T13:15:17.481385Z","last_seen":"2026-03-22T21:04:51.051033Z","times_seen":5,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/uploads/2026/03/cropped-images__10_-removebg-preview-e1772488415742.png","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/cropped-images__10_-removebg-preview-e1772488415742.png HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 21:55:35 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13063\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13063,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 164 x 66, 8-bit/color RGBA, non-interlaced","md5":"e273827356ef29fe48b6fbc143312b8d","sha1":"edab72d84153e2b2b3b35aac695910a8bc462187","sha256":"3b1782be2813bbf21943812c2457561e7f9b8215978b6c09347aa217bff78c88","sha512":"63411b9d883cdbe7933b0c9c9bd2fc1ed56ac9eb7858d5e21676c33f217f4d747690e6bead51385af24016a34d923c3e7a024e7e94776a5f363069aef85b7f0d","ssdeep":"384:3Rtdng8mfseQildSaDCEoJeWa2YCgGAgP:BHmfoaDCEoPaBxA","tlshash":"d542cfd4320b382d293122e7dfaaab770e40220ff8186906146c45ab0f979a0c36fcc6","first_seen":"2026-03-04T13:15:17.48432Z","last_seen":"2026-03-04T13:37:46.293101Z","times_seen":2,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/avalanche-2.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/avalanche-2.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 776\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1619,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e9df24ea466b546f238627045e3f242","sha1":"f77d52a7ec76d6c123f80edf561bc76060bce738","sha256":"1770e468b98420107a7385066571b9ea8c2a86c327c16f5bf59108983a40657c","sha512":"c78827f51b37840004cb8855fc78f1e647a5a66c72817cf8511c598c47aa10db2ec372f358df6ae6befb90a026e304872d20e911e34f5a99e973647aec68a733","ssdeep":"","tlshash":"c13133dc1a4688dc5dc485f4f72030d4da1ff0fd66026e15c248ae5868938e88e4d55f","first_seen":"2023-05-07T20:18:14Z","last_seen":"2026-07-17T20:41:31.399984Z","times_seen":720,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/stellar.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/stellar.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 354\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":618,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"29ac2fa4e98cbd3cafe6d55bbee72938","sha1":"b9ee905ca1b20c675d6a96553cede4334c2df338","sha256":"65b922105452f2c5276a2da9c289ac839b8a4d1b94d716c1aa5dd5b7f06fe52e","sha512":"883fecca60e132d67941b6cd0041963b3fb85b1a8cf346e35c36524520a0a5cee2b5300f9cc892424175ab9ba6d38421084fea852c19de1fa019709c374d0912","ssdeep":"","tlshash":"b1f0a2e67d58a51d5d4dcb2c2f08a299105e348f1bf909b5e5c59705f0c71cff614914","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-07-23T14:12:00.682625Z","times_seen":70,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/uploads/2023/04/iStock-12835998513-1920x550-1.png","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/iStock-12835998513-1920x550-1.png HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/wp-content/uploads/elementor/css/post-958.css?ver=1772598951\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 21:42:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1727048\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1727048,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 550, 8-bit/color RGBA, non-interlaced","md5":"691baa8524695d5bc8e941c63acfe411","sha1":"bbd06f5e7512323da59d2676e1dd2e32804dc944","sha256":"d203b471c38d4119b874463e7c9c3181625a7f234752bca5c4f314a4fa844f99","sha512":"c8915a24dae0f843c014b79d7992864c2bb54a29dcf6f5004a3d2f5926b594c6dc016d6eeced7109d5050a4eea0603bbbe0485b185fd407d87021ea719d3e3c9","ssdeep":"24576:ksXjjQ+vYLL2UD3XkBVHJHsu2zxXrvQwvXsXM+nGXlh+3OUe:ksXjjQKY2sXMlkl0ocXMli3Fe","tlshash":"4825335630ef48d7f95a568c996e7632d4e7205b33b182c30962f58f9efeda40b4430a","first_seen":"2026-03-04T13:15:17.491155Z","last_seen":"2026-03-04T13:37:46.32098Z","times_seen":4,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":429,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/17980/large/ton_symbol.png?1696517498","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:59:29 GMT","end":"Thu, 14 May 2026 16:57:50 GMT"},"fingerprint":{"sha1":"46:94:B7:6F:CE:F9:AB:87:E8:C9:D6:E3:32:37:0D:47:C9:79:37:38","sha256":"8B:3F:CF:AA:1F:57:3F:0B:D7:4E:84:70:69:3B:0D:C1:70:8A:86:B0:9A:53:F5:C6:EE:65:BF:3D:44:12:A9:E2"}}},"request":{"raw":"GET /coins/images/17980/large/ton_symbol.png?1696517498 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 10784\r\nx-amz-id-2: NMLWe67vkXZgf0s5hSsOhfoF8d9YtcN2QAihmT1c70Bjl1mV4Q33rm+XrojUyzNeG2H8GBJEoXo=\r\nx-amz-request-id: DY9TNZ8T0VV3VJC7\r\nlast-modified: Wed, 29 May 2024 02:37:45 GMT\r\netag: \"9cc8c3b18b17641e94a878a718457145\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: a4uB5_Et0UH33PWEicy_pCY1AvzV1xLp\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lfQUeloT9P423Q4WQIC7uzzeo95TLRnUXwGXL6nG40AXT9M6OCClQIP3%2F1YU4WMRmLd7TFnUBUF0QbYtAvWxh97wbp4GBkOEtIHSP92BljrI31qeMB8X%2Bmo%3D\"}]}\r\ncf-ray: 9d71255d1d12516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10784,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"9cc8c3b18b17641e94a878a718457145","sha1":"f8ba3059ed0de181624c9fcabb38b38033899839","sha256":"3b3818342775e21009f4b1fd60da2f848afaef0d6282c34b76d5d9a0543c66cd","sha512":"32a3530c428b4c9cf633402cbc6e74df912a6eb6bc4392b231d667b53eb1bc1b89438d356cc17adcdc3046d8f5ff463c0983e5d1d7f9ce415cb7193534b147ad","ssdeep":"192:zRAzn6UI9YQYuqtMJb/EhLLr5BhxwwxofrOe7A56b843+qf5fjRO+r0P:zRAzn09PuyJb/EhLLr/hxTxozOe7c6dM","tlshash":"1b22c0c8959bdd1a5fccc3fea1a55db301a50e1db28b04730c3a4aa1ed41058f86fe58","first_seen":"2024-07-10T18:48:44Z","last_seen":"2026-04-10T11:53:48.732154Z","times_seen":27,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/33613/large/USDE.png?1716355685","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:59:29 