{"report_id":"c319c13b-ea08-4c91-9e66-0bcd84f2cc94","version":6,"status":"done","tags":[],"date":"2026-01-03T06:01:07Z","url":{"schema":"http","addr":"ficusperth.com/","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ficusperth.com/","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"title":"Top Australian Online Casinos for Real Money Gaming | PayID Pokies","dom":{"size":159731,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16879)","md5":"11adba156f12c35d37f576d6a5d0cc41","sha1":"1083ec20f8a9ae274477175afc8c9eb387958fa4","sha256":"9d81e66ff8d704c4c406c21d79dd465430b3410355f345954fc75a54ee961da7","sha512":"1bc630a3d4085fcc7c48051ee364cf2fb15ccda5fef5e1b8aa616415b9a0cfa0b6738bb6fb79e41165ae5f033b39a0c3ccf31a8c237482dab6bd58fa2237c6f3","ssdeep":"3072:f8qclkxpP2rdmTWWBZobwemlUVugamMSyzEK3E97wPOV4CKZobFemlUVugamebvr:f7clkxedxWBZobwemlUVugamhIEkE9su","tlshash":"12f30a51a3b414f536bf833a69467345a766d801cb0967e4f0f6c29cb6cc9a906f3b0b","dom_hash":"domhashf548cf97b6fabdbf3a2deb859a937de6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ficusperth.com/","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-07T06:01:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"tq2tmylv9quqkoe"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ficusperth.com","ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":21,"request_count":21,"received_data":989885,"sent_data":10446,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:26.3","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2025-12-29T00:27:00.576592Z","alert_count":0,"request_count":5,"received_data":10732,"sent_data":2270,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ficusperth.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-17T07:14:15.633463Z","times_seen":718705,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-17T07:14:15.645576Z","times_seen":668274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-17T07:14:15.64495Z","times_seen":151604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-content/themes/medicare-fse/assets/js/custom.min.js?ver=1.0.3","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"adfa4bf7b90dd43cbe0575a27e3897a4","sha1":"0466e0bc84088c53c1ea561b46cd695080eeae66","sha256":"fa7b65f2253788284f137a4802726333ea06b5ef09822599a41dea3d9cb71b18","sha512":"6e3cdbad61c6780ad98075781a9d80acc98bcaf99c954667c77db6e0b94c531938717f254dd46aa05b2182c643e7340e411580abe547eafd7280ad49fa64fcce","ssdeep":"","tlshash":"10d0a51d705495d955ee5034853f776c5427397ff50442c150114cfe343c5bf5551d55","size":235,"data":"","first_seen":"2025-07-17T01:13:22.433644Z","last_seen":"2026-01-03T06:01:14.286139Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-17T07:14:47.230408Z","times_seen":305229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"61e9f6f58704109f3e5efcd05cba4702","sha1":"18547256538e683310804a12799df9a06129fdf2","sha256":"fa6d9588aee55ef143d06a39e21b382c3c6dd981357ea0ee4eab8f72a72d8095","sha512":"3581b0ddb1076b3e2b1e8c16daa780e2d6aee4bd4166ac46ef8dfcbd3bc051b38fe0f52bec2642642f5502de526d354b8826253586bb21d7dcede2080216b41f","ssdeep":"96:UvcHtHRA5NTDXnM2E0+1lfYsPHgRhR3SO:hN0LE0+1lfYsvSx","tlshash":"77a1869ae7763cdbb2f900f2697e0d47eb614435d6c8d438c9bea3141cb5893c274a46","size":4837,"data":"","first_seen":"2026-01-03T06:01:14.291097Z","last_seen":"2026-01-03T06:01:14.291097Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-block-template-skip-link-js-after","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f75f4dc8602b1e63a270ba24fd61eb5","sha1":"d6b0780abcc9e42426f0be777651d128f65861ae","sha256":"b41352af4ffe3dec340d5e9c008aeff0ac39c2f48bbd16799eb0cac9a62d5989","sha512":"79b372439572d01af68ef2808e56765ffd68c7799f1e42c763837868a0e3dbe4fa6fbef5309bfd0b9702b63fa52d22f4f58a9646e11d46f6b8388eed5e05bf90","ssdeep":"","tlshash":"eb5195c4f21506f401662a39c4341bc9e2b92998f6db1ca7cc0c8c2cb1b256f46b6f7e","size":2924,"data":"","first_seen":"2026-01-03T06:01:14.292038Z","last_seen":"2026-03-01T01:22:25.760883Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"ficusperth.com/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:44.