{"report_id":"eae1fd6c-57df-4cf2-be95-793f1bb6c98d","version":0,"status":"done","tags":[],"date":"2026-09-13T19:17:15Z","url":{"schema":"http","addr":"merusdesign.com/","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":0,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"https","addr":"merusdesign.com/","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"title":"Mimari \u0026 İç Mimari Tasarım","dom":{"size":233925,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (34392)","md5":"2f327a3c6168cd1b8778cce28eb50d19","sha1":"bf790faafa4579ebc0386d075f9279868b0401c1","sha256":"b1b9afbf15ae5085f6cf5d4643ca30355485e712a3d7c3adb856423f77a79329","sha512":"7c1ed858286b3cff07f829c0a04357c4b7a412ada28e9a18005de73ebe395ded803b1cd0276596977db0cf6b125723e603fc0486fc005cd4d8aacabf5c9ac6c0","ssdeep":"3072:AgJHE+hzm8HeM/GM0RmszswsfsTJwJvJcJZnJVb6Pmz5gwo5V8wmz5gwo5VzUnQV:Aghzm8HeM/GM0RrnJVenhMi","tlshash":"32341ab1e444843ab7d3079cc11da93cb057d544fa875be472e8b2dbb2c6fdaa990309","dom_hash":"domhash861521997e0b6f87620640602e8bcc7b","first_seen":"2026-09-13T19:17:28.126585Z","last_seen":"2026-09-13T19:17:28.126585Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"merusdesign.com/","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":0,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-18T19:17:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"trackerredirect.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"trackerredirect.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"trackerredirect.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"accounts.google.com","ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2026-09-07T09:44:45.003254Z","alert_count":0,"request_count":2,"received_data":2980,"sent_data":1278,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"trackerredirect.online","ip":{"addr":"172.67.201.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-07-30T07:35:39.085224Z","last_seen":"2026-09-13T08:26:50.248307Z","alert_count":12,"request_count":4,"received_data":1632564,"sent_data":1961,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.amazon.com","ip":{"addr":"13.249.10.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1994-11-01","domain_rank":988,"first_seen":"2012-05-21T06:35:38Z","last_seen":"2026-09-09T02:17:24.343548Z","alert_count":0,"request_count":1,"received_data":2493,"sent_data":577,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-06T22:44:31.282543Z","alert_count":0,"request_count":1,"received_data":495788,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":8,"received_data":219123,"sent_data":4684,"comment":"","tags":null,"fingerprints":null},{"fqdn":"merusdesign.com","ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"domain_registered":"2019-12-23","domain_rank":0,"first_seen":"2025-03-25T13:23:59.504648Z","last_seen":"2026-09-13T18:53:26.185221Z","alert_count":100,"request_count":25,"received_data":3441179,"sent_data":13513,"comment":"","tags":null,"fingerprints":[{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Instagram Feed for WordPress:6.10.0","description":"Display Instagram photos from any non-private Instagram accounts.","website":"https://wordpress.org/plugins/instagram-feed/","common_platform_enumeration":"","icon":"","categories":["Widgets","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Site Kit:1.168.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Smash Balloon Instagram Feed","description":"Instagram Feed displays Instagram posts from your Instagram accounts, either in the same single feed or in multiple different ones. Created by Smash Balloon.","website":"https://smashballoon.com/instagram-feed","common_platform_enumeration":"","icon":"Smash Balloon.svg","categories":["WordPress plugins"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-09-07T11:58:53.440636Z","alert_count":0,"request_count":1,"received_data":1011,"sent_data":558,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"merusdesign.com/","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"4aca5cd9b732538747acc8d884c11d54","sha1":"50b5286788b73faedce7724e70cd00aee94b669a","sha256":"9236e7db5d7abe53900c964a50f326711a4ea5efa8964a2ee1028850065dea99","sha512":"d9cd0f5a032b9864634c6e1f7b2609a8f73a3986c530ce7c50b20563bf07f5a483a227d73a506686a15a397378a2565b3e8b590ffa989625dc66b360ef710737","ssdeep":"","tlshash":"8701493320c11af7c9fa781157552795366333dad574641089cc150434bfe47e1d5cc8","size":762,"data":"","first_seen":"2026-08-16T11:44:02.481425Z","last_seen":"2026-09-13T19:17:28.20492Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"cdeb82b976cd4dbe667b1dcd3a9b90df","sha1":"ef04326f24de11ceda983718ed2ba4b6bee885d6","sha256":"b0909eecd5166504e353e8815e0f8cd0114bee60cad5799d6ed65bd3ceceea13","sha512":"2989b42c1fb2552d88f1c9ec76e5b9c9bbe66bf81c428f731ff6ad8bfbb01675ca6a02e4b0d5adeca73c519a956fe6c7897ee518296337294778bfe3ef3d6b3f","ssdeep":"","tlshash":"b9115cb9334976310ae101fd707b5bdcb831355278d7e450951ec5ac6a38de59862ecc","size":889,"data":"","first_seen":"2026-09-10T21:58:53.198241Z","last_seen":"2026-09-13T19:17:28.206586Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"b35212012c8b204a1293ff78981adbfd","sha1":"1df14b753b9c5a384cad94fb90261f61131a9e5c","sha256":"b94f73e7b34a5045d854913a49a5baf8dd6e9c7e35951d95f42e7e4c2245da91","sha512":"501367ceeede788d28ab87192d223289cb93aaacf89e8c17f0cb1ff5c5ca53c39aa4999238335321fa3377234a44c28717b2b9e4e3f984d86e89c319370f5a3c","ssdeep":"","tlshash":"b9b0127d210461390e8b105d761140803c603010b007bc43645ddcc7c420ca05402804","size":97,"data":"","first_seen":"2023-03-07T15:36:54Z","last_seen":"2026-09-14T22:40:25.197885Z","times_seen":6972,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0b86f63d8e513ec0ee000988df2d0bf","sha1":"3d6aa265bb5c508e4275409468ba770853def41c","sha256":"49e097bcd9c2275d04d9032a37c014de1bce78cf7899b8af15414b2fbff51c19","sha512":"f7e59a6559a0d3f3ba59c1423085a1f3a161dfd6c154e88d4fb8524dbb2ee60089cc9a8c6b959719523cdc54bd63cbb93e32bffb9b57c2bf7fdf69dda803d4a0","ssdeep":"","tlshash":"033143108649263280fb17ca91edd199b73a0cade349841420fdcd2e3f04da522d6ffc","size":1775,"data":"","first_seen":"2024-12-19T23:36:45.004196Z","last_seen":"2026-09-14T22:40:25.198513Z","times_seen":9949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"ed94567e0392fef99849032d3e56aadb","sha1":"4920f459bb2b98b0e32fcc01991347f8123e3c09","sha256":"49e66af9c52d5416e126e8d58d718b04a283ec25b2829a23063d7995e315354c","sha512":"503b369449b070abd506f50fd42430a6f8b46dcbba8d28ef8f783d19139a5a23075678a6e950154731ed49cd40a95b36b475711dc78ccadf91b1515f4d72b55a","ssdeep":"","tlshash":"46a0223acc000e2bbbe008e08b20ba2b02b2802cbcb8c080c30208000a0a08abc80202","size":67,"data":"","first_seen":"2026-08-16T11:44:02.48465Z","last_seen":"2026-09-13T19:17:28.210157Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3644350578a90aac26a81e98ad74dbc","sha1":"a6318c23d1622d8c00393d3385fccfb2e64f6aaf","sha256":"1ae59b8d0228b34bfce6e8a9dbab9d5c846225c349e8efc07225b216c5b06559","sha512":"478fe616c19dd8d74e53f99331864e5fc52bd19e259f2ed6c17bfef5fdb9668ec6b76cae4a3c696e2c7a4d9158489610a6e7473b7bac097808f1e188aa8c8db1","ssdeep":"","tlshash":"7261f065f9fca91ce65343c4cd30db8d505e700ab29c88996f3de4a9d1c5ba3acd060b","size":3421,"data":"","first_seen":"2026-09-13T19:17:28.211384Z","last_seen":"2026-09-13T19:17:28.211384Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a8e94180388678799b7963f768f49f1","sha1":"74bd85a950a67ef414f03346a807f3598bc5c017","sha256":"123314c6a838d7e2f59e9131b725905994c60d055663f3be1b2637de44d58c43","sha512":"da1a34017639fc5254aa46b24db1e0c1075b0176e1e50b63a92429c5f5d1468e6a426e8b8a510c16dff110a544668ef6586d278762719df436a76601ac4e2e2d","ssdeep":"","tlshash":"c6d09783d4c80e8237d10ec0e028206210ba8817e8a44c40834dedd00321bc2b8c420b","size":232,"data":"","first_seen":"2026-09-13T19:17:28.212725Z","last_seen":"2026-09-13T19:17:28.212725Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"3672c72cdc39fc72aa0cce6783615d95","sha1":"2297fb50e3a9fd2344dd6a4cbc0ff43bb9ada6f3","sha256":"9542a79b986bdd55ee9e7ed1a6bf725a9bdc261e6a92700b5dca1a8744b22f50","sha512":"8f82a60d13ad3597d63cadde215a8665921f242dc498517c25373f43e2338bbaacb55b2e24dc6c9ceb9e43a46733e8974512699fc4cf3ba2219b4d6a05ab76d9","ssdeep":"","tlshash":"9ce0202b8dc85ff76fd15ec45428682581f2e517fca485c0ab458c4c4652fd1b7d230b","size":353,"data":"","first_seen":"2026-09-13T19:17:28.213894Z","last_seen":"2026-09-13T19:17:28.213894Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":true,"md5":"becdbc34676652a2355b8dee000af6d1","sha1":"bcca9f05c389b2e57d828cabacc85aee8ca615fe","sha256":"f9af57caa5d54974797882e675be4fd4d5c23a41596afa7297d4fe657a184945","sha512":"63efb509fbac66af0ce00d02a8cfb123f6b3724636d96e0b6eba3be0c78750614e0709a33eadf13e8b0c5df5afc8b8115574a8f3679917adc20b13a857836ada","ssdeep":"","tlshash":"4fe0269d9f0c286bb1713090843b9b9e307f113c7d809b6a3f5661005e842099951600","size":333,"data":"","first_seen":"2026-08-16T11:44:02.489444Z","last_seen":"2026-09-13T19:17:28.215045Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/plugins/cookieadmin-pro/assets/js/consent.js?ver=1.1.4","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"112ff84cb9de5f630790f622925995f0","sha1":"efd004b998bbd64c18a8a6a68bcccf7090e38346","sha256":"80b616dced78fe1579fc6e6f99982a0f3d38b2e562790d877ff4b782388bff43","sha512":"714a431f871150701432b14d159b45a910cc32668d55975c09ce48011ab31db87c6679a3622ab5e8caad36a7b32b565ab9104660ba1888f61b8efdbe07ed3578","ssdeep":"","tlshash":"8521c0817efc491516d921e0c92ac4087069fc217985986d8a2820ea9f95fea9cd17a7","size":1236,"data":"","first_seen":"2025-10-25T19:27:43.30869Z","last_seen":"2026-09-14T20:00:08.736836Z","times_seen":879