GMT","end":"Thu, 14 May 2026 16:57:50 GMT"},"fingerprint":{"sha1":"46:94:B7:6F:CE:F9:AB:87:E8:C9:D6:E3:32:37:0D:47:C9:79:37:38","sha256":"8B:3F:CF:AA:1F:57:3F:0B:D7:4E:84:70:69:3B:0D:C1:70:8A:86:B0:9A:53:F5:C6:EE:65:BF:3D:44:12:A9:E2"}}},"request":{"raw":"GET /coins/images/33613/large/USDE.png?1716355685 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 9060\r\nx-amz-id-2: LtBcLkCTqzFh4i6H3NDf2QYBhtVlY1klo5ZSQJVx97NzOnsWfpIwLaAqPj5TxnOqlFYz2tn4YArW3H1/FYZfgoNUNwzlz+Wg\r\nx-amz-request-id: JZ1RG1HW9ABM5FZT\r\nlast-modified: Wed, 29 May 2024 02:53:45 GMT\r\netag: \"2543c194e01da52ac11614ffe8517f17\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: KzEwzjJtg_snTJIyKcIDooH6LJWApVSO\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 4256\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rPEQEIeNMbiot4hkGjCiOesVprfK%2FXItuUOvqwMMIjv3lyoShrj%2FDNr34eljleqcNb4tabrkmt1hN91KgWTA6H6koX3atQQDPKuYou3bBQ6YfahFzGG%2FHpc%3D\"}]}\r\ncf-ray: 9d71255d2d1b516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9060,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit grayscale, non-interlaced","md5":"2543c194e01da52ac11614ffe8517f17","sha1":"138dd439581f44592e16909bb30ac7f1b892e150","sha256":"634248c06aad1aff4a39c3836a8ab660e313955e3881d3c60c01b4a1a37dd09d","sha512":"f961595b3946d1780eeb7f3374b1a2142c2d3ac9630c62e45a01409b7dbe89bb46dfad908b5e77c8fa7f80f5f11190a50e2cd92c19b1e33a0aa059298354f972","ssdeep":"192:BKdumqzpS3Z7bYO6ZB6LmhE7qRo3LwSMJVHRzyI8Y+tLNphCDFxMEP3GR:BKumzBbYF6Lh7DwZHxzH2tLBCeEP8","tlshash":"d312bfeb6ab6f0f8381eaa6e0a7a34d0e690d44f3135180173dbf48581517851dbb8f8","first_seen":"2024-11-27T11:16:54.374297Z","last_seen":"2026-07-15T05:49:23.679207Z","times_seen":25,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/arweave.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/arweave.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 654\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1442,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e39fc0e5d91f91d296d00ae3ffb414ce","sha1":"1d54e30f7d85b44ba16a466c9ff7e03c20b4fe60","sha256":"5a727494f947aba5d362afe696a548c3e0f22365d7dd2d92de0a0ae891df87f9","sha512":"f92f434be90fad0a50b50a28c573ca3bb3f14c7412d56f2e940d16a96797e3ef7b26651a153f589798348a87f0e40f89b9f5a2e731d254f10557d088a60c1bff","ssdeep":"","tlshash":"65214707430466aefb1d0110ea59249e73b0d4c7d0a4b4d0b757282ae0d89f8bd8dbfc","first_seen":"2023-06-02T09:58:17Z","last_seen":"2026-03-06T18:49:55.341859Z","times_seen":7,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.35.1","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.35.1 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Feb 2026 10:21:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6203\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24047,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24003)","md5":"8a32d558234aaf2a5a40d2084b2d7b68","sha1":"d5a885a2641bf1782917c15bf1d7026a0669807c","sha256":"3235d41729730b91d3cd49961af32b579444981808c025a6c6da4817a1ec6dd4","sha512":"967be003aeb2d6132ab1173f540b70361f415877d9ab89595d754c06a8402d3271d31d141eebadbae420e83bbe5fb22e82a11d629fc2790115a5b60c94113952","ssdeep":"384:cGy+EVxFm6cKJskdHd7glQtHuGJswg/i+TSQDTWmMo7YtDT5HJiIqkoh+vFWN7Kh:cR+EVxFm6cKikdHd7glQtHuGJswg/DT6","tlshash":"efb2d9023163ac3a50cf815be067420e7b374995b40570ed7abc6cdba5b8d9a33ea335","first_seen":"2026-02-11T15:12:19.189108Z","last_seen":"2026-07-24T16:05:57.175225Z","times_seen":14149,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/javascripts/client_default_6e82e2f.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:48.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 10:11:33 GMT","end":"Mon, 20 Apr 2026 11:11:30 GMT"},"fingerprint":{"sha1":"CF:0C:FC:2F:34:74:7E:49:1E:7C:40:BB:59:F3:B6:C9:67:38:8A:6C","sha256":"FB:3B:C5:60:19:2B:8C:0C:EC:D7:A6:9A:D4:D3:E5:A4:A3:67:2B:44:09:99:21:44:6B:96:A0:65:53:27:D0:26"}}},"request":{"raw":"GET /static/javascripts/client_default_6e82e2f.js HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mercuryonlinefinance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 13:14:48 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"69a6e476-50395\"\r\nexpires: Sat, 01 Mar 2036 13:14:48 GMT\r\nlast-modified: Tue, 03 Mar 2026 13:39:02 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9d712562bd86b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":328597,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65124)","md5":"bc9c0b7fa7dfcd5c87cbf271efd5e5cf","sha1":"b1f1c537761d4c1a5c86019a52ae1ebdd8f7f5da","sha256":"6a6ece4a22a86b89082728851c2d9296fb0056a9610d0b7ba5e8f69902b2db8a","sha512":"c15b43b0f73e30665b2f25e516a5039e836e1bb09a3076837d2ce5b94bf44ff5fbd72631dd0242db2dfadc00de9bb9e2ad475cce7f326a0b983435fb302a039d","ssdeep":"6144:rrHe9YIHOYcMcYtQaHabPXeYvDFDcyp2zopnqV6V:3H245MYvDBcypyopnqYV","tlshash":"a464188a7261a83213f582d7a4320942f339255d7486843cf36cadef664cec671e7bb5","first_seen":"2026-03-03T14:46:23.727304Z","last_seen":"2026-04-22T15:08:59.136099Z","times_seen":28,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":17,"dns":1,"connect":0,"send":0,"wait":52,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato%3A400%2C600%7CPoppins%3A700%2C600%7CMontserrat%3A600\u0026display=fallback\u0026ver=4.12.3","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Lato%3A400%2C600%7CPoppins%3A700%2C600%7CMontserrat%3A600\u0026display=fallback\u0026ver=4.12.3 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 04 Mar 2026 13:14:47 GMT\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5248,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"62a4541eb3baed70a650fb3583102917","sha1":"c12697b997b3cd07b448c55717a02bfe6cfa39c3","sha256":"a38c87f391634ee957ea9894aafc580389cfc0d68e5de96dff4dc0399923b4af","sha512":"81ce66c3030d8f1dc58cafa71560247726f0c2c808ed9213dcae46d0d6db5358333966765f81080747413c6f246812e4000d36c0f98fff6fc9b9d8b5e4f13269","ssdeep":"96:HOEPZpJc+u7OEPqNtOOxMPvwOOxMPD8FZOhOOxMPhOOxMPVJc+udOOxMPAN3OxMo:N7Ilv3dIIdJaowPy0z8Z","tlshash":"97b1df91042be504ab430dc623cf7f33ee0ea1517454d479affd1c98ada6c260361b6d","first_seen":"2026-03-04T13:15:17.502402Z","last_seen":"2026-04-07T05:34:43.769598Z","times_seen":5,"resource_available":false,"data":null}},"time_used":861,"timings":{"blocked":380,"dns":0,"connect":21,"send":0,"wait":33,"receive":0,"ssl":424},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/bitcoin.