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210 HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Tue, 28 Oct 2025 09:26:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"69008c58-d49\"\r\nexpires: Mon, 02 Feb 2026 06:00:44 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wWevKy5CWMZjA4VTzGNxk5E9sGSX99k994I8jUlZogW50AgMHpkTS9A%2F3nL5vIGUgBJ%2BxupnOEAm4SEzIhWr8Mi1jajjdjYUhMk%2FdyD5\"}]}\r\ncf-ray: 9b80470ff8b549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3401,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3401), with no line terminators","md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-04-17T07:48:36.671289Z","times_seen":7737,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:45.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/wp-content/fonts/0e3fd676e1a7aaf161ccfefc2e2ee124.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40128\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 09:21:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69451907-9cc0\"\r\nexpires: Mon, 02 Feb 2026 06:00:45 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hCJRxKpMH44%2Br6mqYEx5hahLf7PNz1ByV%2BbBMZfrPw5CGuygkewmGmXgyEIwE%2FrFDiI3bZX0v4nJ3XRM5gH8Mrpaddk4ew%2BB5A%2BJMdHI\"}]}\r\ncf-ray: 9b804711a9f449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-17T07:12:49.595832Z","times_seen":742943,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":235,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:45.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 11:44:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"690ddba2-58ea\"\r\nexpires: Mon, 02 Feb 2026 06:00:45 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w214pKyvE4Ucj1IA27p7BVeSR%2BWpJtyaIzLGL1FKDhHCrKv42LzuVGjbuUfCudary8IGJGgldedQ3FFpK2rXF6wvHC0CHthwMgHurI3t\"}]}\r\ncf-ray: 9b804711da1649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-17T07:14:15.64495Z","times_seen":151604,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f911.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:45.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f911.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 06:00:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:25:34 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 11\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2186,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd35e632b9aac425f17ad59c85ecf9eb","sha1":"eabac9a5546c87b3512bac62efe1331a5dfc5f68","sha256":"cf3cee22c8db46b0bb32815b28fa6b4582bc7d92150d49cf62ae4260979bc718","sha512":"b04cf88447ac22cbc658fb3f175bbc3e8c8b0cc04cef9442ffc7ea9fb672f02a4e5025fca06c37743ffa6695d2aa4ddf76def3b2bc2f7eb41751c8ccfdb5bcc3","ssdeep":"","tlshash":"724174d23360b35d5bdfd2cd7f347961620790ead4b6d88952a9cb089497cc8f5c8884","first_seen":"2023-05-22T02:40:48Z","last_seen":"2026-04-12T22:41:51.743664Z","times_seen":175,"resource_available":false,"data":null}},"time_used":6556,"timings":{"blocked":3273,"dns":0,"connect":9,"send":0,"wait":8,"receive":0,"ssl":3265},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f31f.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:45.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f31f.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 06:00:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:21:38 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 11\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1288,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"030fc6691abd2ab36c1d90407e02505e","sha1":"2894cf6b8f4215efed18481537600c31e65bc3cb","sha256":"417f2724229cce0e9f529aab4634f23e7d2a2fc517ac7c2dd63962f529759d2d","sha512":"cfedcb9e94dfa4c7be48c954d5b8034cc632c54692a5c3424f53460d5aa80d5a37faa9346b560b678dd133ed4f4acd3496813b125c85a75faacd22bd8de1c22b","ssdeep":"","tlshash":"962142dd0778f3c866d65adeffbead86240df0bac97600d5a0ea89186093585f201820","first_seen":"2023-04-16T15:02:53Z","last_seen":"2026-04-17T07:34:44.182081Z","times_seen":2394,"resource_available":false,"data":null}},"time_used":6508,"timings":{"blocked":3249,"dns":0,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3240},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-content/uploads/2025/12/31-300x300.png","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:45.