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/uploads/fusion-scripts/0a73167fd8a1e0331e0d86eb481803c7.min.js?ver=3.14.1","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f8dd764fb5e26ed7e15486d5109437a2","sha1":"123a204f7171821d53fe879397005b1827f978e0","sha256":"26b858b93b25c5c296b7ca8f293379f2d8a0fbfbe1840e20c7b2d5de00f84c5f","sha512":"5049774b13574370e6114a0f4eebf2ef94736ee45bbde10160e0c142951012b1619cac8a995d7230fb291d22c11941d4080e573dcb86cfbe0e56d9d9c797593f","ssdeep":"12288:IJk/3bSm94kdq3wNQTRxnj0KFwxTPew3gUTtQZGEZF4xfi3VJtrg:WkbSm94kw3ZRuywpPeOgzMfi3VM","tlshash":"92f45c89b20070b102fb61a6a17f520672379969b40a8158b17dd8fa3d7cd8d127bffd","size":768741,"data":"","first_seen":"2026-09-13T19:17:28.188442Z","last_seen":"2026-09-13T19:17:28.188442Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-14T22:51:43.798157Z","times_seen":1056698,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LV59W194L1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"afa8cae24942600ddbdb8bf0ad90fff1","sha1":"9a3bb1eec7390d961dc3a43bb56de31ab06ce818","sha256":"d3900e64d2d4d0e02397bfdf12c05e5b0bb342c0b4d0be93a8720185b1081ce0","sha512":"76cec9693d09aecc8beb3a31b5b7d89eafa357c512fa349761cb43f5de5d8add17e4aa3b1c64401b50d8544edcb8fe7d75fbfa27f9f6d42289d56deb59f50b58","ssdeep":"6144:M7vf1L6SSxQhmgyyEydQV80ucTPbNELR3/jb5WS3KNS3IFZ:OZ0yAynN5JiSU","tlshash":"0ab42acd73c674229396f178903f018ba57b29a2b49cc899f18adce42d3455a9237f7c","size":495184,"data":"","first_seen":"2026-09-13T19:17:28.198903Z","last_seen":"2026-09-13T19:17:28.198903Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-14T22:49:08.194906Z","times_seen":966455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/google_gtagjs-js-after","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e6743e3471e8a5b5f48c2657f3f910c","sha1":"f329112bef5f9717664e7c354b2e80a79a580522","sha256":"5d8e2c46cc7230e11f41cc3b50f7bc73892c31cd0762c4935a118922a3147e2e","sha512":"e3247886957e8af40935f937471b178f48a0137cda56624328ce1c1397c0782f284761c008dc041a70787c1f35b6d166b95c45a461393ee01306b41fb310e218","ssdeep":"","tlshash":"2e012633e0811af6c9fa683257652796366333dad574641089cc150434bfe47e1d5cc8","size":851,"data":"","first_seen":"2026-09-13T19:17:28.216453Z","last_seen":"2026-09-13T19:17:28.216453Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/cookieadmin_pro_js-js-extra","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"de1d9eec9e65fd03ae40723f8a9022fd","sha1":"b5bf07a055865454e37b878d95bf7a5f0bea45d9","sha256":"cd77867b6695c7a9ba71b27df6df084c267ee13b8724987296868a9716cce5cf","sha512":"b8394de011e1b9bc84cf3f0292dd6c09d77bcdeb0f9723a1a80beb0efe9fb291c874d2ae6739fe551fa7b26776e11b33c75e90f53b4b66659f6278e1831bdfbb","ssdeep":"","tlshash":"4bf09783d4c80e8237d10ef0e068206310fa9817e8a44c40834eedd00322bc2b8c420f","size":527,"data":"","first_seen":"2026-09-13T19:17:28.217675Z","last_seen":"2026-09-13T19:17:28.217675Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/sbi_scripts-js-extra","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"09dbfdb2de051b88d61a9d9f067aa6d4","sha1":"36437b545c29b1a382c7a9a332751a85c46d8b90","sha256":"17bdcdcb158d3c5e773300f7860068e26e8f97fccec41445b463e9613d4e717d","sha512":"cb542a69fdaa36776ad624e7b2231f60d3817dd4314ca100a7628e144573f9f2dcb60c4bac4753c6b30ca23a85d513636fc900b69a1c0980d7cfbe686942486d","ssdeep":"","tlshash":"e1f0682acdc80fa66fd04af45428682681f2e117fca485c0ab058c4c4652ac0b38230b","size":655,"data":"","first_seen":"2026-09-13T19:17:28.218923Z","last_seen":"2026-09-13T19:17:28.218923Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/plugins/instagram-feed/js/sbi-scripts.min.js?ver=6.10.0","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"68635a35a84c958d4034eac07b88bf74","sha1":"bc03f28abc89b5b1a946318c9c1b9b8ea02ff5da","sha256":"94e63e2a97e688266d79473fe2667aea4c68581f74d7690c2971cc1bd4d2829f","sha512":"930511290eff9a8d43602b4becbde6221d3d0a5401a57773ad932f309ad20313b50dbaf8512f00e3cc9815703202bbdb872d77c062ecb6a184c5ace1dd7263ac","ssdeep":"768:2ovb9o/m/cHMUkM64xk6Y+3kCjzd++blN9rO0h90wgtqRg/kAN+h0TAcA1U3sqdb:VnBp8yM0ehca/56tbSGQ8","tlshash":"60c264477350352b91afb0f16d0fa64532335a3952a15418ef1dc0b0ac38faa57b6efa","size":26773,"data":"","first_seen":"2025-11-12T20:54:20.170017Z","last_seen":"2026-09-14T20:23:35.974489Z","times_seen":4530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-09-14T22:19:05.491122Z","times_seen":313920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/cookieadmin_js-js-extra","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb050e9c3c273f9c03354f3e58b0a6cf","sha1":"9d35d0586ee6a58947e2ef639d77bae720bde8c7","sha256":"6fd213ee6392f4eec545bd0564ebb52c0ecac2760bd5f2e9ed53c6a734c498d3","sha512":"bd1352aff3d47315f1699db89345432bbd3ed2054b88752a7f6c7b3bc2af534aac36fb423405d6aee7c5e5bdce27cabf36358b1ad82f1fc5829c9472e5074e41","ssdeep":"","tlshash":"6571ef65f9fca91ce65343f4cd309b8d505e700af29888996f3de4a9d1c5ba3acd060b","size":3709,"data":"","first_seen":"2026-09-13T19:17:28.220129Z","last_seen":"2026-09-13T19:17:28.220129Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/plugins/cookieadmin/assets/js/consent.js?ver=1.1.4","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"472325482e9b83424d492a2e7cc1790b","sha1":"ea57b76901878c7634b5ad95823e22427d827e2f","sha256":"c5be76bf68b8178c73a67e669ebe90a3ccaa57828343a6c955fec0d1f51a3d82","sha512":"50da32b55b67b035a5b77b6c751db0e608e7ca168667aea526685f589cddfe5fa1c53179cdf9b8bf0bc3c438394067d0a3b00f066cfa4410eb0b71ba6584fa37","ssdeep":"384:7QxrUZORhR/iF/iiO05iJfiT3iFQJklrzKCQy64w/ibfiw3i75iVfiW7Bfij3ixw:orbzR6F6R0AJaTyFQJklrzKCQy64w6be","tlshash":"ab82eca5fedc562c00e512f9e56a528db42c5022f806a89d3f3cb5f48ae0fd34cd5a5b","size":18556,"data":"","first_seen":"2025-12-06T16:29:47.205057Z","last_seen":"2026-09-13T19:17:28.142648Z","times_seen":553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"05ed649254a05d4fa7a3f5b22b720188","sha1":"492163ee1f2d2b66ded11c4d8c15b70c8fbf9781","sha256":"74d583e83a25c8819a4030a1f8de725cc8068db85ed998764c81ac93da2cf5ec","sha512":"c1daac4fd344eef4574a7a798e6748920e9ea2d197318c7a1ca8d6a840fc179ddffadda13fa86f3484ddd08f20762dae93269a59e8fdffdbd725da09e4f2ee21","ssdeep":"","tlshash":"73618696e7763cdbb2f900f2697a0d47eb614435d6c8d438c9ada3141cb5893c274b46","size":3305,"data":"","first_seen":"2026-09-13T19:17:28.221382Z","last_seen":"2026-09-13T19:17:28.221382Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackerredirect.online/embed.js?v=20","fqdn":"trackerredirect.online","domain":"trackerredirect.online","tld":"online"},"ip":{"addr":"172.67.201.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"915ed5d954b75336cdadced3abc83903","sha1":"157bb372f50854c0120f6da74770b48f8a61296c","sha256":"d875c22ed92ce8cd72609622d395e3029de31f111a333fe1cd85bf2fd8a9dccb","sha512":"49230fcf390968188a42b4cce1840733b40ade3bef46351f37e53825c11382c4ee7788074e9aa7c114030be696fe58e0c523bd06ab5bf052d10dbe799066574c","ssdeep":"24576:Jb1LdSXmqhqaBPnXi9Umi1MrOCPagOGGW4APZOAK:k","tlshash":"677521a063c0ec03219f5f637f1afae8e52e5a78ba84548bd5247d5866b8507c6f0df0","size":1629375,"data":"","first_seen":"2026-09-13T19:17:28.222997Z","last_seen":"2026-09-13T19:17:28.222997Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://merusdesign.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2IwwZEw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.499Z","timestamp":1789326994499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2IwwZEw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://merusdesign.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:43:56 GMT\r\nexpires: Thu, 09 Sep 2027 10:43:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 376358\r\nlast-modified: Tue, 09 Sep 2025 18:32:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31428,"size_decoded":32241,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31428, version 1.0","md5":"aa0c29916314bbbde6809845d2994307","sha1":"1c28805df1c5fc44b75a3a326cb3270424a7d2c3","sha256":"7074eeb987a25349069ed5c784e204904b928f4c878e9c3c88d636c01081ae52","sha512":"0ccf98d342b1c6c4f11760ad184155f1aa03ad403409445cf67c3600035bcf6e25298b7902c241fa5ab4c6925845ddaf74a5eb7c7e2888b7bc299a7e356b3366","ssdeep":"384:aURC4FLlFHkldsNKNg5noTlzWuYtL+toF4WtQ0LmmAfBe+Jz8R11LnD/h+m/xI1J:rhlhkspnM90WoF4xT/frzaHckIuKuKLJ","tlshash":"aee2f11db038d6bbc24751f54cc9460f4a21b9967bab6bbb1199fa0be33706908458f1","first_seen":"2025-09-30T03:52:08.612046Z","last_seen":"2026-09-13T19:17:28.135111Z","times_seen":129,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":44,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/uploads/sb-instagram-feed-images/624235871_18506504119074192_5125480988903156712_nfull.webp","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.813Z","timestamp":1789326994813,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/uploads/sb-instagram-feed-images/624235871_18506504119074192_5125480988903156712_nfull.webp HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nCookie: _ga_LV59W194L1=deleted\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private\r\nexpires: Sun, 20 Sep 2026 19:16:34 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 30 Jan 2026 23:14:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 118860\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nx-litespeed-cache-control: no-cache\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":118860,"size_decoded":119165,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 