{"report_id":"f2e168bb-909c-4b3e-9ad8-6a1f7c071380","version":6,"status":"done","tags":[],"date":"2026-02-14T01:40:49Z","url":{"schema":"http","addr":"ercusdt.com","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ercusdt.com/","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"title":"易欧USDT买卖交易所 | 易欧USDT买卖交易所专业服务，结合欧一欧意模式，提供欧亿级C2C现货交易与安全提现指南 | 欧亿撮合","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ercusdt.com","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T01:40:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ercusdt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"datahub.pages.dev","ip":{"addr":"172.66.47.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2024-03-19T05:49:11Z","last_seen":"2026-02-13T14:14:50.144098Z","alert_count":0,"request_count":4,"received_data":28409,"sent_data":1838,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-08T22:25:44.117365Z","alert_count":0,"request_count":2,"received_data":218072,"sent_data":1011,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-02-08T22:30:41.935977Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":500,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ercusdt.com","ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-05","domain_rank":0,"first_seen":"2026-02-13T14:14:49.588184Z","last_seen":"2026-02-13T14:14:49.588184Z","alert_count":10,"request_count":10,"received_data":470054,"sent_data":4417,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"i1.wp.com","ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":44421,"first_seen":"2012-09-27T05:17:34Z","last_seen":"2026-02-12T01:26:43.161194Z","alert_count":0,"request_count":19,"received_data":2564581,"sent_data":8465,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ercusdt.com/","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5bfd0310f655beb0301466de64a8ef13","sha1":"de9d9b3bb0e3aaf9409f51d8e481ba1c6ee33e46","sha256":"7c9bb668951f06bc4963d380ddb316970e337e29d716f15854c4f861332d486f","sha512":"5dd4b162244ea725d1feffa6b3ae7b92bad1b58ec1d188b74f9f0ffa0c472294f39a440842b97fb3f37a17aa34c296c5092fbc97aade7a1894149a5420253714","ssdeep":"","tlshash":"0ee0721a30c2003902b744a623fb920a2226370bc48ecb237a9fc4969f28ca1090200c","size":299,"data":"","first_seen":"2026-02-13T14:14:54.207893Z","last_seen":"2026-06-03T16:04:45.511672Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"467311c11762dfb1ba8e158bd4eb3c40","sha1":"f7a85cabdabdd83b3ec9fa824d6662f5cc5c0b8e","sha256":"83b86e7e465a1184c75bf6e9abc7b54101e3cd5ef4ee0858a9a5b945270939ea","sha512":"114ff83e4b2f5514574f5db93f25c80eb05e3cf275d8cadb915769847f038e3d35d386abda606b40eb21a62e1bb950fdc3eb2dcf046293bf374cce1e9cfee8a3","ssdeep":"","tlshash":"19c08c332b2918704237d029230e71080612518300488812be1c5d581f84f0b20e02c5","size":144,"data":"","first_seen":"2024-10-13T12:14:59.570905Z","last_seen":"2026-06-03T16:04:45.513353Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c733f0a868ad4eb99732cdc1b1ecc949","sha1":"6f41206dd3eaedac5d25dce2e2eec312d0c1cbba","sha256":"8770956853393b34042ccdcccecaa4cfa2ff089e6362bc4a470bd8bd84bd2929","sha512":"f7ef2b47e99558d1aa3c4992c542ab47f980fa7e848906813f47fee435581abcbdd2f4f75669589cc9560dad21b9cb0218f00b150d5c372b6207a8913f086a54","ssdeep":"192:nRs7CP7ahcHs/PYpmw3aqegqCFXMXN2iRVdFWHdW1dW/dW2dWrydWlEu7eXHtW:nRspks/6mqpegH8XxzdFJEu7x","tlshash":"0112c535a3f00a79449352ac2b272f10686fe14bd145a5d9fd1c90e1bfbbca4e5f5288","size":9158,"data":"","first_seen":"2026-02-13T14:14:54.209431Z","last_seen":"2026-03-07T09:52:36.997008Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5540eb43b94d2bd073fe2a131dc71e92