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/31-300x300.png HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 29811\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 09:21:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69451933-7473\"\r\nexpires: Mon, 02 Feb 2026 06:00:46 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nxtx8TTVOWf1cpBR5rttrpGYd1B73NkHqPwzPP%2BI979dfRzUbGTg6xCVTKeJgZ4YLT48p9k%2BTjyI4uqvLVquE9TgVmB3uLb9mX%2FB2tzr\"}]}\r\ncf-ray: 9b8047172ee649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29811,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"5e417913a3b5368397970aecfa5af3b2","sha1":"26ae2a71341c97dfe2ec09e2ea6bb3910dfcf3b1","sha256":"3e35ddc921c77c0b3c70229ca9e52442269bc0d4769005f5d3754686c30f0173","sha512":"4c00f4c05c769546c30a422687bb9cc60f41bf626ca44c42530caf9ec8d7b0613625ec2a59698eaae58c132c151abdf69054c227d85813e5dde353ca0159794d","ssdeep":"768:IdZ1S69EYttRS7hCwkHNfDZg8zTogaktOyBvIuclH:E1S5n1CPNbZx4gXtnB8H","tlshash":"9ed2e12fffe07b811a637914eb460d84b857c5c7898b7c15e72b4ab3c121237185ee69","first_seen":"2026-01-03T06:01:14.268465Z","last_seen":"2026-01-03T06:01:14.268465Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:45.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /wp-content/fonts/roboto/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/wp-content/fonts/0e3fd676e1a7aaf161ccfefc2e2ee124.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40128\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 09:21:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69451907-9cc0\"\r\nexpires: Mon, 02 Feb 2026 06:00:45 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PU6a6Y0FvHUrWO4hkIZqtPurVjiloEZylH2LkOZWqAGytw0gM5Nka1Q6eecl6np3ruQQUhBfJBa6G7I8fj1fCFe1%2FGpz%2FngI5LNx2ktI\"}]}\r\ncf-ray: 9b80471199eb49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-17T07:12:49.595832Z","times_seen":742943,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-content/fonts/0e3fd676e1a7aaf161ccfefc2e2ee124.css","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:44.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /wp-content/fonts/0e3fd676e1a7aaf161ccfefc2e2ee124.css HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:44 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 09:21:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"69451907-16566\"\r\nexpires: Mon, 02 Feb 2026 06:00:44 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mxwSD3anjSLRru3XTUa12qLS9hWf3hBstMbPlUocNt4q91uZ7nV0kdDV7pZ7ThpeqIA%2Blai1obzZl5DYypOimopCx02gbuvT5q84HS8s\"}]}\r\ncf-ray: 9b80470f483849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91494,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"9bca56ee5205bb25d3601c17ce168ecd","sha1":"22fef242286d071e55762353b7448822d644b45d","sha256":"ff92573505519a5b08d81aa36e6fb0040e42b58c93dc0321e06cb7d413f48a99","sha512":"ed307f10bfc4ea98b2eec2107aa6ca077a98f4c231360069a2f69081385c1b837a2f040dbc9612fc2badba0c522d10441744ce1c159c6f473a74c15509de53e1","ssdeep":"384:lJpWHzJwLN5qnHJEmSKHeOzomGd2ord5BWiunW4+dm+uzmkZuM3nfznknFnhny4d:w8frdouM3LkFhy4zLc8GaT5hQCWqs2","tlshash":"d9933fa0082b1600db835cd223ce7f36ed5e6255f045d1b9affe096aacdbc2153a572d","first_seen":"2026-01-03T06:01:14.269801Z","last_seen":"2026-01-03T06:01:14.269801Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:44.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Aug 2023 14:14:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"64ecabc0-15601\"\r\nexpires: Mon, 02 Feb 2026 06:00:44 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Ly%2B84AEaKXmWNYCxSQ6GkmQ%2FWoR1ix%2FOboigjktnPZE2YcgDFusSs%2FpIeI%2BIZXwfZx9HA7UFbhF3T273QgS84%2Bv9Rkt8EtdXJZ5xwJw\"}]}\r\ncf-ray: 9b80470f483b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-17T07:14:15.633463Z","times_seen":718705,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:44.