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/bitcoin.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 543\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":956,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e73cb1b222d746763a3d57ab92c94621","sha1":"5123d30407945bdb0d480562ef9c772355d3627f","sha256":"97b17effe940e91f0bd16f9bcb9816b304d7d12bbb192a0b33b6927944946458","sha512":"580fbc14a67558676750b29e5b5e7134dae452f3446862b7d7673a7e2c0802d3bd0e8062a26e945c39533eb5710ffd151f65cd2029d2a4ffb0dfec74314f27b3","ssdeep":"","tlshash":"181161de12749548a98f8d2cfb2bbc063012f1bcc52e9ce4aaae6c4870c2ae13110518","first_seen":"2023-04-15T18:12:28Z","last_seen":"2026-07-22T10:26:59.34655Z","times_seen":204,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/shiba-inu.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/shiba-inu.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2943\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9894,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e53ff3a90e8c46f183c2f76f5e56c725","sha1":"496b59dfa36d361399419112394dbfa2d638ed44","sha256":"e1718d832724f003ff97f4b2e5210ef48399cc992b00efca2ca3a17f75ccc908","sha512":"afd69f9c50b857827d1e73b101c64b058c2a537fa94272fa0041cf084ef3bb3d6ec2ee63c9db2a91252bc807374dd0821d9436469590d7eb31f4e6bce2e5be6d","ssdeep":"192:u0x5yqAxbG8Nz+R4y42CMAAq79NzpdyjfLFtCmkdPc6lI1y:u0vVAhG8Nz6gMAH79NzpQLfNkdU6O0","tlshash":"61122f074388ebf8bda98228d51064d979d5ecdbe430f2d4bb6b1442c58c4d5a68c7fe","first_seen":"2023-05-22T20:26:51Z","last_seen":"2026-07-21T20:39:26.35486Z","times_seen":568,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/settings/website/fc860ef5-70ca-4b82-a131-bb43d4769063/prelude/?2026-2-4-13-14","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:48.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 10:11:33 GMT","end":"Mon, 20 Apr 2026 11:11:30 GMT"},"fingerprint":{"sha1":"CF:0C:FC:2F:34:74:7E:49:1E:7C:40:BB:59:F3:B6:C9:67:38:8A:6C","sha256":"FB:3B:C5:60:19:2B:8C:0C:EC:D7:A6:9A:D4:D3:E5:A4:A3:67:2B:44:09:99:21:44:6B:96:A0:65:53:27:D0:26"}}},"request":{"raw":"GET /settings/website/fc860ef5-70ca-4b82-a131-bb43d4769063/prelude/?2026-2-4-13-14 HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mercuryonlinefinance.com/\r\nOrigin: https://mercuryonlinefinance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 13:14:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=14400\r\ncross-origin-resource-policy: cross-origin\r\nexpires: Wed, 04 Mar 2026 17:14:48 GMT\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Mar 2026 13:14:48 GMT\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9d712565bbd0b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":299,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bf15e527a946c336f6c577521050f043","sha1":"a2ff5c47aa5c0dd49e918ecb7b3d5c76b6913301","sha256":"cb21d3c37fe0d31341a19cf0f2013b30b7ed10bc5da237d34ee65370e44380ed","sha512":"7d1e5a63021ad8bee659912fd8f2c83cb7f1cadd925393a3f6d577a68bfdc87452d4d361222894ce2698ac6dd91bc9228e7e2e2c0ca4d3cb6d18a308266482a6","ssdeep":"","tlshash":"87e08c9a069840705abc039e210db9ae60bf41af53a930bd988cec2d28312b91a36230","first_seen":"2026-03-04T13:15:17.516825Z","last_seen":"2026-03-04T13:37:46.355917Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.47.0","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.47.0 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 21:48:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4064\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21641,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21595)","md5":"343a9e8b53b8e6cfee45153dbc0cd711","sha1":"a6922f54dd0c5209f870d16495b026e1b1aac0fb","sha256":"71ef4851bd7779a1d1749d8a07b3a89db72a6d07ccf5f1504a298da847ca5024","sha512":"316e488b781ad9cf91cf6b4b7ca066e556a75ad2f9dc4607c09f05a785fc4113fff8e3a8e9394a728f3cddd7d842ae59de122ff62386fac74d7e83cba5c0936a","ssdeep":"192:A6N877iN3iCOy2bvGIdpJkhugk8/H6qiMs7HqnFTSZq7RXDlCdkgIYSMV:Ap7iNyqEpSk8/aq8uFucbrgIYJV","tlshash":"69a2d9e4e46923c87b32c413e744f64c64daf920cac99d59fa6f850c1de16a70686fb8","first_seen":"2026-02-02T11:00:17.509213Z","last_seen":"2026-07-24T16:05:57.123529Z","times_seen":15456,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/26455/large/aptos_round.png?1696525528","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:59:29 GMT","end":"Thu, 14 May 2026 16:57:50 GMT"},"fingerprint":{"sha1":"46:94:B7:6F:CE:F9:AB:87:E8:C9:D6:E3:32:37:0D:47:C9:79:37:38","sha256":"8B:3F:CF:AA:1F:57:3F:0B:D7:4E:84:70:69:3B:0D:C1:70:8A:86:B0:9A:53:F5:C6:EE:65:BF:3D:44:12:A9:E2"}}},"request":{"raw":"GET /coins/images/26455/large/aptos_round.png?1696525528 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 13437\r\nx-amz-id-2: vu/N75pUjdcAAbZGJqUv/rS5FzgFk0KRonLfGcakzUrcdtqyz0QYVJf5ix2g/A0yF12SXSMyoMs=\r\nx-amz-request-id: 2GY33DP8ZMFT1H0S\r\nlast-modified: Wed, 29 May 2024 02:46:39 GMT\r\netag: \"8fbef861691c8559d6ffdbb5a6dd3064\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: mVO._JPdhier3w3QM0F3I6vq0rhxmRo_\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nage: 1504\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nyAehIOC%2FUfEp%2B4K5NL1%2B2CoRiNrNgt8hiexGNz%2F75PIPGOGZpcDEhRGbQ53%2BbJySUaylr3zZO4xA0Q1DvxCd%2FJL1jxi1mnHshgQB142YXscTtBK5hQiK8M%3D\"}]}\r\ncf-ray: 9d71255d4d81516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13437,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"8fbef861691c8559d6ffdbb5a6dd3064","sha1":"c8c43879836b765eae7b98a24807e2d33f67e283","sha256":"b2f59284429eff5efc412328ff7946f5492169a67a67d7f89db9c766d5305217","sha512":"8961f55741aa04344071f66b3bc87e13075ea73ab7e70da790a4e034b1b7d573636d93c3232370d71db91853cf5b8f0e1cc39180ccb1afa5e65913dc8b53d16d","ssdeep":"384:UDvSBBj7fiA5/N+veMZj7+PSoA9Cun/1hwnL:avS/XfiU/IvB4Ut2nL","tlshash":"ed52c0a2bd4535528e592013d30fa5145f764f02cea145b473e425ca8efb13eb99dae0","first_seen":"2025-04-01T12:02:22.503919Z","last_seen":"2026-07-21T06:12:37.728356Z","times_seen":60,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 02 Mar 2026 21:48:45 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 38152\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":143709,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65279)","md5":"83e9b29f0086bba50d653f1cb8dedc3c","sha1":"f8f89387c9aca9d524bb638eae457d4659efca52","sha256":"2ac3af00c283c0b2ae6108fa83a2053e51274a2a812fb063916cbe19bc4f96b5","sha512":"c8018876ee96b4600ae32342ec6d21b452ad4109d605fb838f146b734de274ef5e37179567a2c67ec828dc1b673364637fc82e7dfe8f7adbb18e20555577160c","ssdeep":"3072:pJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/Yvr:pJLC4dkEUYnafpl9v8cIWybV4y+oGMMG","tlshash":"fce3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2023-03-14T09:12:04Z","last_seen":"2026-07-24T16:51:14.532851Z","times_seen":102043,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.5","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.35.5 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 02 Mar 2026 21:48:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10035\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31880,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31880), with no line terminators","md5":"ceb183b138eac316a5cb0741ec23696a","sha1":"c9fcfc71c8f7229d96289ba702eeffc7827bd7e9","sha256":"2464e81935f8e354704bfd7c9dc5b722b7c2c3456f325be881556bf351f762e0","sha512":"7fc177991c5640b9b0113881747c7af234e6c7cfdcd5ef6d4cb4e3e9b6823499183071a398c7e505b8796028200107ec83fe3194512cd6ba1809d4fa33ec7cfd","ssdeep":"768:D1c+6idHZRdPM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Glr:ZcURdPMMBOBjmFatJR8RjD8/xHVlEEnV","tlshash":"61e208523296e866069f48a3f0231119f3765dd9b80bf0d5b2bcdce6a471e877362b34","first_seen":"2025-10-21T21:24:49.242369Z","last_seen":"2026-07-24T16:44:17.53827Z","times_seen":70266,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 21 Oct 2025 07:14:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2119\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-07-24T16:52:45.605348Z","times_seen":199631,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:48.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 02 Mar 2026 21:48:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2511\r\ndate: Wed, 04 Mar 2026 13:14:48 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8481,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8481), with no line terminators","md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-07-24T16:52:14.340495Z","times_seen":144803,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/cardano.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/cardano.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1932\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3875,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a429378d9e8284334b85f3d77382503a","sha1":"e08fa81f52301d4e66ddf8d4fd370f9259b595c6","sha256":"db824768c06f9d2e7cfe0c361da4e67eb6106b9d962f4190068b778e7314894e","sha512":"2d98e739c8bb402739ee045d2423e08590d279dd5e74a9210199d2ea9b84081b65683f1948e3ecdfd548d32b0145d2cbb5f6e0cd891af0ea8dbd0531540618a0","ssdeep":"","tlshash":"3e8174c223a0e34dcdc8d55defb1a8d1121b606d75fb64ca9edf8b48204bd8dfa01844","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-07-23T14:12:00.615522Z","times_seen":290,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/uploads/2023/04/BANNER-Pre-employment-Background-Checks_-What-Do-They-Show-1.jpg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/BANNER-Pre-employment-Background-Checks_-What-Do-They-Show-1.jpg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/wp-content/uploads/elementor/css/post-958.css?ver=1772598951\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Mar 2026 21:42:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 169186\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":169186,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x833, components 3","md5":"63b6411cd3e277624ea1fb741db57dd3","sha1":"6453738238f17c324fdb5605457bff53d2a5b9c7","sha256":"554646ec57fb04e57d1d248f8e0f96b617a64eda02275dba2ce569497596d23a","sha512":"a2265b637070a80b5e982054a8dd7b90bb99c40e973e76a0ff154c7523ecbbd164e7376a18447c541ff19001232ffa96ff26de1268ac7aa02513128519a1a5c9","ssdeep":"3072:POG6qPV0cMLultWaJTZCY4azON1mbxL2x2VV3LGJv0rSsQxF7qdOMot8t:P76qN0IvTZ3OwxTV7Eds8WdOMotg","tlshash":"4af312d5afba6b66faef3c94c195432122081bb458c6fd1018cf4908db7151a9f4cabf","first_seen":"2026-03-04T13:15:17.533751Z","last_seen":"2026-03-04T13:37:46.286948Z","times_seen":4,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.35.1","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.35.1 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Feb 2026 