540x960, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"48fd43cb60d8b9cda701c95410b9e1c8","sha1":"fb364b5412a452cf563a5154f02524e916f2bcea","sha256":"aa145db21388cbeb7df40156cf90613805d46c54b42fe59a869674eedfb44f8a","sha512":"a56521afb0c833b6b5c5cfac7ab7959c9b000fd50e2c386aab69427b26cde61fbc679bcc4c65d89f468993f0ee363dbcc10a461408a30d694691124a69c80c07","ssdeep":"3072:hGWZZNrPY7cdkMHe9OYxpFdIFa814YgvyfEp3PKyo4G39za17DH7:8AtPSMHex9I4wEp3PDPG3w17/","tlshash":"30c31205e92754630b06417dbeb8c26ae45f796f2e9309d240ae894f08bf64bf464cdf","first_seen":"2026-09-13T19:17:28.137049Z","last_seen":"2026-09-13T19:17:28.137049Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.10.0","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.076Z","timestamp":1789326994076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.10.0 HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 20 Sep 2026 19:16:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Dec 2025 06:55:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8179\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":41838,"size_decoded":8489,"mime_type":"text/css","magic":"ASCII text, with very long lines (41838), with no line terminators","md5":"d7a4c70f2290eb83f8a5da68c20cb2c4","sha1":"f735afe075418af0aa73dd21a4e128ae1df9c017","sha256":"3a9792f0f57cf88966313443d575df8f7d2faa1f84e931655fbf878827c7e419","sha512":"756442be79926f6b59a562db4d6b27934ef3a07309f84bf5ffcef631c7e19f06b12186f858b5d9ab0c68eb885bf64d27558db2343c2962c40ec56d5bd1a47905","ssdeep":"384:1HF+F3QZHy/j/JCFTDAoEH1uujy9zF0i8lODACJwc06025M:1HaQZH8KS1yzyBarw97J","tlshash":"16139775b5c03538649a974198949bbf973ca0f3fab14a69f348b53bc1c2fa91c32d09","first_seen":"2025-05-10T17:29:19.769909Z","last_seen":"2026-09-14T22:11:03.298595Z","times_seen":21451,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/plugins/cookieadmin/assets/js/consent.js?ver=1.1.4","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.310Z","timestamp":1789326994310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin/assets/js/consent.js?ver=1.1.4 HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 18 Dec 2025 12:57:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4436\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18556,"size_decoded":4674,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (584)","md5":"472325482e9b83424d492a2e7cc1790b","sha1":"ea57b76901878c7634b5ad95823e22427d827e2f","sha256":"c5be76bf68b8178c73a67e669ebe90a3ccaa57828343a6c955fec0d1f51a3d82","sha512":"50da32b55b67b035a5b77b6c751db0e608e7ca168667aea526685f589cddfe5fa1c53179cdf9b8bf0bc3c438394067d0a3b00f066cfa4410eb0b71ba6584fa37","ssdeep":"384:7QxrUZORhR/iF/iiO05iJfiT3iFQJklrzKCQy64w/ibfiw3i75iVfiW7Bfij3ixw:orbzR6F6R0AJaTyFQJklrzKCQy64w6be","tlshash":"ab82eca5fedc562c00e512f9e56a528db42c5022f806a89d3f3cb5f48ae0fd34cd5a5b","first_seen":"2025-12-06T16:29:47.205057Z","last_seen":"2026-09-13T19:17:28.142648Z","times_seen":553,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/plugins/cookieadmin-pro/assets/js/consent.js?ver=1.1.4","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.311Z","timestamp":1789326994311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin-pro/assets/js/consent.js?ver=1.1.4 HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 18 Dec 2025 12:57:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 528\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1236,"size_decoded":765,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text","md5":"112ff84cb9de5f630790f622925995f0","sha1":"efd004b998bbd64c18a8a6a68bcccf7090e38346","sha256":"80b616dced78fe1579fc6e6f99982a0f3d38b2e562790d877ff4b782388bff43","sha512":"714a431f871150701432b14d159b45a910cc32668d55975c09ce48011ab31db87c6679a3622ab5e8caad36a7b32b565ab9104660ba1888f61b8efdbe07ed3578","ssdeep":"","tlshash":"8521c0817efc491516d921e0c92ac4087069fc217985986d8a2820ea9f95fea9cd17a7","first_seen":"2025-10-25T19:27:43.30869Z","last_seen":"2026-09-14T20:00:08.736836Z","times_seen":879,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2IwwZEw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.492Z","timestamp":1789326994492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2IwwZEw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://merusdesign.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:43:56 GMT\r\nexpires: Thu, 09 Sep 2027 10:43:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 376358\r\nlast-modified: Tue, 09 Sep 2025 18:32:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31428,"size_decoded":32241,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31428, version 1.0","md5":"aa0c29916314bbbde6809845d2994307","sha1":"1c28805df1c5fc44b75a3a326cb3270424a7d2c3","sha256":"7074eeb987a25349069ed5c784e204904b928f4c878e9c3c88d636c01081ae52","sha512":"0ccf98d342b1c6c4f11760ad184155f1aa03ad403409445cf67c3600035bcf6e25298b7902c241fa5ab4c6925845ddaf74a5eb7c7e2888b7bc299a7e356b3366","ssdeep":"384:aURC4FLlFHkldsNKNg5noTlzWuYtL+toF4WtQ0LmmAfBe+Jz8R11LnD/h+m/xI1J:rhlhkspnM90WoF4xT/frzaHckIuKuKLJ","tlshash":"aee2f11db038d6bbc24751f54cc9460f4a21b9967bab6bbb1199fa0be33706908458f1","first_seen":"2025-09-30T03:52:08.612046Z","last_seen":"2026-09-13T19:17:28.135111Z","times_seen":129,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":37,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/2716.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:35.032Z","timestamp":1789326995032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 22 Aug 2026 19:44:43 GMT","end":"Fri, 20 Nov 2026 19:44:42 GMT"},"fingerprint":{"sha1":"71:14:CE:1E:D1:35:48:65:9D:D4:BE:BA:7A:F0:EF:FA:97:28:79:00","sha256":"98:51:EC:74:34:EB:FA:D4:3F:28:B7:CA:B2:41:04:70:21:25:B3:7C:AF:89:AF:64:1B:93:11:E2:B2:7B:F2:E7"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/2716.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 13 Sep 2026 19:16:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 07 Nov 2025 05:21:38 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 15\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":500,"size_decoded":759,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"133b77ff9fc321682fed3cde12d6355c","sha1":"4cadfe2e9f50307a51f9d040a916cd4c09baaaa8","sha256":"f39e7ecf003f57bad813ff5b686add8eca88b02f364e0ba946d1ddd8eb25e61e","sha512":"474176f5d483a166386b68f70c0ace7ea7e0bea33525e52bf7dc6d53c11b86ca00bcfdc37213c3fc423a7e109d63b1b8bc102e020a5cc99f0b8ae614837438f3","ssdeep":"","tlshash":"d5f054044776e7c787a545c4ed206d9d5723d0ae9e5920c863d30c9853e6e9f7416428","first_seen":"2023-04-06T18:33:48Z","last_seen":"2026-09-13T19:17:28.147879Z","times_seen":3918,"resource_available":false,"data":null}},"time_used":3270,"timings":{"blocked":0,"dns":2,"connect":8,"send":0,"wait":9,"receive":0,"ssl":3251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:40.040Z","timestamp":1789327000040,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 13 Sep 2026 19:16:40 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy: unsafe-none\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-2dQJOJlN46SSUMX7BYGD9g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T22:51:38.22464Z","times_seen":18467164,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackerredirect.online/api/track/event","fqdn":"trackerredirect.online","domain":"trackerredirect.online","tld":"online"},"ip":{"addr":"172.67.201.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:40.832Z","timestamp":1789327000832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trackerredirect.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 23:04:28 GMT","end":"Fri, 23 Oct 2026 00:04:10 GMT"},"fingerprint":{"sha1":"3A:D5:88:C8:8D:34:04:60:38:F8:B6:4D:11:9E:41:3E:E6:82:E8:3C","sha256":"14:3B:B5:A0:1D:3F:53:F4:ED:69:2B:07:5C:B2:76:51:1C:36:E6:36:68:8B:84:2C:2A:53:F3:F0:23:D2:57:9E"}}},"request":{"raw":"POST /api/track/event HTTP/1.1\r\nHost: trackerredirect.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://merusdesign.com/\r\nContent-Length: 1330\r\nOrigin: https://merusdesign.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1330,"data":"{\"visit_id\":\"59877513-caf3-46cd-b452-272f9bed425f\",\"action\":\"protections\",\"elapsed_sec\":0,\"site\":\"merusdesign.com\",\"page_host\":\"merusdesign.com\",\"landing_path\":\"/\",\"landing_query\":\"\",\"campaign_path\":\"/\",\"page_url\":\"https://merusdesign.com/\",\"device\":\"Windows\",\"captcha_shown\":false,\"js_ok\":true,\"visit_source\":\"embed_parent\",\"skin\":\"cf\",\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"protections\":{\"core\":{\"isBIExtensions\":false,\"isBot\":false,\"isIncognito\":false,\"isVPN\":false,\"isNoSocialLogins\":true},\"details\":{\"extensionsInstalled\":null,\"botReasonCodes\":null,\"incognitoQuota\":null,\"incognitoLimit\":null,\"socialServicesFound\":null,\"serverTZ\":\"UTC\",\"clientTZ\":\"UTC\",\"tzDiffHours\":null},\"ui\":{\"timeBetweenMouseStopAndClickMin\":null,\"timeBetweenMouseStopAndClickMax\":null,\"mouseSpeedTop\":0,\"mediaCapabilities\":true,\"battery\":null,\"darkMode\":false,\"supportedMediaConstraints\":\"{\\\"autoGainControl\\\":true,\\\"browserWindow\\\":true,\\\"channelCount\\\":true,\\\"deviceId\\\":true,\\\"echoCancellation\\\":true,\\\"facingMode\\\":true,\\\"frameRate\\\":true,\\\"groupId\\\":true,\\\"height\\\":true,\\\"mediaSource\\\":true,\\\"noiseSuppression\\\":true,\\\"resizeMode\\\":true,\\\"scrollWithPage\\\":true,\\\"viewportHeight\\\":true,\\\"viewportOffsetX\\\":true,\\\"viewportOffsetY\\\":true,\\\"viewportWidth\\\":true,\\\"width\\\":true}\"}},\"client_bot\":false}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:16:41 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: https://merusdesign.com\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HZRPGhI1KEBNIet0irIb8B6%2F1ubYbTyzz3drD75JEjmTvkVd708RY9M2FxqW07exNBp01XCN8%2Bc0ujKmjrXyuSXwH7d2PaXk2X4A4bmRIydtPU4Gb8abyjc3hcPhl2FeHRaG4hibZPjm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a97cdb3c43cd9c-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":812,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c60417de14f10fc7b4915ba8f6232522","sha1":"54b5d14407a490598a32efef92921ccc05cec105","sha256":"e5f1eb4d806641698a35efe20e098efd20d7d57a9b90ee69079d5bb650920726","sha512":"f9bc6f7a59cb2a013767ea7b2036c6ce9d38ea186056e92cfad37635348300f4ad57db99a0f850fb537b8f23761eb8506a7f9b318bd95af37870e30d682af1ed","ssdeep":"","tlshash":"40600003000c0030c000030003c0ff30000300300000000c000cf000033000c0003c0f","first_seen":"2023-05-13T00:46:17Z","last_seen":"2026-09-14T22:55:17.338737Z","times_seen":11331,"resource_available":false,"data":null}},"time_used":620,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":620,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"trackerredirect.