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 09 Jun 2023 02:49:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"64829334-3509\"\r\nexpires: Mon, 02 Feb 2026 06:00:44 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RC7%2F1twH7XU27wImHjbUaiAqq7Oqb7D5SSXNr0rvhfntrO83b9vaUGCCtU7m4OFnaZsZqHnQfN%2FVtQTfyf4QYH7FZYYR%2BALNz4ujT3%2Fz\"}]}\r\ncf-ray: 9b80470f483c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-17T07:14:15.645576Z","times_seen":668274,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-content/uploads/2025/12/real-money-pokies-online-why-australian-1766137421-6618.webp","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:44.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/real-money-pokies-online-why-australian-1766137421-6618.webp HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 135786\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 09:43:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69451e4d-2126a\"\r\nexpires: Mon, 02 Feb 2026 06:00:44 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b5OXWicN7OgZqxOQON8eqnRy6VDE3xwzJ762fn3d6HAjxsAar2iGkDXtYZ5CMEK1UBwqI8XA%2B%2FTfa5ClR5nHokAEpXdQZrrt0ndHhC%2BC\"}]}\r\ncf-ray: 9b80470f684c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135786,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3d80d04715039ef02b1e8ea238f20ad2","sha1":"55af050b8c2fa3168b8e71e7e6f67145cddb4eb0","sha256":"7d8aa4b4bfc162f2a2119d0a6b741f611cbff6819945567c75ca960ada6edf94","sha512":"4015d0bef437fdbe0c147415e90b56276a54f82e9429cf78e373955a09d069e0d8bd658f1c79e189d07185b7ff7de11f89e9f8eaa30f1199a6d262610c9fa1df","ssdeep":"3072:XWlMFHqXurqBUgMl1i23LTJj65jAtTKE7TW3Kxg+vi79j:muFHSuuYl1J3fJ25j8TKUq6gCiN","tlshash":"1bd31219b63d4aa9fa362d362324ada5bce54c387fd350602584d8f527107cb0b961ff","first_seen":"2026-01-03T06:01:14.274067Z","last_seen":"2026-01-03T06:01:14.274067Z","times_seen":1,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":349,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-content/fonts/poppins/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:45.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /wp-content/fonts/poppins/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/wp-content/fonts/0e3fd676e1a7aaf161ccfefc2e2ee124.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7884\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 09:21:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69451900-1ecc\"\r\nexpires: Mon, 02 Feb 2026 06:00:45 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FytyOklPupMYITDAfg%2B0LIFLaPQu6uouk%2FmA4E6%2BHe%2Brh0pSlBNBctl7UxSrRFttmZTzNkFPSggrPqGnmdksx8cReDfqtljxx9Q9LU1F\"}]}\r\ncf-ray: 9b80471199ea49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-17T07:16:08.063957Z","times_seen":305434,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f482.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:45.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f482.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 06:00:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:25:34 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 11\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2515,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"09e7fe5dff0fb3c974363e259d09dca3","sha1":"308ae994681b80c3fef0d98b4ef4f2bbb10e0451","sha256":"ff42eb41301a722761d2fb6b322a8786055562eba4b11c94319e3f4edf91e477","sha512":"1a5e55282070eef05c6376a094ba613bacd77aabdfd4028f7aa676d5e3dccbc9e21deb330224c65418c9cbcdf865eb62944683bc5439e74b8e02f43d5e760bb7","ssdeep":"","tlshash":"965186c61670a3c9ce958bd9afee60d7724535fc857845c695a8ca18214ffcebb80f10","first_seen":"2025-07-04T08:37:36.065022Z","last_seen":"2026-04-07T14:31:53.064034Z","times_seen":16,"resource_available":false,"data":null}},"time_used":13684,"timings":{"blocked":6837,"dns":1,"connect":8,"send":0,"wait":8,"receive":0,"ssl":6828},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-content/uploads/2025/12/affordable-gaming-revolution-why-a150-mi-1766137427-9774.webp","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:44.