10:21:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2623\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6248,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6204)","md5":"bcca4162426ebc5a6493fa8e031437b7","sha1":"c4c2eefec9d2dab14564503a39d731d497d69133","sha256":"f3f5488126e1c6bb29e31937c79985cc4820c58e277ac345bfb5cd7071a7f0c4","sha512":"7394048e92d30386f83300affba4f5081abbc7d3a2fe9981fda9b47b1b28b275e664396eac531ee3d7f55f71bb6e994a45b29737b340e25e542be4898d115947","ssdeep":"96:BifNg2SXdvjUq7VbocvCHHAiam4NBEPnh3CDjl2D/VTKV47YQGLo7cu8k2:IVNSXdvZVbocakNOPEDe/QOkQQbk2","tlshash":"c2d153980a589e2f26e13ad8b0976b701a3dd0723c19e991e651eddc18f8fd143da932","first_seen":"2026-02-11T15:12:19.188492Z","last_seen":"2026-07-24T16:05:57.169212Z","times_seen":14143,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/css/ccpw-icons.css?ver=2.6.2","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/css/ccpw-icons.css?ver=2.6.2 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 21:42:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1111\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3963,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"4944769602b1302d2c96405266eebdf8","sha1":"fa1d29a29c4e0b54183f401971754ee6905e6aca","sha256":"dbd83c39d32f880902c3c2aa86ea8b868acd2a6df39ed0e939d32e33e0c32c30","sha512":"9c23e01e9e9e9ef5781bbb1db08fb7d58337d2dd5e63543a3fda8ece06fef98ac806fe8e15eb7df67e77aaa7ed44534f9da21b35ea8b73649dafecb39e4449cc","ssdeep":"","tlshash":"18819be2c48424441778be516b83b1a05364f02ac6c1adc6f049966ceffe6e097c63ec","first_seen":"2025-07-03T21:29:46.177558Z","last_seen":"2026-05-24T03:48:28.652155Z","times_seen":28,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.5","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.35.5 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 02 Mar 2026 21:48:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2257\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5677,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5677), with no line terminators","md5":"883a3e2185da852f4ac19d9dfe07980b","sha1":"67320a1df0d605176054ca2ff86b18ad1caa96bb","sha256":"529e8e21ae7e2becebfc8b809e0137e68546d7c9a1b2bde77755897878590406","sha512":"978f820b79fda69e8eb814b078199f262b71882e762fbedc4fb917182a6636cfdf5e03f8e43f2c7cf0258d5a616d03784db406cd2c398024f546b8c41e4bbdfb","ssdeep":"96:+6sN0Z9Z4JfrjqyWiNDgUl8OWZp5Rm4leNzwVeLyVU2j2KBKGarNcl8/2:JsNGyrjiiNg5RmH0IW9v7G/2","tlshash":"e6c163981a54fd2b31e139d8e01ba734252ec0373c1af981fa31eced64e4ed187aa531","first_seen":"2026-01-27T11:31:27.113729Z","last_seen":"2026-07-24T16:05:57.099271Z","times_seen":12930,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.35.5","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.35.5 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 21:48:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6613\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54666,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54666), with no line terminators","md5":"4fb5f7fc5e41f736ec0527b162519d52","sha1":"33697641c940c68153509fa7c9d7d0c3c760ce2d","sha256":"0a5d398672e25dc7f020f69df92a985481b248a60e301fee232d0c8afd648dc5","sha512":"5da1e9708bfdbd38beb7cee98d806ebc84b4d8337ce638a363d28461ebd9fda5189618bfa62167a5261ec2e98b02cb88ee4ff7bd5ecdd2d2facd480965e0c7a6","ssdeep":"384:Ws4J/8DEksCoI+SBQYO22/RmRs5Cz9TQXPTkvmGkvmCFldtraiIks05ArOk:dFLh5mP3RbrlDdps05Xk","tlshash":"17330da23d13b269226f442b82c7364c526499c1ee0375d9f944c523dafece63b36c5b","first_seen":"2026-01-29T13:38:24.653388Z","last_seen":"2026-07-24T16:51:14.512259Z","times_seen":66481,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/dogecoin.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/dogecoin.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 417\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":741,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c7fd4d5d6fc9611bbd97ec0708b8105d","sha1":"293390df4e3843aa152c5a996196319464b04e85","sha256":"e4a695edf1bec3db09ae9718342c7c203a681bc4f3579b39ed8f97a335b743dd","sha512":"14700741b93f37f300276ed848f365ab74c24f9ee3ce61e5fb1456878fee802387856d44eb70e4a79241754503e4797c84d904c6cd0efd4d4db5999d6911e357","ssdeep":"","tlshash":"520125d79a1ce1cc0caf4934bf773088165b7b9f950a49e2518d4e0df4821d8e401e54","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-07-22T10:26:59.236045Z","times_seen":102,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/hedera-hashgraph.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/hedera-hashgraph.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 286\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":486,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63193be5e5ba9681eb05d8c8bebea817","sha1":"3c6e79177691310bbb6623d1ebf5decc5d794c8f","sha256":"ad4dfab8f78b849c74d6e5942afa1e9186334fad0dddd6f3dff8e27692ce3cca","sha512":"f75bcc1954d88313ed9f72ccddaf5ca8b1c48967bc618934db4f3e03a196efb0540990fa9a4c4512b972f3880a0762c54b9736e102d59d76b066255a283dea10","ssdeep":"","tlshash":"33f09e7a538dae64301283cebdf0ee105479709b438808e8e1d0342d50025e2ff6085b","first_seen":"2023-06-18T17:30:26Z","last_seen":"2026-07-22T10:26:59.261566Z","times_seen":38,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/immutable-x.png","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/immutable-x.png HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 02 Mar 2026 21:42:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 