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"trackerredirect.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"trackerredirect.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trackerredirect.online/embed.js?v=20","fqdn":"trackerredirect.online","domain":"trackerredirect.online","tld":"online"},"ip":{"addr":"172.67.201.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.418Z","timestamp":1789326994418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trackerredirect.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 23:04:28 GMT","end":"Fri, 23 Oct 2026 00:04:10 GMT"},"fingerprint":{"sha1":"3A:D5:88:C8:8D:34:04:60:38:F8:B6:4D:11:9E:41:3E:E6:82:E8:3C","sha256":"14:3B:B5:A0:1D:3F:53:F4:ED:69:2B:07:5C:B2:76:51:1C:36:E6:36:68:8B:84:2C:2A:53:F3:F0:23:D2:57:9E"}}},"request":{"raw":"GET /embed.js?v=20 HTTP/1.1\r\nHost: trackerredirect.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:16:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MXULUZrCuf0zh4yUumSrf7HOlsTLvPdvTBHPgka0pOiqQNtW%2FIbX6Zb4eNncK4GFLRIRk8vqblC8L8y3fOKe%2FNl4zwtbs%2F56XTavoWWgvHZMlAL%2BJvG1Zt5BmqR0UPM68RDm%2FHb1ZreS\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3a97cb39e436c90-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1629375,"size_decoded":483868,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"61a2bc25ac0ae103f5f31493121d2868","sha1":"03833f53213c4fe760e239e87418d934c63dff41","sha256":"776e80b402c71d4c54c528824245fee4cf880e3557017127cfcc3dbb4b31595b","sha512":"cfef865abed7a8d43f6dcc74f702c2dbd84fb979ddada81cec621694f6383b458fc693c251418f175bf776a55aad84167084df0475a77f996f558395e4cfa7fc","ssdeep":"12288:Q8yeloYt8ZoL0UidTxq/8JEuUKBl0V8ZTIGF0y6L7UWdYls/frx0RCbmCZbhDcmH:Jb1LdSXmqhqaBPnXi9Umi1Mr3","tlshash":"a62500a053c0e803258f1f53bf1afee8e52e5ab9b984988bd5547d9c65b8407c6b0df0","first_seen":"2026-09-13T19:17:28.15119Z","last_seen":"2026-09-14T09:05:23.170595Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5335,"timings":{"blocked":-1,"dns":36,"connect":33,"send":0,"wait":781,"receive":4485,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"trackerredirect.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"trackerredirect.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"trackerredirect.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fraunces/v38/6NUh8FyLNQOQZAnv9bYEvDiIdE9Ea92uemAk_WBq8U_9v0c2Wa0K7iN7hzFUPJH58nib1603gg7S2nfgRYIchRuTCf7T.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.493Z","timestamp":1789326994493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/fraunces/v38/6NUh8FyLNQOQZAnv9bYEvDiIdE9Ea92uemAk_WBq8U_9v0c2Wa0K7iN7hzFUPJH58nib1603gg7S2nfgRYIchRuTCf7T.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://merusdesign.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 08 Sep 2026 19:33:19 GMT\r\nexpires: Wed, 08 Sep 2027 19:33:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 430995\r\nlast-modified: Tue, 09 Sep 2025 18:36:19 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18000,"size_decoded":18813,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18000, version 1.0","md5":"2285bacdef3984dba57d8d235343fd33","sha1":"3a6751c10aa671e79b895d284ba12acc644cf318","sha256":"7975c1ef7caf89d0606dd985d35abe31a619c19262cf13f5a05938cc68fb27b2","sha512":"9fed5c27be8618a83ec5c1241fa022baad440058f37b33f4c950687961eb9f6d8ed583d61256b47e1dc7109952e2bec7849ce7fdd0a91bafd22def68d3c5e67d","ssdeep":"384:8sOMYbBV/VixoZ1Pa1Z1T7hD/O5+99SY7XEL5:8PNNV9ixa8Ha+99PQ","tlshash":"8782d0d85cea9f4c9d6da5b6ef100af5c2125f30d67ec670ae4705a84c8e02b9b34794","first_seen":"2025-10-04T07:52:02.550277Z","last_seen":"2026-09-14T13:57:24.238997Z","times_seen":175,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":22,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/uploads/sb-instagram-feed-images/619188932_18504957328074192_6673638115965669446_nfull.webp","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.814Z","timestamp":1789326994814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/uploads/sb-instagram-feed-images/619188932_18504957328074192_6673638115965669446_nfull.webp HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nCookie: _ga_LV59W194L1=deleted\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private\r\nexpires: Sun, 20 Sep 2026 19:16:34 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 23 Jan 2026 08:16:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 189440\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nx-litespeed-cache-control: no-cache\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":189440,"size_decoded":189745,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 540x960, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"641474c8e93a613757ad1520ff84abf8","sha1":"186d34629013b3b7f36e0148a0d4f2c8063afe1e","sha256":"43696ec56552c6bd9366707319702f92c612a6e040301a8e43de31d97eb52ffc","sha512":"8b13a0e337f9ffa6e07741014467e415b32caff87d9e659dcdd635ae77fd902b97623161e3fdc4298e35951febc68b8dff08f1029cb77ea29bff2c940c38bd82","ssdeep":"3072:TnLcoai0QN2yt+4v877cgoi2iyRiXtcs4DLOhfcEhhywDR9H6uMe:bIJQNF+4v8Hcg92iIiXZ4HOhfcwLfa","tlshash":"9e0423b3f14f047592cefc8b3bd3c7c72d68d9a84634a58089d6704069668b89c3a6fd","first_seen":"2026-09-13T19:17:28.158917Z","last_seen":"2026-09-13T19:17:28.158917Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/uploads/2025/11/favicon-1.png","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:35.232Z","timestamp":1789326995232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/favicon-1.png HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nCookie: _ga_LV59W194L1=deleted\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private\r\nexpires: Mon, 13 Sep 2027 19:16:35 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 04 Feb 2026 08:41:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1370\r\ndate: Sun, 13 Sep 2026 19:16:35 GMT\r\nx-litespeed-cache-control: no-cache\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1370,"size_decoded":1673,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8af3fcceb0159eac6d7f96057068f67e","sha1":"f676855151f0c8c144e93c44d19fdae2311986a7","sha256":"72222b4c31fb5300a60081a50c84cc8d4f415461b3665d0d8b8d97c13eec8b5f","sha512":"72153a837b3366c16db7ffc9914a9f42e1c6ec3982c336d8d1049f347902d3944a425bf535a8adc37fe2df407639c04c79a77677bdba6fa223caffdb6ac3547a","ssdeep":"","tlshash":"ae21d6454f035af0dffa35842668691d0686338e884513bd30135cf108b91ccc3a8a02","first_seen":"2026-08-16T11:44:02.477032Z","last_seen":"2026-09-13T19:17:28.161827Z","times_seen":10,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trackerredirect.online/api/captcha/tz","fqdn":"trackerredirect.online","domain":"trackerredirect.online","tld":"online"},"ip":{"addr":"172.67.201.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:40.022Z","timestamp":1789327000022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trackerredirect.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 23:04:28 GMT","end":"Fri, 23 Oct 2026 00:04:10 GMT"},"fingerprint":{"sha1":"3A:D5:88:C8:8D:34:04:60:38:F8:B6:4D:11:9E:41:3E:E6:82:E8:3C","sha256":"14:3B:B5:A0:1D:3F:53:F4:ED:69:2B:07:5C:B2:76:51:1C:36:E6:36:68:8B:84:2C:2A:53:F3:F0:23:D2:57:9E"}}},"request":{"raw":"GET /api/captcha/tz HTTP/1.1\r\nHost: trackerredirect.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://merusdesign.com/\r\nOrigin: https://merusdesign.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:16:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: https://merusdesign.com\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YVlaCkDbdVmH%2BO6oQc3tVR8ZRetwnwwlASmFyOl%2FdbR%2FCvixFqJDRTQN0TBcz2U9ccCeIWtiApktJf9G0EUbIQ9bqvJucXByKgVRfAmVZ%2F%2BvtJy80N3gwxIo2D64ivS0AuGS5abkDEKG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a97cd64a6acd9c-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10,"size_decoded":816,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7ea4607614930dda91b33931af2fc805","sha1":"0770cdffeb4d0bf831219c87b4170f0cb67efad6","sha256":"1c726c181946b28b5b8f34f4d8406bb3e7748a664ff30d481d0e4022017a907f","sha512":"9589ea450a07a8fca5f20069d40ff67ebf66d988fc393d74f5dfe34a1d225a426cfa9fa362836762cd59f3fe801e69e83bf811a687bed0283c8f58d53eaee97b","ssdeep":"","tlshash":"b35000000000000000c300c33003000300000000000003c0c0000c000000000333f003","first_seen":"2026-09-10T21:58:53.169663Z","last_seen":"2026-09-13T19:17:28.166395Z","times_seen":3,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"trackerredirect.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"trackerredirect.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"trackerredirect.