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/affordable-gaming-revolution-why-a150-mi-1766137427-9774.webp HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 114246\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 09:43:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69451e53-1be46\"\r\nexpires: Mon, 02 Feb 2026 06:00:44 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2FVolk5DoRYoAI44bIjHr%2BZoZjiZxiwZMWe8M5RcoBrn5gzn9KoELvCwoRLe17Yk5lCUufhVKKzM9ZZ%2FAujBFq7DSAOFOf6zYtDI4DPq\"}]}\r\ncf-ray: 9b80470f885f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114246,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aed5055ee319eb97b03fd27a2bafe4be","sha1":"949606276abab785ea55e8f4df7f6f9ee21bd2ca","sha256":"e2a6c086adb81884ea2de6646724be5c2aafbd6308300631ac360cf5b0cf7c17","sha512":"13e4c1c03d994ed8251e150d3913949aa808cefd813a89a0a422cdf4aa8c81d6aad9357f66ff12568c1735e04f5e1b690e4df0a07918c688c130a7c58dce324f","ssdeep":"3072:zIq+ma70If9uP/38nhjNn/WcIuqMcNDbAjB2R:zn+v70Kw8xBXIuqDN3A0","tlshash":"f7b302c59e9e6b81913436cfd963f22f5dd42a4a09042dadc4d47d9bca0ae722789c33","first_seen":"2026-01-03T06:01:14.279316Z","last_seen":"2026-01-03T06:01:14.279316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":296,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:45.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /wp-content/fonts/poppins/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/wp-content/fonts/0e3fd676e1a7aaf161ccfefc2e2ee124.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7816\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 09:21:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69451902-1e88\"\r\nexpires: Mon, 02 Feb 2026 06:00:45 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bu4QxZWOWtkxxDpDd6nml3oc96uqK%2FfdJSkK2dfmsxyominO%2BlfqoQAMNR8S%2FguktbJ8MlWi%2F4B7tg%2FyHVDDeQB8yMOw9WDWez5qyu%2FJ\"}]}\r\ncf-ray: 9b804711ba0249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-17T07:12:43.613817Z","times_seen":213626,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f3c6.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:45.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f3c6.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 06:00:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:26:00 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 11\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1237,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a00e865c445d42dfb9f64bedfab8cf8","sha1":"c3e6f7072f6ea090ef6883110b23ea426266a8d7","sha256":"7510cc92013c2cd6c8271e3435539d9870044945e4a50151a50b18e61ee4ba83","sha512":"734d9218fd61a9e4ef7160bab9860b35fbbfa6be2c37e79c70ffc0006e5c4134fb64a41e765fe91bf5db2b2b282e9eb0b337ec07c9b0c39755780804afd8317c","ssdeep":"","tlshash":"8c2165e8673db28841d726695fe5db54405e287161305c82f17dde8ce381eca3e0be01","first_seen":"2023-05-11T08:21:41Z","last_seen":"2026-04-17T06:21:28.926315Z","times_seen":1073,"resource_available":false,"data":null}},"time_used":6489,"timings":{"blocked":3239,"dns":0,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3232},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f3b6.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:45.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Dec 2025 19:44:42 GMT","end":"Wed, 25 Mar 2026 19:44:41 GMT"},"fingerprint":{"sha1":"8F:9B:8F:03:41:B5:80:0E:25:D1:4E:CC:17:8F:AE:CC:07:2D:12:90","sha256":"9C:0E:06:15:FA:81:A9:AD:A3:69:4C:1F:54:C7:64:DA:9D:26:0F:E5:D6:E2:77:5E:AC:1D:27:17:D0:CC:E5:9C"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f3b6.