","sha1":"7a0a9a70949249d88c5bbedfb80f3401b6f60c50","sha256":"47f3aa345890dc55a3ff6e31b0d98125405137f743696ec3938899ceda6b064b","sha512":"f8b0879e188a80eaafda5a40f1c0c70003e5a5f81f122ecaa13ccd023890492421cea1aa0b1c10d41878913e20d4a2a3eb59c080c43a922ebc39cf18d03811b7","ssdeep":"","tlshash":"b931f02872e619a31123b9fb56ca7b09a030c617e99aef5cbd0c81c16fcba2195d1364","size":1830,"data":"","first_seen":"2026-02-13T14:14:54.2103Z","last_seen":"2026-02-14T01:40:51.884922Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"06724426013d4579636cd8d29a2efeb3","sha1":"ef15f8170410dfbab762422a8b0e7828562fd570","sha256":"ce4bb9ead2d1d338ef6a7b7c420196e6630ed68f41597f6fc47a6bfdc1749fc5","sha512":"4c82c3db2a4d83c97eb6cc069deb6101ab1d0192e3a43455722b995b14fc77b035347aefa177299f0598cae072170295c9e8bc28f5e5baf85bf7f3adc5359861","ssdeep":"192:FRs7CnT3UZVSiRVdAWHdW1dW/dW2dWrydWcfBK3Qv:FRsQ3UZZzdAQf/v","tlshash":"fce1a53ae6f40c7d54abc3fc5f5b7f54092ae053c07650c8ba6d00b0af2ac42e6975a4","size":7152,"data":"","first_seen":"2026-02-13T14:14:54.211079Z","last_seen":"2026-02-14T01:40:51.886626Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7d7cf4c48ffb35910b2e36580671a41","sha1":"6b258a397b7044378b85ad6f595b2dc56f31cc52","sha256":"8cc1500c0f3190aa50ed29e55896397c4fc06ea7bcf9b4ae7e7e412875b397fc","sha512":"ca2f66381e2f64beb2a45551aa6fb67e03a556f09088199d3cf528227a4c6a8a5f06b5ec4acdd7fb082e5b8a09c5a426b9a8073cfc34b40143e04d8db781d981","ssdeep":"48:+kApqQxTgaO2hXDhTSqTHa1FN4zW5TWk1oColopV64zcmpV65Tcc26V6k1cEynVT:+7cQx0aOAs2r1KYCNcsEynl","tlshash":"7081cdad33da08584696303c9a9b9809b1337a0b8685ac4c779f7d509fdf635f8e134d","size":4183,"data":"","first_seen":"2026-02-13T14:14:54.211919Z","last_seen":"2026-03-07T09:52:36.999887Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ced914140d3378252657ef2d7cc69ff","sha1":"bbced9b6af8ca73ce590c2f8e579c9e0c84c60fe","sha256":"4d8fa4b1d1fd94663cd322c8a8e4860265c6ff33d75c725ae1032014a3ce5a39","sha512":"06add81df165833fab52a4b541cf0438af72468385c6c1898327011ac45731d496aa3a810b34e8fa9d2fcd9e0dc68c2cc72395ad81579fec3a280ebb6af3310e","ssdeep":"","tlshash":"65e04f3a6db506208262a4a6b39f637d4a3236577443eb4dbe1c8a408f9b710c0725ae","size":386,"data":"","first_seen":"2026-02-13T14:14:54.212916Z","last_seen":"2026-06-03T16:04:45.514095Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c0257431fa861f97dce85c5019f7969","sha1":"acbc5a185b12c35ffe3ca10ae65f18c6d7cd77df","sha256":"474848af0437cee771d0811e50ac1aab931ef06d162d7dd1f0756c682bc1fed5","sha512":"b09acb2b58cb63db1505312d8cf659147bd20d1c8894436bd4d2a6647493ad1e7696de3e7678c8211c836e33bbc4d87c8cf4940a83ccd4b23b18e799425d29dd","ssdeep":"","tlshash":"b40164665212643645e75cc5b2dbdbc83f30a187e288901b32adcb890f12ec080f6fe9","size":728,"data":"","first_seen":"2024-10-13T12:14:59.579518Z","last_seen":"2026-05-15T22:06:19.432029Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b731d395331e6ff44ce0467de4e74159","sha1":"49ad5d574b6febd4e8abf2de7f782ff71f55cfbe","sha256":"e28342ade176ffc18258d98215323704b7c79a4fd4a5ae63d173830f120ed529","sha512":"00a190ef029afac4cabfabebd7277f585d2b8f460e4fe914f87609288982f1b64449e9fdf34f3c0500a9dbe29cb55ddf60f52005c7d776512403237376e482b7","ssdeep":"","tlshash":"9f511f1470f320358277616e979f10aab964404bee06cd29795cd9581fe1f5389d1edc","size":3135,"data":"","first_seen":"2026-02-13T14:14:54.214687Z","last_seen":"2026-05-15T22:06:19.43283Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"87d52f769022ce134621177f6601839e","sha1":"8523dc85cd3cc6aba46ebc62a93e2d199ea81867","sha256":"2eacfccd9c2471fd883fbb6c56a9f9c6c3e4c9c56735d719a3eb8513e0b36265","sha512":"9d4fa