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.amazon.com/ax/claim?arb=c0868048-396a-4886-a19e-3cbb65f70284","fqdn":"www.amazon.com","domain":"amazon.com","tld":"com"},"ip":{"addr":"13.249.10.125","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:40.660Z","timestamp":1789327000660,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /ax/claim?arb=c0868048-396a-4886-a19e-3cbb65f70284 HTTP/1.1\r\nHost: www.amazon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html;charset=UTF-8\r\nvia: 1.1 7d287cb7ea5225b8d6559a32aee5ce72.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\ndate: Sun, 13 Sep 2026 19:16:40 GMT\r\nserver: Server\r\nx-amz-rid: JT316QBMH33PQE69E2HE\r\nset-cookie: session-id=131-7825275-3867715; Domain=.amazon.com; Expires=Mon, 13-Sep-2027 19:16:40 GMT; Path=/; Secure\nsession-id-time=2082787201l; Domain=.amazon.com; Expires=Mon, 13-Sep-2027 19:16:40 GMT; Path=/; Secure\nsst-main=Sst1|PQLvaNwuGei1O0D-BmQWEDsnBwHVuRmx2XSFhrkqezD1hnbuVPF5u97B4wv3CjDt2MC1W-xBGQtX3nVCZGLGbKlFkSAFdR1JY6RlLv9KrYnFp1matWqpspnJ6cKDNzYUCPjQBw32f1BzqNpGUTzPnGo01w8G1ySYOR_-G6v_MSy6XUH8BfEhivaAc6QmfgRDg7M8Qvu-tYUiidpCnttEErXtZEMHQtgDph66P-i1o3BVzWqYeAdvvvIFpqT7mdNXyocK; Domain=.amazon.com; Expires=Mon, 13-Sep-2027 19:16:40 GMT; Path=/; Secure; HttpOnly; SameSite=Lax\ni18n-prefs=NOK; Domain=.amazon.com; Expires=Mon, 13-Sep-2027 19:16:40 GMT; Path=/\nlc-main=en_US; Domain=.amazon.com; Expires=Mon, 13-Sep-2027 19:16:40 GMT; Path=/\nsp-cdn=\"L5Z9:NO\"; Version=1; Domain=.amazon.com; Max-Age=31536000; Expires=Mon, 13-Sep-2027 19:16:40 GMT; Path=/; Secure; HttpOnly\r\naccept-ch: ect,rtt,downlink,device-memory,sec-ch-device-memory,viewport-width,sec-ch-viewport-width,dpr,sec-ch-dpr,sec-ch-ua-full-version-list,viewport-height,sec-ch-viewport-height\r\naccept-ch-lifetime: 86400\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\ncontent-encoding: gzip\r\ncontent-language: en-US\r\ncontent-security-policy: upgrade-insecure-requests;report-uri https://metrics.media-amazon.com/\r\nexpires: -1\r\npermissions-policy: ch-dpr=(self \"https://m.media-amazon.com\" \"https://images-na.ssl-images-amazon.com\"), ch-viewport-width=(self \"https://m.media-amazon.com\" \"https://images-na.ssl-images-amazon.com\"), ch-downlink=(self \"https://m.media-amazon.com\" \"https://images-na.ssl-images-amazon.com\"), ch-ect=(self \"https://m.media-amazon.com\" \"https://images-na.ssl-images-amazon.com\")\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1;\r\ncontent-security-policy-report-only: default-src 'self' blob: https: data: mediastream: 'unsafe-eval' 'unsafe-inline';report-uri https://metrics.media-amazon.com/\r\nvary: User-Agent,Accept-Encoding\r\nstrict-transport-security: max-age=47474747; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nedge-cache-control: no-store,no-cache,stale-if-error=0,stale-while-revalidate=0\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-id: 6juSWsxI6azIH6QWMHeEOX3ezma7lgOL_jbGN-OXzCMhhnbRxxEanA==\r\n\r\n","headers":null,"cookies":[{"name":"session-id","value":"131-7825275-3867715","quoted":false,"path":"/","domain":".amazon.com","expires":"2027-09-13T19:16:40Z","raw_expires":"Mon, 13-Sep-2027 19:16:40 GMT","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"session-id=131-7825275-3867715; Domain=.amazon.com; Expires=Mon, 13-Sep-2027 19:16:40 GMT; Path=/; Secure"},{"name":"session-id-time","value":"2082787201l","quoted":false,"path":"/","domain":".amazon.com","expires":"2027-09-13T19:16:40Z","raw_expires":"Mon, 13-Sep-2027 19:16:40 GMT","secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"session-id-time=2082787201l; Domain=.amazon.com; Expires=Mon, 13-Sep-2027 19:16:40 GMT; Path=/; Secure"},{"name":"sst-main","value":"Sst1|PQLvaNwuGei1O0D-BmQWEDsnBwHVuRmx2XSFhrkqezD1hnbuVPF5u97B4wv3CjDt2MC1W-xBGQtX3nVCZGLGbKlFkSAFdR1JY6RlLv9KrYnFp1matWqpspnJ6cKDNzYUCPjQBw32f1BzqNpGUTzPnGo01w8G1ySYOR_-G6v_MSy6XUH8BfEhivaAc6QmfgRDg7M8Qvu-tYUiidpCnttEErXtZEMHQtgDph66P-i1o3BVzWqYeAdvvvIFpqT7mdNXyocK","quoted":false,"path":"/","domain":".amazon.com","expires":"2027-09-13T19:16:40Z","raw_expires":"Mon, 13-Sep-2027 19:16:40 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"sst-main=Sst1|PQLvaNwuGei1O0D-BmQWEDsnBwHVuRmx2XSFhrkqezD1hnbuVPF5u97B4wv3CjDt2MC1W-xBGQtX3nVCZGLGbKlFkSAFdR1JY6RlLv9KrYnFp1matWqpspnJ6cKDNzYUCPjQBw32f1BzqNpGUTzPnGo01w8G1ySYOR_-G6v_MSy6XUH8BfEhivaAc6QmfgRDg7M8Qvu-tYUiidpCnttEErXtZEMHQtgDph66P-i1o3BVzWqYeAdvvvIFpqT7mdNXyocK; Domain=.amazon.com; Expires=Mon, 13-Sep-2027 19:16:40 GMT; Path=/; Secure; HttpOnly; SameSite=Lax"},{"name":"i18n-prefs","value":"NOK","quoted":false,"path":"/","domain":".amazon.com","expires":"2027-09-13T19:16:40Z","raw_expires":"Mon, 13-Sep-2027 19:16:40 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"i18n-prefs=NOK; Domain=.amazon.com; Expires=Mon, 13-Sep-2027 19:16:40 GMT; Path=/"},{"name":"lc-main","value":"en_US","quoted":false,"path":"/","domain":".amazon.com","expires":"2027-09-13T19:16:40Z","raw_expires":"Mon, 13-Sep-2027 19:16:40 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"lc-main=en_US; Domain=.amazon.com; Expires=Mon, 13-Sep-2027 19:16:40 GMT; Path=/"},{"name":"sp-cdn","value":"L5Z9:NO","quoted":true,"path":"/","domain":".amazon.com","expires":"2027-09-13T19:16:40Z","raw_expires":"Mon, 13-Sep-2027 19:16:40 GMT","max_age":31536000,"secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"sp-cdn=\"L5Z9:NO\"; Version=1; Domain=.amazon.com; Max-Age=31536000; Expires=Mon, 13-Sep-2027 19:16:40 GMT; Path=/; Secure; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T22:51:38.22464Z","times_seen":18467164,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/uploads/2025/12/brutalist-1-400x625.jpg","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:40.989Z","timestamp":1789327000989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/brutalist-1-400x625.jpg HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nCookie: _ga_LV59W194L1=deleted\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private\r\nexpires: Mon, 13 Sep 2027 19:16:41 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 04 Feb 2026 08:41:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24490\r\ndate: Sun, 13 Sep 2026 19:16:41 GMT\r\nx-litespeed-cache-control: no-cache\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24490,"size_decoded":24794,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x625, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"175f6ef58a4701bc7a91ea5bfda14cce","sha1":"01af7d7e81ccd367fba0bad6072d836117bbff75","sha256":"79d1ef6998824a1dfe0ebd0303931a522c8ec874e591fd5222082a15d4bbb878","sha512":"c9838e199a1e8c39c1e1a00a7b853ce22095a74e0ae90bbd88fc051303cc2949849c518c36855b737947cc07ebec12645ce843ea27d0bd4d6920f75294281339","ssdeep":"384:FlpWl7y1GMw3XBTn3SxAtN1VnU1GDwSSwF1hUg/VO8XzPFbthns3YGpioHtves5Y:rpg7EiBT3wAL3nOqwwF1hUgdO8XzpthN","tlshash":"c0b2e1dbc7997013ca52ea7e87df722ddeccd558a36281825f97102c261aad1b1c9843","first_seen":"2026-08-16T11:44:02.478811Z","last_seen":"2026-09-13T19:17:28.172286Z","times_seen":10,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.084Z","timestamp":1789326994084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 28 Aug 2023 14:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87553,"size_decoded":29983,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-14T22:51:43.798157Z","times_seen":1056698,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.305Z","timestamp":1789326994305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://merusdesign.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 20 Sep 2026 19:16:34 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 18 Dec 2025 12:35:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 76736\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76736,"size_decoded":77004,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76736, version 331.-31261","md5":"9ab1ccbf4c2b583b1d848018561da0a9","sha1":"68ac09c5daef91dd2220ef3d063cd757989e0982","sha256":"83238a9c118b388bee1eede2f1c04b6441ac0c4a543f502457e3d2309a9d3e99","sha512":"651f12f2626590c292f0a17a0a225077afa07d8c771b03da4640368e9f1421458b5e45d55c7d2c2cbef516166d7ccf79f2c14e0da0f2358617f387cab8c9daf4","ssdeep":"1536:jw0FRxBtmBtqlYkq1mP8mG6fFeniXXIAOUziLl89P8/scx4VGD/2V:jw0/xBtMt+YkqC8igiXXcuiLl8G/ss/E","tlshash":"807312bfc88a63493d7ebd3dc2043ea8433c945ca5d5b050e75994b8f4b82ac6adc16d","first_seen":"2023-04-11T01:34:40Z","last_seen":"2026-09-14T22:40:25.194724Z","times_seen":11581,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.308Z","timestamp":1789326994308,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://merusdesign.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 20 Sep 2026 19:16:34 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 18 Dec 2025 12:35:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78212\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78212,"size_decoded":78480,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78212, version 331.