45776\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":45776,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"de70910e5a0b7e12bfe361617ec5f0ce","sha1":"cd77422f0df4a7050aba895743cd78c1ae6efa2a","sha256":"2f31b5466128a8e9d63abae19b5b465148c542096bd466c04bf919f6445e20c6","sha512":"511c6c99d113dfb9f77f3eaafda1c76a22c5bc1b5522f05641ee78668f8e9d607a1c9b834623a31d9bebb814d6cac2a588b057b1514ad732daa6d022295a4693","ssdeep":"768:AFh2QhyrTGX5OJVlONHzP90yTonS4rkn3AbF6rFoDiD0OCbSdUMzyPG/H6l:AFh7hTJ6fOpl0dS4rsAF6xoDMCbuzg/","tlshash":"e62301f533d6c44b631407b4bfbcf64d3c55984bb162ab01404be232ade23bc692a239","first_seen":"2023-05-21T22:41:18Z","last_seen":"2026-03-04T13:37:46.338107Z","times_seen":13,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 11 Aug 2023 18:18:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1687\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5520,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4358)","md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-07-24T16:51:14.442419Z","times_seen":199350,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 28 Aug 2023 17:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-24T16:51:14.503279Z","times_seen":988941,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coin-images.coingecko.com/coins/images/33566/large/dogwifhat.jpg?1702499428","fqdn":"coin-images.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.21.63.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coin-images.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 15:59:29 GMT","end":"Thu, 14 May 2026 16:57:50 GMT"},"fingerprint":{"sha1":"46:94:B7:6F:CE:F9:AB:87:E8:C9:D6:E3:32:37:0D:47:C9:79:37:38","sha256":"8B:3F:CF:AA:1F:57:3F:0B:D7:4E:84:70:69:3B:0D:C1:70:8A:86:B0:9A:53:F5:C6:EE:65:BF:3D:44:12:A9:E2"}}},"request":{"raw":"GET /coins/images/33566/large/dogwifhat.jpg?1702499428 HTTP/1.1\r\nHost: coin-images.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7276\r\nx-amz-id-2: 4Bz/2YO6yWbasCNYTUgfi8ZUGKFsMC8CwEAqAfE0Ib/pJwiNqe/rQAMhe4gFxR+eaKiYrhx8OPE=\r\nx-amz-request-id: M7TZ5012MPR09DC6\r\nlast-modified: Wed, 29 May 2024 02:53:43 GMT\r\netag: \"d5a951396436624d3e89a0a1deb0784c\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: A82Js4MhasK.jgFzTraFVUT0tzHcLQAc\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MRsESq4QbsFgw%2Bf29aMUI4wB6QU0A59YVue6OjiaTOMVq3T0O5uXCd9k7X70s0tmrkms8puOyE8PlA6H97aJbb4V9I%2FodpDw%2By84EW%2FR01tVObIhs6%2Fhal0%3D\"}]}\r\nserver: cloudflare\r\ncf-bgj: h2pri,imgq:85\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1;i=?0,cf-chb=(258;u=3;i=?0 1344;u=5;i=?0 4216;u=6;i=?0)\r\ncf-polished: ok, orig_size=7589\r\nage: 1155\r\ncf-cache-status: HIT\r\ncf-ray: 9d71255d1d0d516a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7276,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 250x250, components 3","md5":"55befd17cc47d51577cdc3e13a5e1278","sha1":"6528af8589aa257c24f13a8f81437844c9c78c13","sha256":"cd4b713728374ba3be4b6aa52486f043cdac7a846cf9030ae7970b8ee485c3d7","sha512":"29c316d0e4753510da38fb39b220f7ed0ab87a4e9c763f6236d7b253a37f4e836602b2b500806f506f1db1760389b53f8dc78d5fc10c454ae72620219b203951","ssdeep":"192:aNvZEx029oR1U/ueyapS6ri6KqvhqRvZ/vQDsL8C:aNv2x0lHUJ5vi6lvsfvQAAC","tlshash":"b4e1be6af79353bffc204f70eac33ea855585146454c9d0cdf4d743019d42036aa25ce","first_seen":"2026-03-04T13:15:17.551325Z","last_seen":"2026-03-11T02:34:41.207074Z","times_seen":6,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":5,"connect":10,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mercuryonlinefinance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 03 Mar 2026 17:21:36 GMT\r\nexpires: Wed, 03 Mar 2027 17:21:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 71592\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-07-24T16:51:44.191306Z","times_seen":286947,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":119,"dns":1,"connect":25,"send":0,"wait":10,"receive":1,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/settings/website/fc860ef5-70ca-4b82-a131-bb43d4769063/?1682228543830","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:49.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 10:11:33 GMT","end":"Mon, 20 Apr 2026 11:11:30 GMT"},"fingerprint":{"sha1":"CF:0C:FC:2F:34:74:7E:49:1E:7C:40:BB:59:F3:B6:C9:67:38:8A:6C","sha256":"FB:3B:C5:60:19:2B:8C:0C:EC:D7:A6:9A:D4:D3:E5:A4:A3:67:2B:44:09:99:21:44:6B:96:A0:65:53:27:D0:26"}}},"request":{"raw":"GET /settings/website/fc860ef5-70ca-4b82-a131-bb43d4769063/?1682228543830 HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mercuryonlinefinance.com/\r\nOrigin: https://mercuryonlinefinance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 13:14:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=14400\r\ncross-origin-resource-policy: cross-origin\r\nexpires: Wed, 04 Mar 2026 17:14:49 GMT\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Mar 2026 13:10:42 GMT\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9d712569cc6eb7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1035,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5201ed4b9ec2080e74cbadda3ffd7887","sha1":"c70d05390ae2dc1eb82e451bfdf8eeb440098a18","sha256":"6fd62e2860b9c5322ec7c0455414ce0e7dd4cf22c0d485c77b2c22dcc0e2bae7","sha512":"57785ae734e6fb6a2d49f5d9a41eed04bc6d6d85bd73bc128cd3e85952fa7e384ab13a9e59c4a4f5810c31af708918f94d28c123d388e22dd48dbc66f4db5488","ssdeep":"","tlshash":"8a11ab0e99a508bae6a89345e8467e460aad10a75414b850f59c8e1c23f77d7b3b311b","first_seen":"2026-03-04T13:15:17.555198Z","last_seen":"2026-03-04T13:37:46.273474Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/fetch-ai.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/fetch-ai.