198fe5f4be5d9e9fe8f40a2d5d7889a608f759f5357720a59b24e2a5695967d792e28300fc5d3f82139b12f9c580ec745a644d36c91da87c0e66975953a","ssdeep":"96:m6fsIQEYMzxPXPYU6iNlQ3PnCq4APyinFaWnF3PlxN6iRsdmSiwfr/DMo78cp:m6fsryvPYpj3KqlqiFXlNiiRVdibzIcp","tlshash":"5ee1c938c3e0037d884382697232a924789fd64fe545a529fa7cd0d53f53ca8e5e52ca","size":6997,"data":"","first_seen":"2026-02-13T14:14:54.21548Z","last_seen":"2026-05-15T22:06:19.433471Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/js/flowbite.min.js","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b3bf7664836ca0a1d889b010c154ace","sha1":"ca437ccc8fe48df4cef0a9beb5e2b60b9354052d","sha256":"486c6671f80c00f3b83bda1a667ba1d11fb0b848a0e7ee6a0014dcb8ceab384e","sha512":"dce848fab2bd0da40d6aefe8d87751adeeafd5cffa13031d63deb95276097af721c6f3bb995626a76c33dfd22095af5a2e3a6816bfbd214e0d9007871a0ef8fc","ssdeep":"1536:dY/R2t4FY/9iQt6y7/ZNf9vaChoUh3mcPsZ/JjB3+awTNWQpzS5Pp0O3M1gramEj:Fz3ASlh3jsozk0OPi","tlshash":"06d3e68db790793202df90f1813b1a0b633ba469d48684687529d8ee197cc8a7177fbd","size":135728,"data":"","first_seen":"2024-08-24T06:34:27Z","last_seen":"2026-06-03T16:04:45.423273Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"240e46b3992542f18dd4542a75124693","sha1":"7e11a6aa67b905d0bb84a890abc2abd262b57add","sha256":"3f591f7c4875479a861ac70c0dd9288485d5240b27a9610292dc48dc6f9fd8fc","sha512":"a367eb780e55de205d802a6557fdb69c2edcbad61b89318a87a1e2797b7e233ffe0d7091219fd9ba3d2aa5de9f42a63d387a1d737e93467f50086f102604b895","ssdeep":"384:ph3zVYKmmsrZsxv2FK22W2Ystv2NK2uW2nJoLdbaA3bkv21K2mW2nJIL9baA3b5:RRps9sEsqdbZ3br9bZ3b5","tlshash":"7272645c90e6263e01c360b9f6d6eb18b665d217d68b8e08b5bc52903f93c10f6b7398","size":16318,"data":"","first_seen":"2026-02-13T14:14:54.216372Z","last_seen":"2026-04-06T01:36:58.353261Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"811415c5ebfe6dcb66dae82029248817","sha1":"882578cf44e9cb4240cf2b4ef4ef843af9019929","sha256":"029a7708c6f1ea11dd6ea3f3028d43c37472bf63e9a51c6a2b90553f1782c8ed","sha512":"4da71f16d24c4cfb4fb0a866e4fab836e88540cc643ff4c03d7cbf8c3ffa13cfe9179d41e2a43f734afd3b2e8bb567c2ff99a1d9aed796b97a9c841fc43b1332","ssdeep":"","tlshash":"12217b8c05e2226a129774348f8b1264f1b6c493280ccd067a1c5ba05f2573fdb757de","size":1294,"data":"","first_seen":"2026-02-13T14:14:54.217279Z","last_seen":"2026-05-15T22:06:19.434988Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-06T21:57:34.532625Z","times_seen":337307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"15c3a315d5d530985289704af9a5e93d","sha1":"497aae50216f0980fd74e39315ac01e6342e2a43","sha256":"c946c7eb5e066aa931f0d476be1ec84610e28fd72956e76b9758c766769ea445","sha512":"9de02b68191e29003a221dbab3eda0a3aa9cbe6169cc882a9d7b3b7bb3f7a2493ea48c06682be2b6eafe0829ff23e13566582acccee170d7e529559433ed2662","ssdeep":"","tlshash":"e551304a16f17132022f101d56cf06dc7165a047790dcdf9beac8361cfa0f64a952abb","size":3110,"data":"","first_seen":"2026-02-13T14:14:54.218162Z","last_seen":"2026-06-03T16:04:45.528262Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/js/qrcode.min.js","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","size":19927,"data":"","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-06-06T21:34:28.177385Z","times_seen":61465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ercusdt.com/cdn-cgi/rum?","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ercusdt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:55:31 GMT","end":"Wed, 06 May 2026 12:55:24 GMT"},"fingerprint":{"sha1":"65:1C:B7:EC:F4:51:05:D7:3F:84:8B:15:30:A4:04:D8:0B:F8:6A:E8","sha256":"02:49:56:5D:C4:2A:6C:06:DC:B6:E8:B9:A5:FD:DD:C5:63:92:31:FD:6A:49:C4:3D:FE:43:94:1D:45:A9:34:FE"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: ercusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\ncontent-type: application/json\r\nContent-Length: 1008\r\nOrigin: https://ercusdt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1008,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":475,\"startTime\":1771033226893,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"934ed055-9e7a-4889-b693-fd18e95fbd6d\",\"location\":\"https://ercusdt.com/\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":585,\"domContentLoadedEventStart\":589,\"domContentLoadedEventEnd\":598,\"domComplete\":1048,\"loadEventStart\":1048,\"loadEventEnd\":1055,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h2\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":23,\"domainLookupStart\":24,\"domainLookupEnd\":24,\"connectStart\":24,\"connectEnd\":41,\"secureConnectionStart\":27,\"requestStart\":41,\"responseStart\":161,\"responseEnd\":162,\"transferSize\":36412,\"encodedBodySize\":35608,\"decodedBodySize\":231411,\"name\":\"https://ercusdt.com/\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":1055},\"siteToken\":\"6f3781de55fb4dcaa178dc5ac69359fa\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://ercusdt.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fzjlfcTowbdf1G5%2B%2FsJLWY%2FCC%2BQc6eioKstU%2Bw87E8mhzd16iCL3Ag9HqaKD2zRyrhx8MVOK%2FrSV6T9GiChDPdrCURipkE8gd6Gk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9cd8db8aebfc1a30-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T22:09:47.054277Z","times_seen":16193308,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ercusdt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/i.ibb.co/tw0k8HTP/909abb3f2d5b.jpg","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /i.ibb.co/tw0k8HTP/909abb3f2d5b.jpg HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6784\r\nlast-modified: Fri, 06 Feb 2026 01:12:38 GMT\r\nexpires: Sun, 06 Feb 2028 13:12:38 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://i.ibb.co/tw0k8HTP/909abb3f2d5b.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"17b7cf1614cd9d93\"\r\nx-bytes-saved: 15792\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6784,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bda1bc01c3b2fa378d1ddfbad1f0185a","sha1":"ebd174965c745c5f193784f8ca0b850f8120e146","sha256":"81fe291300aa8bf507da41848d767c28c60ef8d61eac75451974a34549e9dbe3","sha512":"d7ef648e44b999011bbd1c34bfca844440ed76a4afb6f51ec3edc81d00bae722ff5a2c175576428ba46cfa540660baf10206dfcb23a26755375ce070716a97d5","ssdeep":"192:S4OoFvvcX84aZqy9KX7MtPHvfrnhGg6Mb4AYfX:S4XvZNoXovLFb4AwX","tlshash":"ffe19e741a06b2e3d52d06ecb1f4c4378361a774b522ab86586814bb91d0cd393f4cef","first_seen":"2026-02-13T14:14:54.202252Z","last_seen":"2026-04-06T01:36:58.345415Z","times_seen":4,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":16,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/pagefind/pagefind-ui.js","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ercusdt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:55:31 GMT","end":"Wed, 06 May 2026 12:55:24 GMT"},"fingerprint":{"sha1":"65:1C:B7:EC:F4:51:05:D7:3F:84:8B:15:30:A4:04:D8:0B:F8:6A:E8","sha256":"02:49:56:5D:C4:2A:6C:06:DC:B6:E8:B9:A5:FD:DD:C5:63:92:31:FD:6A:49:C4:3D:FE:43:94:1D:45:A9:34:FE"}}},"request":{"raw":"GET /pagefind/pagefind-ui.js HTTP/1.1\r\nHost: ercusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2XRjUTR1pDId23NObY4qAokLjqYORmdPAwho%2FnCDrJywvV9fL68WT%2BJhipNnrvOZc0OpjZNZdlC3c07m1G7X48feszdTWnX8hzwV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: 