-31261","md5":"8c4f474a3aaa695346196b1f33fab616","sha1":"abc1ae262d760e104a5a5cb68614ac119fd0db18","sha256":"ef2369c82b6ec19bcf4fe76799d94edc43604e164c0f73978059536159845441","sha512":"8cebde83c69bf5cc28f64263efce6ac0179eb74e716461a2bd9f8a1aa24e9a1ec971f7d5487e9d4adcc4a970f241ca3d5f356a19abd57dda8dbcb5f1eb64ab09","ssdeep":"1536:MGgygaAeCFuk9I0yvQkAcaCfK+DBfT5UftBd5OCNY21r/CrDhy4DDh+xu:XglnpFz9KQkAhCfBxT5Uf7d59xiDEs","tlshash":"277312b4fa369bcfa19c7cd0418ff22bde4078296b9f550111cdfd606a12a747369d18","first_seen":"2023-04-06T21:42:42Z","last_seen":"2026-09-14T23:02:30.370737Z","times_seen":21815,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/uploads/sb-instagram-feed-images/634818768_18511966357074192_8153501063230347952_nfull.webp","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.812Z","timestamp":1789326994812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/uploads/sb-instagram-feed-images/634818768_18511966357074192_8153501063230347952_nfull.webp HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nCookie: _ga_LV59W194L1=deleted\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private\r\nexpires: Sun, 20 Sep 2026 19:16:34 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 17 Feb 2026 06:52:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 121926\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nx-litespeed-cache-control: no-cache\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":121926,"size_decoded":122231,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 540x960, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"433209a123bfd8dcbd1165958f89bb05","sha1":"6be256ce211cbead0a50725d3eb3c6f562fda6bc","sha256":"8ec08a67ba24af469c6b0c68d35a7af97580b5228945160dbef24a754017cb4e","sha512":"b91bf878809bda8746c9a92f1e9fc9306beb1af09956e9797d25b8ca43b7a44e040b9c84d7229fb1b9e82e212c96aaab9a4f52438e9e45bae7eb971404acdb5c","ssdeep":"3072:ofM58+kzuxcqFCd1bTHzwMWdEwZ4lCzgmG:ofi8++ecqFCr8M4nzgB","tlshash":"a8c3124cd8896f2cb93f06d75442caf5ae242141e0a7531ace83a2e2bd6f0c47dd19a7","first_seen":"2026-09-13T19:17:28.179038Z","last_seen":"2026-09-13T19:17:28.179038Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.949Z","timestamp":1789326994949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9 HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nCookie: _ga_LV59W194L1=deleted\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 18 Dec 2025 12:50:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4949\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22762,"size_decoded":5187,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-09-14T22:19:05.491122Z","times_seen":313920,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T19:16:32.936Z","timestamp":1789326992936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.2.33\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://merusdesign.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://merusdesign.com/wp-json/wp/v2/pages/31\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://merusdesign.com/\u003e; rel=shortlink\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 13 Sep 2026 19:16:33 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Instagram Feed for WordPress:6.10.0","description":"Display Instagram photos from any non-private Instagram accounts.","website":"https://wordpress.org/plugins/instagram-feed/","common_platform_enumeration":"","icon":"","categories":["Widgets","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Site Kit:1.168.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Smash Balloon Instagram Feed","description":"Instagram Feed displays Instagram posts from your Instagram accounts, either in the same single feed or in multiple different ones. Created by Smash Balloon.","website":"https://smashballoon.com/instagram-feed","common_platform_enumeration":"","icon":"Smash Balloon.svg","categories":["WordPress plugins"]}],"data":{"size":229537,"size_decoded":47923,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (36334), with CRLF, LF line terminators","md5":"3e309cb516597e98f2c7e5b00c875e03","sha1":"26075c17b3aa3bcf9e2d6458fc74c880b191efbe","sha256":"300192e806f759816664de4e7b866230ebd1c87af850e349eed9bef15bf61d46","sha512":"20836c417d036d38b210b41a95a208600c3b27a37855488d41e255dfe3b4d1cebc04369c81c328f3e405f6a2e51dd6c43721411b306687b372d4befebaf8075b","ssdeep":"3072:OHmLK+m8HtTckszswsfsZL7JwJvJcJSvJPQYSmz5dwo5V1mz5dwo5VhnQe24kuea:K+m8HtZvJP3hmz","tlshash":"8e241ab2e484407ab7d3079cc11da93cb057d541fa875be076e8b2db72c6fdaa990309","first_seen":"2026-09-13T19:17:28.184013Z","last_seen":"2026-09-13T19:17:28.184013Z","times_seen":1,"resource_available":false,"data":null}},"time_used":854,"timings":{"blocked":0,"dns":156,"connect":65,"send":0,"wait":496,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/uploads/2026/01/nimari-tas-1-scaled.jpg","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.782Z","timestamp":1789326994782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/nimari-tas-1-scaled.jpg HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nCookie: _ga_LV59W194L1=deleted\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private\r\nexpires: Mon, 13 Sep 2027 19:16:34 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 04 Feb 2026 08:38:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 478378\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nx-litespeed-cache-control: no-cache\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":478378,"size_decoded":478683,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1709x2560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8c0fb22268245f00fc1265c0797e9e68","sha1":"02ca541f4d14e00ec6675e1c230e6460d378ba1d","sha256":"27281f25e5921b3e8b03f273f1e6a6e8ee2423653ac9170bf987a9635ad18e6f","sha512":"4d33d2716c3e4062a6c9e72c5bd835e857ea4cba39019df27eafa100a63454f8cf4cedff68caaed87e91ee645a208621060ece2bed0f8eab19fcde57a68674bb","ssdeep":"12288:sxAdEpAWpp2DGpMzfHwkfiwcH2K3of5ZyARajeID:+AvWpgDGpafQkfiMK4fFab","tlshash":"9aa4239434da842396a856634cf549d83fcea722c0ecdeba17fc508ef92fbc42556364","first_seen":"2026-09-13T19:17:28.18653Z","last_seen":"2026-09-13T19:17:28.18653Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/uploads/2025/11/favicon-1.png","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:35.231Z","timestamp":1789326995231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/favicon-1.png HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nCookie: _ga_LV59W194L1=deleted\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private\r\nexpires: Mon, 13 Sep 2027 19:16:35 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 04 Feb 2026 08:41:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1370\r\ndate: Sun, 13 Sep 2026 19:16:35 GMT\r\nx-litespeed-cache-control: no-cache\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1370,"size_decoded":1673,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8af3fcceb0159eac6d7f96057068f67e","sha1":"f676855151f0c8c144e93c44d19fdae2311986a7","sha256":"72222b4c31fb5300a60081a50c84cc8d4f415461b3665d0d8b8d97c13eec8b5f","sha512":"72153a837b3366c16db7ffc9914a9f42e1c6ec3982c336d8d1049f347902d3944a425bf535a8adc37fe2df407639c04c79a77677bdba6fa223caffdb6ac3547a","ssdeep":"","tlshash":"ae21d6454f035af0dffa35842668691d0686338e884513bd30135cf108b91ccc3a8a02","first_seen":"2026-08-16T11:44:02.477032Z","last_seen":"2026-09-13T19:17:28.161827Z","times_seen":10,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/uploads/fusion-scripts/0a73167fd8a1e0331e0d86eb481803c7.min.js?ver=3.14.1","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.314Z","timestamp":1789326994314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/uploads/fusion-scripts/0a73167fd8a1e0331e0d86eb481803c7.min.js?ver=3.14.1 HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 04 Feb 2026 08:19:35 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 222339\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":768741,"size_decoded":222579,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30727)","md5":"f8dd764fb5e26ed7e15486d5109437a2","sha1":"123a204f7171821d53fe879397005b1827f978e0","sha256":"26b858b93b25c5c296b7ca8f293379f2d8a0fbfbe1840e20c7b2d5de00f84c5f","sha512":"5049774b13574370e6114a0f4eebf2ef94736ee45bbde10160e0c142951012b1619cac8a995d7230fb291d22c11941d4080e573dcb86cfbe0e56d9d9c797593f","ssdeep":"12288:IJk/3bSm94kdq3wNQTRxnj0KFwxTPew3gUTtQZGEZF4xfi3VJtrg:WkbSm94kw3ZRuywpPeOgzMfi3VM","tlshash":"92f45c89b20070b102fb61a6a17f520672379969b40a8158b17dd8fa3d7cd8d127bffd","first_seen":"2026-09-13T19:17:28.188442Z","last_seen":"2026-09-13T19:17:28.188442Z","times_seen":1,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/plugins/cookieadmin/assets/images/cookieadmin_icon.svg","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.333Z","timestamp":1789326994333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin/assets/images/cookieadmin_icon.svg HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 20 Sep 2026 19:16:34 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 18 Dec 2025 12:57:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 293\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":738,"size_decoded":607,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac4f8069f74c4a83cfcf736471ed9894","sha1":"8e1b411b6f11ef7f9d4c15273b00e232806c1840","sha256":"1c1ca5d2744c185a68b3991a50cb400d0fb126b311fa5249f556a1ea82a220a7","sha512":"43d537b824606ce079bc2123ff86dc996e337b92e503eb6080d52411150cf2858220a74309d0f23df9f611d50345e7bfb1039c8cca643b90550cfbd11e90e8eb","ssdeep":"","tlshash":"8801286ae11c5a1e91020364d3277632a26fb4ede2881b3811acc870e701bdbe4279e2","first_seen":"2025-07-22T15:21:11.528647Z","last_seen":"2026-09-14T18:20:03.146857Z","times_seen":3419,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.253.148.