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 289\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":491,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63cb915d93da9b8b92d1739f0d886c8e","sha1":"f7f721145469ec39622b540d7e6a29ecb03123f1","sha256":"79c1c91658779ee9496607db5d82148b75afdf488ea11acfa4ded9936139eb88","sha512":"969dcc6beab199a80fa51b98f070a782ea4f66062cd6d64ac339bebb7ced7ebb00f1e5c08d806a4281018ac8b38dab6ff2385929f2eecaafd96318db54a36722","ssdeep":"","tlshash":"5cf0dc6b5929ca8084400ffcf5d0fd0843325163a1cd02f078cf02ac712d9c2622e1d7","first_seen":"2023-10-25T04:54:42Z","last_seen":"2026-03-28T14:06:10.894372Z","times_seen":10,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.47.0","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.47.0 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.47.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 02 Mar 2026 21:48:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 105172\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":105172,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105172, version 1.0","md5":"4e3e874a33e8bd2cd2332e86f50eb764","sha1":"c0c5caa14b38cc7bdb2ae0d8e9013efc7ec7d6d5","sha256":"796d113e380bfefdda09fd8c6670cd6b1cfa3417da09db1b078126d54889d8f9","sha512":"c98a1fb2df8dd2684c11eb35759f5db72dccf3c4ce58f1ad1ae939ac3f9ad0100ed405fa8f3dd41b002c8b5db216abc8600b460ad871965f97be38f8ca19947c","ssdeep":"1536:uE6Blm/2M9ipXCiSsaL+R/zGuhT4i1FX4+sOO9S/gjAvg62Vkhwc8RZN1kcK5:h6PpXnayRLGAn49OO9kgFBRZN1W","tlshash":"67a3127ef0b2a41a8705ca820ce6db41ffb4067bd57a1ffde447ca1a0e39a5020618d6","first_seen":"2026-02-02T11:11:53.988568Z","last_seen":"2026-07-24T14:17:55.321134Z","times_seen":5658,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/uploads/2026/03/cropped-images-10-1-32x32.jpeg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:48.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/uploads/2026/03/cropped-images-10-1-32x32.jpeg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Mar 2026 21:54:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 666\r\ndate: Wed, 04 Mar 2026 13:14:48 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":666,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3","md5":"07bb53678cc0b49540b1371d8bb695b6","sha1":"71cc8dcded9bfa61005aef7cebac8b0699726b95","sha256":"a67b590aa5eb1dfcff369fdf0360c5e0147248ec1a16827fe12bcbd4f9bc6c66","sha512":"bc71ef28a252945bd7cedaafbdd3c1e6146d3703e25ce46ddcc34952388327fa014334833bb5489d010cd40560956fb8d6df4e677cc8597d9203374d23ce372f","ssdeep":"","tlshash":"0b01471f190dc545ccd0cc795523f3149346f629e82bd9d84131f3408e224cefc10384","first_seen":"2026-03-04T13:15:17.562065Z","last_seen":"2026-03-04T13:37:46.291245Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/ethereum.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/ethereum.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 253\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":528,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"18708d3e3f54116e2ea639fdd56dd6c5","sha1":"44ebb67fb9dfdad6fca084c0e14664ce0336547e","sha256":"c04105233b339af2c50fb99dd7ad33b5972ed58c48ff26c4ea2120fedc52ce19","sha512":"be845835d88146d794573785c81335c15ee837d930d6e191da7713ac84b3658c129160f22f5a396dbd5f59b88463918a3463ae1c8baf170dbfdf773f1cb9fccc","ssdeep":"","tlshash":"adf08be859287454a82f1ffcd67ca8e330a371f40b3d0ce9b1801512e94995b5ce2784","first_seen":"2023-04-26T17:00:46Z","last_seen":"2026-07-23T07:59:31.823834Z","times_seen":248,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/leo-token.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/leo-token.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:41:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1118\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3075,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7952199e10092bf6da15dee3ddc7d35d","sha1":"62e9e09e387c4229e0f67e5d22026e8978d2c8b8","sha256":"ceed3845d96cbfc81a7cf8b9c61760dad2095d30f5087603cfe3f7d753b406e7","sha512":"0807687be7ca19977fe0be99d9c1cb5ac7f7df087a1fbdc20cfb2f80794708d796f8190ef304937bb62fdd4f79f3f0fe28651ea33736b74e8551910f6f431a07","ssdeep":"","tlshash":"c5516b87e160df80acc3c9aa8b94d4d44197606d8cb5cce299db9b3c3d5f94ab63c894","first_seen":"2023-05-22T14:37:33Z","last_seen":"2026-07-22T10:26:59.280693Z","times_seen":28,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/css/ccpw-styles.css?ver=2.6.2","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/css/ccpw-styles.css?ver=2.6.2 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 21:42:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1642\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8080,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"eec1db13d8b11c339f83aa762af13e11","sha1":"4f09427d2dff201e4753d7d146209079c08b7f8e","sha256":"8f270e522cb0c9e69d5d8922377101ab639607463d1471b4e133888516653da1","sha512":"afda8929666c6d7f5920427c8cbddc3d771b48b3467f028eca8c2b0b2441e8504cd4bead9bb9ba7e62d50f4a0761f6e954808460e8add2d76dab143b0ee42a95","ssdeep":"192:5S5Th/MsBhio7kXgUkpO4kpyPPkpYtzHtGA8IB89o+QUQ291xeUcB+mz9luYOr5j:KMsB7FUR4WiWQGpmko+62OpM","tlshash":"def1f258eb403d65d23d9f28eff3225cfd9901b75b8701aa789da109dbe640ca520fe1","first_seen":"2023-04-18T04:49:42Z","last_seen":"2026-05-24T03:48:28.640426Z","times_seen":52,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.195","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mercuryonlinefinance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Feb 2026 19:55:26 GMT\r\nexpires: Thu, 25 Feb 2027 19:55:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nage: 580762\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-07-24T16:51:44.198141Z","times_seen":281918,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":64,"dns":3,"connect":21,"send":0,"wait":8,"receive":3,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/elementor-pro/assets/js/slides.c0029640cbdb48199471.bundle.min.js","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:48.