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 03 Jan 2026 06:00:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:21:38 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 11\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":871,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4118b2f1c66753deb666882b7fb4380","sha1":"ac4a2ab0d8c00b9bf6bfb438ffdd583959af87a6","sha256":"8a22d751082241aa367ecce906f579cb2e8e0c7f97d67c0ea702052209f34b90","sha512":"588d05f0a3b775f2e8a76908509620fdf122d406b135cd520ceb32ec65812e6af31089f6ef33e6934d2d766a85eeba72803a35a537331f8d73d77f2b2fdbfc97","ssdeep":"","tlshash":"ab115cc8a37a828465af89ee2f6a56c2e25b10fcc8764587d04f5b50751bfdc6a50860","first_seen":"2023-05-14T21:41:14Z","last_seen":"2026-04-15T23:07:58.164752Z","times_seen":419,"resource_available":false,"data":null}},"time_used":6561,"timings":{"blocked":3276,"dns":0,"connect":8,"send":0,"wait":8,"receive":0,"ssl":3268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-content/uploads/2025/12/31-150x150.png","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:45.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/31-150x150.png HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 12611\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 09:21:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69451933-3143\"\r\nexpires: Mon, 02 Feb 2026 06:00:46 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0MW6HTUj41cPO44BH%2FBDmzc0Qxd4y5p%2FvnYTgVEME6aaLHZdNR9codvmM7zkk%2FSI4j08JXDBLG291TLMnZiUzvPgae3pqvJCOqAnD7gM\"}]}\r\ncf-ray: 9b8047172ee849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12611,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"e97c78b082a53f5bd66b328ce207e032","sha1":"c2a016e1b38ac09f0319b0640a3d48013c1a4b6d","sha256":"047a93fa4aa46915fb45bef74aeacb1ae5e78a4eba514b5a5645ad2129ee056a","sha512":"51f9236a5ac52ebee1ef379ddc927e0dfacae0358685d9eb498d2523c34b6a500942a566e47da805b902c6618d76e31c84c60ffa0dc705d59359ff27aef5692b","ssdeep":"384:N3MpXN2k0YGHCMl+lCFDdK5qDNalZHY/o:NcdN2hfCdlCFD2qDNyxY/o","tlshash":"e242c0a6c80133c21fd099253ef72065b8f2797bbc543813b9d4b28c44e19ad74eaa5b","first_seen":"2026-01-03T06:01:14.28251Z","last_seen":"2026-01-03T06:01:14.28251Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:44.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:44 GMT\r\ncontent-type: application/javascript\r\nexpires: Sat, 03 Jan 2026 06:48:44 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z9UBEcLUxY80zPx%2BLW4f2PwsMfCETeJ7dI0CJya4ku8XDU%2BAyqo6zkn0jWAzeOq8l0ILZISL7OtOaL%2FbGlPay12lF4b1uQ6PlpLm8wVm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b80470ff8b449c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-17T07:14:47.230408Z","times_seen":305229,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-includes/blocks/cover/style.min.css?ver=6.9","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:44.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /wp-includes/blocks/cover/style.min.css?ver=6.9 HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:44 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Feb 2025 12:46:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"67a600b8-4ab6\"\r\nexpires: Mon, 02 Feb 2026 06:00:44 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=okmCxjgjWE85qC4Di9AAtn0lIce99qP%2F8dRsJqaYgJ3aS5WCJzYqyZoVaEuiDIKhfB%2BGNV7HJkyi0ClJDk4bmdEGHBMT179sJgqksAjy\"}]}\r\ncf-ray: 9b80470f483349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19126,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19126), with no line terminators","md5":"63572908f5c4f1b77ab8bfb90a43d92f","sha1":"4dcca32b8b9143635264dccf437b80e1acf6525e","sha256":"666570bb7ac88a83bf11ede14a09166cd5cc1d83c4e2610f6b207e8a4596f6b6","sha512":"b71a51aa3808b586465a647285348b267ca721fe0609094988621e62f74498fb54d57b66240e055119146e444cd12cbf95e494a54de46710ebb8fb7afa3ea47c","ssdeep":"384:n95x4jp56/P14vPFgJUe3T1MHhZna/ZcBZDn/sNNgBgkgNgGg3xgc:n0eJ0GLaZmc","tlshash":"c7827a4122e58cfd75dfbe691f3deb88670b5c11c1894fdba53ae054634ca8888b3b16","first_seen":"2025-04-16T10:49:17.675381Z","last_seen":"2026-04-17T07:48:36.658077Z","times_seen":4610,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-content/themes/medicare-fse/assets/css/font-awesome.min.css?ver=4.7.0","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:44.