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:40.031Z","timestamp":1789327000031,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 \r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 13 Sep 2026 19:16:40 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy: unsafe-none\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-qnYoBQbLMJ4wCEQE5CuKHQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T22:51:38.22464Z","times_seen":18467164,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/plugins/cookieadmin/assets/css/consent.css?ver=1.1.4","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.078Z","timestamp":1789326994078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin/assets/css/consent.css?ver=1.1.4 HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 20 Sep 2026 19:16:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 18 Dec 2025 12:57:09 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2446\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9529,"size_decoded":2756,"mime_type":"text/css","magic":"ASCII text","md5":"f81e301244662914069179968f9d8061","sha1":"a9ea23873dec82265918c421d26f4ad55ec5a989","sha256":"6dd17ae3b800ad6b0df22515d3416cdbbbec1df7d8c6b41c869c8ed2522ffa07","sha512":"9544e6b6da1bd43d7df576a841496d240cde32609ccd28ed7954db0a540d33fd30b7c42922b52c47160e17f2676ff3a0718304d18f38139848d541145bb01066","ssdeep":"96:F4K1BGxGunP2IS2P6RLerCZL5XyOmHQikEMqiipP6iRvm20S59bLACq9bCh6iM7O:F4K1enP2IS2CB2CM5Oipnm23f+bd7ABF","tlshash":"451212163d9ca60c521b80d4e995d755962f5582fe0f0d9e5ab238bcc2c87c34ce2eee","first_seen":"2025-12-06T16:29:47.242886Z","last_seen":"2026-09-13T19:17:28.192537Z","times_seen":557,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.306Z","timestamp":1789326994306,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/themes/Avada/includes/lib/assets/fonts/fontawesome/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://merusdesign.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 20 Sep 2026 19:16:34 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 18 Dec 2025 12:35:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13264\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13264,"size_decoded":13532,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13264, version 331.-31261","md5":"8eb1b3e8681657092171b6aa809493c2","sha1":"aa6cc2d47049bc05505d6ec1cd5237558b04d6e3","sha256":"65ae05cb1187b6eacddcc464141af208d9c172aeed20c74c3bf7663b530c5c0d","sha512":"18b89cd08824903d7b11db5121089d195f6c79f420787b74488a673472993c7f7adffdc6979f6940c1cdff2c05726cbdc54d39128654aed5d12327090523e7c0","ssdeep":"384:o9YaYYXwStvE7PHv9wHOuUd1DEo/u1+V0:GfYYXztvEDgOuUrEomN","tlshash":"4752cf6d143fd8cec0b154a54417f4ea36e616aa2b34f343696f3a734a706425a50c3e","first_seen":"2023-04-13T22:20:52Z","last_seen":"2026-09-14T22:40:25.187372Z","times_seen":11665,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fraunces/v38/6NUh8FyLNQOQZAnv9bYEvDiIdE9Ea92uemAk_WBq8U_9v0c2Wa0K7iN7hzFUPJH58nib1603gg7S2nfgRYIchRuTB_7TtUs.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.496Z","timestamp":1789326994496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/fraunces/v38/6NUh8FyLNQOQZAnv9bYEvDiIdE9Ea92uemAk_WBq8U_9v0c2Wa0K7iN7hzFUPJH58nib1603gg7S2nfgRYIchRuTB_7TtUs.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://merusdesign.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: font/woff2\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17296\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nexpires: Mon, 13 Sep 2027 19:16:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:40:27 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17296,"size_decoded":18096,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17296, version 1.0","md5":"edc3bfd6d8d359381c662c6b03c017ff","sha1":"1bdeba8382dcb301fd849e80417d21694f167571","sha256":"f9c30d1f05fcd9ae07306235bd415a57f63d615c25a3f810670e24a9dc5a48bd","sha512":"a2eb6ee65207e94f232b5c67c77874c55abb49d0c381422a276942f0f91a6ff2f3d51bbdd51684807f3d171a5f0c74b0d38a537c6a97169e2e0b9c0cf94ba905","ssdeep":"384:bThnVPQkyeYCeE0BNfKuWv18OAdiAEXe6ReIFchLh2Lg6WdQGxk:HPPQCHX0BtWuEAEXrRNFoLwLYdW","tlshash":"1372cf0045ed5800dedf0b7681b5e21e2288fa331deae1ef72d731a944f5a5a6517378","first_seen":"2026-05-10T20:01:33.792271Z","last_seen":"2026-09-13T19:17:28.194137Z","times_seen":13,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackerredirect.online/api/track/event","fqdn":"trackerredirect.online","domain":"trackerredirect.online","tld":"online"},"ip":{"addr":"172.67.201.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:40.000Z","timestamp":1789327000000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trackerredirect.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Jul 2026 23:04:28 GMT","end":"Fri, 23 Oct 2026 00:04:10 GMT"},"fingerprint":{"sha1":"3A:D5:88:C8:8D:34:04:60:38:F8:B6:4D:11:9E:41:3E:E6:82:E8:3C","sha256":"14:3B:B5:A0:1D:3F:53:F4:ED:69:2B:07:5C:B2:76:51:1C:36:E6:36:68:8B:84:2C:2A:53:F3:F0:23:D2:57:9E"}}},"request":{"raw":"OPTIONS /api/track/event HTTP/1.1\r\nHost: trackerredirect.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://merusdesign.com/\r\nOrigin: https://merusdesign.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 19:16:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Werd2CRXhJKO%2Bf9v1xYT1itdju%2FnRzFrgqXKL3g7NNx4PhPUNlHO%2F9Ci%2BeakcNWz8w960JObZJkID7R5SU7RMXbjwuSc1wrVFaQYY6n20RgJtilumc%2F8V2dTIOn%2FCQVdborK%2BWzIG5Un\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: https://merusdesign.com\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a97cd64a6bcd9c-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":743,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T22:51:38.22464Z","times_seen":18467164,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":37,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"trackerredirect.online","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"trackerredirect.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"trackerredirect.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/plugins/reviews-feed/assets/css/sbr-styles.min.css?ver=2.1.1","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.075Z","timestamp":1789326994075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/plugins/reviews-feed/assets/css/sbr-styles.min.css?ver=2.1.1 HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 20 Sep 2026 19:16:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 28 Dec 2025 06:58:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4624\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26166,"size_decoded":4934,"mime_type":"text/css","magic":"ASCII text, with very long lines (26166), with no line terminators","md5":"980fded4b75805567a43e664a41bf9aa","sha1":"ea4861f2b1723e9e28e12c3f2521fa799e3ab02f","sha256":"7dacd2113a24a70605a9df722ddd98de900ac0810f724e90d0f4fd5046f1777d","sha512":"45a150ed262f9ed9779a6fc2a649944dedea90fc6e403c12b4a10658a37a7e9f7c5cf400b30d00c7aeb18b2bf918c71a7bce28a53ca5a30e0651f89c1fb970a4","ssdeep":"192:dHUXnu2I8IkPdlUjDarV7pWgKSnBomJ0ZFfPQQLULeLZYZTMAKt/XLn:dHUuxtkrvHPBZ0Z2VLeqQXLn","tlshash":"21c266113e9426bcf0b7b65d7588eb8a171ce013e15b38edb68dd118c3dafa16874d0a","first_seen":"2025-06-09T15:24:28.872703Z","last_seen":"2026-09-14T20:21:56.081017Z","times_seen":1551,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/uploads/fusion-styles/d727da08a13ad3be717f1bfceeaad072.min.css?ver=3.14.1","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.083Z","timestamp":1789326994083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/uploads/fusion-styles/d727da08a13ad3be717f1bfceeaad072.min.css?ver=3.14.1 HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 20 Sep 2026 19:16:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 30 May 2026 06:53:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 146911\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1058949,"size_decoded":147223,"mime_type":"text/css","magic":"ASCII text, with very long lines (55540)","md5":"62f2691c044204b840ceafc66f5d7be6","sha1":"7e20e13a564ef099b0f0f87c4a6d5f67914c8d9a","sha256":"70431d077121a8aa53745a1bd92f327ca31c4037f0053b121fc3a2409894975c","sha512":"fc78424e4a83597184d73926ab1886e669dc01e4f7ed0f7dfe02fb84fdf0fdb5ef30798cdeec3ce285e9121e544853a1c27d30b2d08aeae11dea1d561359f5c9","ssdeep":"6144:P3JnJdnPPx0IFTBpa3XjKkntH9F83ZPilEP+oHf8Sudms0X3Ekln85RL9Asns/4u:f3dHOIFTEtHWilEP+peTCFSGtsbROrw","tlshash":"7125d7e1d50410e87363c32dd788b66c513baf90fa424fe9f48de48a46c6be9ca517d8","first_seen":"2026-09-13T19:17:28.196713Z","last_seen":"2026-09-13T19:17:28.196713Z","times_seen":1,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.086Z","timestamp":1789326994086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jun 2023 02:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4678\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13577,"size_decoded":4916,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-14T22:49:08.194906Z","times_seen":966455,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-LV59W194L1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.302Z","timestamp":1789326994302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-LV59W194L1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nexpires: Sun, 13 Sep 2026 19:16:34 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 167268\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":495184,"size_decoded":167872,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"afa8cae24942600ddbdb8bf0ad90fff1","sha1":"9a3bb1eec7390d961dc3a43bb56de31ab06ce818","sha256":"d3900e64d2d4d0e02397bfdf12c05e5b0bb342c0b4d0be93a8720185b1081ce0","sha512":"76cec9693d09aecc8beb3a31b5b7d89eafa357c512fa349761cb43f5de5d8add17e4aa3b1c64401b50d8544edcb8fe7d75fbfa27f9f6d42289d56deb59f50b58","ssdeep":"6144:M7vf1L6SSxQhmgyyEydQV80ucTPbNELR3/jb5WS3KNS3IFZ:OZ0yAynN5JiSU","tlshash":"0ab42acd73c674229396f178903f018ba57b29a2b49cc899f18adce42d3455a9237f7c","first_seen":"2026-09-13T19:17:28.198903Z","last_seen":"2026-09-13T19:17:28.198903Z","times_seen":1,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":41,"receive":59,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/plugins/instagram-feed/js/sbi-scripts.min.js?ver=6.10.0","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.313Z","timestamp":1789326994313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/plugins/instagram-feed/js/sbi-scripts.min.js?ver=6.10.0 HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 28 Dec 2025 06:55:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6360\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26773,"size_decoded":6598,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (26773), with no line terminators","md5":"68635a35a84c958d4034eac07b88bf74","sha1":"bc03f28abc89b5b1a946318c9c1b9b8ea02ff5da","sha256":"94e63e2a97e688266d79473fe2667aea4c68581f74d7690c2971cc1bd4d2829f","sha512":"930511290eff9a8d43602b4becbde6221d3d0a5401a57773ad932f309ad20313b50dbaf8512f00e3cc9815703202bbdb872d77c062ecb6a184c5ace1dd7263ac","ssdeep":"768:2ovb9o/m/cHMUkM64xk6Y+3kCjzd++blN9rO0h90wgtqRg/kAN+h0TAcA1U3sqdb:VnBp8yM0ehca/56tbSGQ8","tlshash":"60c264477350352b91afb0f16d0fa64532335a3952a15418ef1dc0b0ac38faa57b6efa","first_seen":"2025-11-12T20:54:20.170017Z","last_seen":"2026-09-14T20:23:35.974489Z","times_seen":4530,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2Iw-ZEzMhQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.500Z","timestamp":1789326994500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2Iw-ZEzMhQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://merusdesign.