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/slides.c0029640cbdb48199471.bundle.min.js HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:48 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 11 Feb 2026 10:21:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1362\r\ndate: Wed, 04 Mar 2026 13:14:48 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3926,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3882)","md5":"1696ab7674d7aebdaf13ab1a4a7770e5","sha1":"0086840a013722550a9a968a0656fdb2187c6846","sha256":"957ed5554e160536d559e7a0afa9297cd69c11c4053de9abcff2ffc39e0730bd","sha512":"9a3793c060da9ff135b4662b4c33755f861112b0b009567f935cbb1ea0f5b7f3e653666f148393e008584e63744cadedca9b2d596d3c44752fa0741e3a1165df","ssdeep":"","tlshash":"5c81878230413c3719ef89a7301684619fa107c47902b2ee79e9889ed0bb996136f7f5","first_seen":"2026-02-12T06:14:15.540255Z","last_seen":"2026-07-24T12:56:41.958707Z","times_seen":827,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/javascripts/en_default_6e82e2f.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:49.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 10:11:33 GMT","end":"Mon, 20 Apr 2026 11:11:30 GMT"},"fingerprint":{"sha1":"CF:0C:FC:2F:34:74:7E:49:1E:7C:40:BB:59:F3:B6:C9:67:38:8A:6C","sha256":"FB:3B:C5:60:19:2B:8C:0C:EC:D7:A6:9A:D4:D3:E5:A4:A3:67:2B:44:09:99:21:44:6B:96:A0:65:53:27:D0:26"}}},"request":{"raw":"GET /static/javascripts/en_default_6e82e2f.js HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mercuryonlinefinance.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://client.crisp.chat/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Mar 2026 13:14:49 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"69a6e477-3785\"\r\nexpires: Sat, 01 Mar 2036 13:14:49 GMT\r\nlast-modified: Tue, 03 Mar 2026 13:39:03 GMT\r\nvary: Accept-Encoding\r\nage: 48594\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9d71256a4d6bb7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14213,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14119)","md5":"b5dba00db99c05d364837e2c402eca29","sha1":"5b3c70249c0481f42c79005fada3e8f1adcd6922","sha256":"464ecefa27355e15ba392fa6937a098dea82dbeae01874a007c3440fe8fb25a4","sha512":"2302a00d715ebab42b428f52fe0a110e9a852b5c4ef3cf12d85f78c157e0ad5effeb3c1b6e20e8499a0edec1c657189e459c90290ce9b879e752781b4f739345","ssdeep":"192:YFmXDS8ajwhwPteE2WZXikEeMeTAFGySAU1RrUWYGfu7nOmrY2FYXC+LvvKTzHrO:YFmX28oXikEeMeYGySfRrLzmCQrO","tlshash":"2e52a60eef36ce7b02774b83b084b6124eb111b106d0687ed45d497d02a4ec9b6abf4d","first_seen":"2026-03-03T16:23:17.028431Z","last_seen":"2026-03-04T19:20:54.626Z","times_seen":21,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=4.12.3","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=4.12.3 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Mar 2026 21:43:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 359\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3501,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3501), with no line terminators","md5":"f9fe7d6abdf0b467614fd13d77fb9c9c","sha1":"507858c11804e060004cf34f84f8305595bd23bb","sha256":"5615ca8a377672f9a922f76bc7d979e3abe1312657bb27ab620833f1afd50f94","sha512":"ad3f5d15a253975e93d7f310eaec41b07c7ff9e41aa6ffce7d3984cab3d12140aef47b87df84bc0d2013e9085ec43eabb9ed955bed82dccd640a6cce1ac1b317","ssdeep":"","tlshash":"cb7183c99fe002751152e37ad4aec11c97b88c93abde546933f91a8e4b1438943f3d6b","first_seen":"2023-12-12T15:58:33Z","last_seen":"2026-07-24T14:03:04.764766Z","times_seen":6438,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/tron.svg","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-content/plugins/cryptocurrency-price-ticker-widget/assets/coin-logos/tron.svg HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 02 Mar 2026 21:42:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 283\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":429,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e61dfd0a444ac582c5abf4c384c4b5b","sha1":"f887034ce8eaf887b3c531c6ce50e1317009885b","sha256":"5b6b648320b6e99b8e60d447271f753dc9989183e3a07f0300ee44d0743130f0","sha512":"b64e3404dd34b9ece56f39bbb1cb3d706bfbe5637e79cc3a13b5d88880c97a53f10af2a23f3f864615fe5ca1bd8623a0942e6a827d99804d11673a93b7ffe376","ssdeep":"","tlshash":"06e08a90ac742706c9cece0808187470304da09ddd0c6dfc71e02704e1511c71805bfc","first_seen":"2023-05-09T05:08:14Z","last_seen":"2026-07-23T16:39:23.276943Z","times_seen":4192,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mercuryonlinefinance.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"mercuryonlinefinance.com","domain":"mercuryonlinefinance.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mercuryonlinefinance.com/","date":"2026-03-04T13:14:47.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.mercuryonlinefinance.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 19:05:25 GMT","end":"Sun, 31 May 2026 19:05:24 GMT"},"fingerprint":{"sha1":"AF:AF:76:23:6D:75:63:7D:5F:4E:03:81:30:CC:9B:F7:17:EF:38:A5","sha256":"91:2E:6F:A0:62:CA:A2:BB:5C:53:06:B3:DF:84:9E:2C:63:A0:87:4B:42:6F:9E:63:F1:DE:01:5E:2C:D0:2D:35"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: mercuryonlinefinance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mercuryonlinefinance.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public\r\nexpires: Thu, 04 Mar 2027 13:14:47 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 06 Feb 2025 17:27:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6812\r\ndate: Wed, 04 Mar 2026 13:14:47 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-07-24T16:51:14.500438Z","times_seen":331899,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"mercuryonlinefinance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}