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /wp-content/themes/medicare-fse/assets/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:44 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 00:24:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"69449b43-791c\"\r\nexpires: Mon, 02 Feb 2026 06:00:44 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uwjc16Y22BS0KVkxAGI3C66GOcLgpcmUtFJSiTq79PsU%2F%2FZwtThWrmcgrAGNMjg6H1AgpRvDrICGbf%2B7aR17i8zYiV5LQqtHoylOxlVK\"}]}\r\ncf-ray: 9b80470f483649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31004,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837), with CRLF line terminators","md5":"a0e784c4ca94c271b0338dfb02055be6","sha1":"88af80502c44cd52ca81ffe7dc7276b7eccb06cf","sha256":"820e169ce24824066d9973fd4b6561aae9dcd6dbef6435da905d5a1d6482997c","sha512":"97149632c15eb33690273abfa78636ad0471999363e11bf59ca61a4de32444e6f299db3b80d52b2e9437c645ec235fa8d3b8c20dcc350dbb9e175f12b3849a64","ssdeep":"384:/Hu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8Z:/wlr+Klk3Yi+fwYUf2l8yQ/e9vC","tlshash":"3dd241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T11:31:05Z","last_seen":"2026-04-17T07:32:37.370422Z","times_seen":15497,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-content/themes/medicare-fse/style.css?ver=1.0.3","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:44.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /wp-content/themes/medicare-fse/style.css?ver=1.0.3 HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:44 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 00:24:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"69449b43-28bd\"\r\nexpires: Mon, 02 Feb 2026 06:00:44 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1TVihzirJyNInzPdjRwgCVlQMJ07mVcUvRF8hNml%2FfZIf1hXasWZT9V0CQ5gsl6SxNysfV6mZOBp1zGxozp4fepFLZT%2B0dqmnjF87cAw\"}]}\r\ncf-ray: 9b80470f483749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10429,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (864), with CRLF line terminators","md5":"bb11cf09f165fd84846cb178d152d106","sha1":"b084ac6328f59ee6dd37f2247b43f3fd744cac5f","sha256":"de5489c9b811550ed5804aa3cc7e7824fb940f82ce3f3e766987a742061221f5","sha512":"e6cfc3901faa899b427000bf4e5772f16e0e8e30b9aefbf4aafcb88135c5879bdb89776ca959be5febf2a9230e6e57ce63c1e207edb9578f2bfe9f4a61c10613","ssdeep":"96:DK35qbV4jw79Gl7BE4xku9cVYyvFiLnGF:WJqajw7gJC+cVvF","tlshash":"4022cd524e628cf43577f328df961736eb89e8008f4492d1b896c028716dd9f4dbde8a","first_seen":"2026-01-03T06:01:14.285311Z","last_seen":"2026-01-03T06:01:14.285311Z","times_seen":1,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-content/themes/medicare-fse/assets/js/custom.min.js?ver=1.0.3","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:44.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /wp-content/themes/medicare-fse/assets/js/custom.min.js?ver=1.0.3 HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 00:24:35 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nexpires: Mon, 02 Feb 2026 06:00:44 GMT\r\ncache-control: max-age=2592000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rlWhYB4OruHIjauEbEhRc6shzj09YeFLr5OzSU4amDoNPOYbpWLMk2KU%2FrJEy3mff6FOxrJHih%2BQB6fMJLgV0KUyKv%2FiP8ouduBcIECM\"}]}\r\ncf-cache-status: MISS\r\netag: W/\"69449b43-eb\"\r\ncontent-encoding: br\r\ncf-ray: 9b80470f483d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":235,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with no line terminators","md5":"adfa4bf7b90dd43cbe0575a27e3897a4","sha1":"0466e0bc84088c53c1ea561b46cd695080eeae66","sha256":"fa7b65f2253788284f137a4802726333ea06b5ef09822599a41dea3d9cb71b18","sha512":"6e3cdbad61c6780ad98075781a9d80acc98bcaf99c954667c77db6e0b94c531938717f254dd46aa05b2182c643e7340e411580abe547eafd7280ad49fa64fcce","ssdeep":"","tlshash":"10d0a51d705495d955ee5034853f776c5427397ff50442c150114cfe343c5bf5551d55","first_seen":"2025-07-17T01:13:22.433644Z","last_seen":"2026-01-03T06:01:14.286139Z","times_seen":4,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-content/fonts/poppins/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:45.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /wp-content/fonts/poppins/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/wp-content/fonts/0e3fd676e1a7aaf161ccfefc2e2ee124.