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27684\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Sep 2026 07:52:06 GMT\r\nexpires: Tue, 07 Sep 2027 07:52:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 559468\r\nlast-modified: Tue, 09 Sep 2025 18:37:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27684,"size_decoded":28497,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27684, version 1.0","md5":"fb3e3a8575fce492f1ee5301e01a1b21","sha1":"ec67eda6154cb00da5f3ff9dfbac4f23ca1f3135","sha256":"51456344445b98029b9be92e7cbfbb0232054308b30d8ca771f9671fa861606b","sha512":"8205c05169bb31c2c6ed185e9f0e35c23ee55319dcb3441823b73d39451a79186d6c582b118d0a44799da8335a222fff443a2ce21b4dc52cc7de4dacb5266868","ssdeep":"768:M/zO53C9hJyX9ge6DA59IGTmWhJt8y8pv:RC9hJe9gHDATIGaWhWv","tlshash":"31c2e0e0e645b095fe10ce6893dc5a77de3cba026a43392f2cc2d0a555f2199c20da6f","first_seen":"2025-10-31T07:22:04.645965Z","last_seen":"2026-09-13T19:17:28.201262Z","times_seen":19,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":57,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/uploads/2025/11/logo-merus.png","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.749Z","timestamp":1789326994749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/logo-merus.png HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: private\r\nexpires: Mon, 13 Sep 2027 19:16:34 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 04 Feb 2026 08:41:45 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1104\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nx-litespeed-cache-control: no-cache\r\nvary: Accept\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1104,"size_decoded":1407,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d05d08b63fea4322292f51d465d92446","sha1":"eb632a7b5787db8c9445bd05530cce108182fdd6","sha256":"79a45d721333616b55bff7b5f0b80bea37bffa7a591c901c852fdae37504bd88","sha512":"0b91593de5159998f8f101219c7263ea259c756ae00850271fe0d82dab7114064b962da2fa21dd753a8fe74757374e0902e579f3f7456fe3b606744259bb9f5e","ssdeep":"","tlshash":"971193b41aa93d9ac30ab6f6231e0ba6286b891170d1a93ba6030c79415590dd31273a","first_seen":"2026-08-16T11:44:02.451923Z","last_seen":"2026-09-13T19:17:28.202908Z","times_seen":10,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"merusdesign.com/wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/awb-icons.woff","fqdn":"merusdesign.com","domain":"merusdesign.com","tld":"com"},"ip":{"addr":"217.18.85.30","port":443,"asn":201233,"as":"Yonca Duran","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.304Z","timestamp":1789326994304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.merusdesign.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 02:56:46 GMT","end":"Wed, 18 Nov 2026 02:56:45 GMT"},"fingerprint":{"sha1":"E5:8F:D5:86:F4:BF:AA:EF:F1:4B:78:47:B9:4D:AF:D2:43:C5:CD:D6","sha256":"07:87:F5:84:7E:8A:EA:55:D1:F5:97:2E:D4:A0:F1:D5:FF:86:92:10:24:9E:C3:C6:A5:CF:55:EE:E1:5C:30:97"}}},"request":{"raw":"GET /wp-content/themes/Avada/includes/lib/assets/fonts/icomoon/awb-icons.woff HTTP/1.1\r\nHost: merusdesign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://merusdesign.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 20 Sep 2026 19:16:34 GMT\r\ncontent-type: font/woff\r\nlast-modified: Thu, 18 Dec 2025 12:35:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22768\r\ndate: Sun, 13 Sep 2026 19:16:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22768,"size_decoded":23035,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 22768, version 1.0","md5":"db200c1b2504805397fc6a346d45106e","sha1":"37a43f65c3a650e4a39e737023db740820d8af18","sha256":"7fb75a83e922c90a34648b5b6b9aeb3bc43c8eb6a12f8a96ad5c1df861778979","sha512":"739d11df29dee9eefdbbad3e46131afbba42b55e7c50eeb944633837805f8225b000046007e59be32e5cce2dab38e69d02b683c796995933b047ca700ddd93df","ssdeep":"384:36eXXRqNjKGs4T+DBC1itld0uBcZR8P0TRNprqnYLcpNszj24rqLcEF505:39qRKGsO+F2itlS4cZuP0TRTrHcEzje2","tlshash":"08a23a17cbabcf4ee817a67c8d7763220df9e511833ae3e1a5865c4890195f04d2cf9a","first_seen":"2025-11-13T01:40:32.213773Z","last_seen":"2026-09-14T17:43:03.57516Z","times_seen":3040,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"merusdesign.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"merusdesign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2IwwZEw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.489Z","timestamp":1789326994489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2IwwZEw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://merusdesign.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:43:56 GMT\r\nexpires: Thu, 09 Sep 2027 10:43:56 GMT\r\ncache-control: public, max-age=31536000\r\nage: 376358\r\nlast-modified: Tue, 09 Sep 2025 18:32:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31428,"size_decoded":32241,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31428, version 1.0","md5":"aa0c29916314bbbde6809845d2994307","sha1":"1c28805df1c5fc44b75a3a326cb3270424a7d2c3","sha256":"7074eeb987a25349069ed5c784e204904b928f4c878e9c3c88d636c01081ae52","sha512":"0ccf98d342b1c6c4f11760ad184155f1aa03ad403409445cf67c3600035bcf6e25298b7902c241fa5ab4c6925845ddaf74a5eb7c7e2888b7bc299a7e356b3366","ssdeep":"384:aURC4FLlFHkldsNKNg5noTlzWuYtL+toF4WtQ0LmmAfBe+Jz8R11LnD/h+m/xI1J:rhlhkspnM90WoF4xT/frzaHckIuKuKLJ","tlshash":"aee2f11db038d6bbc24751f54cc9460f4a21b9967bab6bbb1199fa0be33706908458f1","first_seen":"2025-09-30T03:52:08.612046Z","last_seen":"2026-09-13T19:17:28.135111Z","times_seen":129,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":6,"connect":32,"send":0,"wait":21,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2Iw-ZEzMhQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.491Z","timestamp":1789326994491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2Iw-ZEzMhQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://merusdesign.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27684\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Sep 2026 07:52:06 GMT\r\nexpires: Tue, 07 Sep 2027 07:52:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 559468\r\nlast-modified: Tue, 09 Sep 2025 18:37:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27684,"size_decoded":28497,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27684, version 1.0","md5":"fb3e3a8575fce492f1ee5301e01a1b21","sha1":"ec67eda6154cb00da5f3ff9dfbac4f23ca1f3135","sha256":"51456344445b98029b9be92e7cbfbb0232054308b30d8ca771f9671fa861606b","sha512":"8205c05169bb31c2c6ed185e9f0e35c23ee55319dcb3441823b73d39451a79186d6c582b118d0a44799da8335a222fff443a2ce21b4dc52cc7de4dacb5266868","ssdeep":"768:M/zO53C9hJyX9ge6DA59IGTmWhJt8y8pv:RC9hJe9gHDATIGaWhWv","tlshash":"31c2e0e0e645b095fe10ce6893dc5a77de3cba026a43392f2cc2d0a555f2199c20da6f","first_seen":"2025-10-31T07:22:04.645965Z","last_seen":"2026-09-13T19:17:28.201262Z","times_seen":19,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":52,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2Iw-ZEzMhQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://merusdesign.com/","date":"2026-09-13T19:16:34.497Z","timestamp":1789326994497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/readexpro/v27/SLXYc1bJ7HE5YDoGPuzj_dh8uc7wUy8ZQQyX2Iw-ZEzMhQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://merusdesign.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://merusdesign.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27684\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Sep 2026 07:52:06 GMT\r\nexpires: Tue, 07 Sep 2027 07:52:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 559468\r\nlast-modified: Tue, 09 Sep 2025 18:37:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27684,"size_decoded":28497,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27684, version 1.0","md5":"fb3e3a8575fce492f1ee5301e01a1b21","sha1":"ec67eda6154cb00da5f3ff9dfbac4f23ca1f3135","sha256":"51456344445b98029b9be92e7cbfbb0232054308b30d8ca771f9671fa861606b","sha512":"8205c05169bb31c2c6ed185e9f0e35c23ee55319dcb3441823b73d39451a79186d6c582b118d0a44799da8335a222fff443a2ce21b4dc52cc7de4dacb5266868","ssdeep":"768:M/zO53C9hJyX9ge6DA59IGTmWhJt8y8pv:RC9hJe9gHDATIGaWhWv","tlshash":"31c2e0e0e645b095fe10ce6893dc5a77de3cba026a43392f2cc2d0a555f2199c20da6f","first_seen":"2025-10-31T07:22:04.645965Z","last_seen":"2026-09-13T19:17:28.201262Z","times_seen":19,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":54,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}