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 8000\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 09:21:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69451902-1f40\"\r\nexpires: Mon, 02 Feb 2026 06:00:45 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t4mEqs1%2BUN%2FGts5YzT%2F7onkv0nNfXSDYMBLKJMt%2B3K%2FDmr1QVeN9payBExcLiv%2FvbKoCH8mZK6aCy97vsO9BGNIu4KNB8ALxJcDJ4Nh4\"}]}\r\ncf-ray: 9b80471199e849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-04-17T07:16:08.051212Z","times_seen":211981,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":246,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-03T06:00:44.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MDfQwFTo6KcmCoco%2BG1aDEglDDcyIudoFdiEgGASzxQdiwuAyAzkznWkIaIUPvEiZ7gXutBJu8jJxKRSNJRtytX9OkTX%2F7MAqtxrC9aA\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b80470d8ec449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:26.3","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}],"data":{"size":159872,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (16879)","md5":"d638793840c4ece690a5aaa14287fa2d","sha1":"8d85cf09c6997e1f4ad477b4c23e512ce3258f9c","sha256":"fb49fde4bee4e36d123bb2c56fcc978081774b14479f2f5aae0327aacb9786c4","sha512":"56724e6012ee5de9c01d22fd690071d2647b8f63c157c9d36973fa193b9d6415101aefebf99055c9a931aa365c92515c900c1ff9960baf87ffa07b8132c8c043","ssdeep":"3072:NJQclkmpP2HdDTLqsZMpX4wvSAIeTVvBAIKY2mc2pqY4v/6ZMp44wvSAIeTVFbvv:N2clkmid7qsZMpX4wvSAIeTVvmIz2mDv","tlshash":"b9f32a5193b418f536bb833a6a466305a766d801cb0567e4f0f6c29cb6cc9a907b3f4f","first_seen":"2026-01-03T06:01:14.288774Z","last_seen":"2026-01-03T06:01:14.288774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":14,"dns":0,"connect":1,"send":0,"wait":188,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ficusperth.com/wp-content/uploads/2025/12/smart-gaming-a15-minimum-deposit-casinos-1766137439-5802.webp","fqdn":"ficusperth.com","domain":"ficusperth.com","tld":"com"},"ip":{"addr":"172.67.215.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ficusperth.com/","date":"2026-01-03T06:00:44.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ficusperth.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:02:34 GMT","end":"Wed, 18 Mar 2026 11:50:39 GMT"},"fingerprint":{"sha1":"95:4E:E2:48:EC:DB:74:82:D3:5F:16:17:6F:D6:BC:56:68:A0:66:4E","sha256":"D2:B1:42:5D:38:D4:6F:F5:4B:BB:71:3A:B6:75:A9:1D:60:4B:90:3A:D9:00:CC:BE:B6:3B:71:01:98:AE:BB:BB"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/smart-gaming-a15-minimum-deposit-casinos-1766137439-5802.webp HTTP/1.1\r\nHost: ficusperth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ficusperth.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 03 Jan 2026 06:00:44 GMT\r\ncontent-type: image/webp\r\ncontent-length: 138240\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 09:43:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"69451e5f-21c00\"\r\nexpires: Mon, 02 Feb 2026 06:00:44 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xnl75h%2B8QFc96YvK2r14uaSbmtbgOf3%2FpaNnt0QifSFVHrYMfeYdUpposMspem2uHszbJRsscKwQ2Pj2Izgceup7IJr%2Fwk621MXGx1BV\"}]}\r\ncf-ray: 9b80470fb88d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138240,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1b494ea4eae894cd6de53d6e10ed12c2","sha1":"0124fc64035a9673db1b619e0499634aeb9a058b","sha256":"2b299d2b95fc96e0a3ee679f2ff8dc3473863a50ab1e4db23b049e1e5781eee4","sha512":"8f3b92357f7b640a1d94ce6e724c72925863127e5f86a53bdf0258612645781c33969526c7261c9a2c8465245190034b6726310ed20abe90a581204e1f89b8e7","ssdeep":"3072:Lp9gEJ+dWqJRG/oj3VeiLAm+VFsxqln5IdziXRSB:n+tx3Jz+VOwlnidziXk","tlshash":"e3d31209f53eaa1e702ed2a7c81084d24ae67067674ef3a9c149ed96a930cff4d511f8","first_seen":"2026-01-03T06:01:14.290081Z","last_seen":"2026-01-03T06:01:14.290081Z","times_seen":1,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":383,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-03","alert":"Sinkholed","trigger":"ficusperth.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}