9cd8db860b7a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T22:09:47.054277Z","times_seen":16193308,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ercusdt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/i.ibb.co/6h4NRVx/image.png","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /i.ibb.co/6h4NRVx/image.png HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1163724\r\nlast-modified: Sat, 31 Jan 2026 12:57:26 GMT\r\nexpires: Tue, 01 Feb 2028 00:57:26 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://i.ibb.co/6h4NRVx/image.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"55549d1320830dbc\"\r\nx-bytes-saved: 564498\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1163724,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0c46d831ea373ef24a39bf9707e83328","sha1":"3f15214d17170de97629e9a1af0f90252e100cfc","sha256":"1c09fa57b3633eac21d9a08b8fab5295b37383d83209224d4f59b9074a40b059","sha512":"47d3e48dbacc50d40ae9b45f41facbeabaa382789ab1a300856f740a2bcfaf76c9096fe22c9560225f61cd6a394784e6bc3b2723b54a327469e9edbf81e90e47","ssdeep":"24576:bebaYbHbRSIl/mQ2lT4OlS33DuUouBP/oSooNUIbuMZP+60j:ibaIgI0DlS3TcU/rJ2UZZPN0j","tlshash":"522533d945d4361c7b0d2ed58f8e7449f85910cce1cecf9c38366aca89e6fdaa3241a4","first_seen":"2026-02-13T14:14:54.19905Z","last_seen":"2026-03-07T09:52:36.949864Z","times_seen":3,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":23,"receive":314,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/i.ibb.co/tyvzG3v/image.png","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /i.ibb.co/tyvzG3v/image.png HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 61674\r\nlast-modified: Sat, 31 Jan 2026 12:57:25 GMT\r\nexpires: Tue, 01 Feb 2028 00:57:25 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://i.ibb.co/tyvzG3v/image.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"57f44e357b7ec27c\"\r\nx-bytes-saved: 74468\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61674,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e6b2091ea71b599c1570876fef3c6d18","sha1":"65ff2f2c897c00e9ed1b2cab1c84a0418eb21f52","sha256":"5ed32009bfac55799af70bb3d7dd42c91030495376de423e24055923d5f1d9d5","sha512":"e71ae67e7901e0bade1cfa6bf3a5b36602e25e16d4f1a5aed306f374865ca0b7689a00393795e9f383b85ca1c1cfc7c49d6f0706cfc89c8b7ae0a7a7b7bf4c7a","ssdeep":"1536:cYirK5uRS6kLgGqtdKzpZPkTmUCY4EddrdOfQxkoXI+S:virmukgGqTKzpZPkTmDKdrdgQ5X8","tlshash":"3453f145b1537a45d706319bfbde094a7279a0fed618b62e36d2809a0b622680f13dcf","first_seen":"2026-02-13T14:14:54.181214Z","last_seen":"2026-03-07T09:52:36.983175Z","times_seen":3,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":23,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/i.ibb.co/rRcYxW8w/image.png","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /i.ibb.co/rRcYxW8w/image.png HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 280126\r\nlast-modified: Sun, 01 Feb 2026 07:12:31 GMT\r\nexpires: Tue, 01 Feb 2028 19:12:31 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://i.ibb.co/rRcYxW8w/image.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"58712dc15639f340\"\r\nx-bytes-saved: 237154\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":280126,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e33aeae773bf9237196a4f62cdc462dd","sha1":"ff0fee6f69d3d1e491d818eeba96e368ebfeea45","sha256":"447ddff0469eb6e6b7524b4ec4d0ef6a633d8364ae2b537fcc68546a4bfbec78","sha512":"7377a5c48bb52f9426b2a2ad311038f5f428b51889e9297726a8179b39b0e1be544401f7da6dcd27441520bbc490ca32c4829ab212f42c3665808905ae607000","ssdeep":"6144:O1gqyxjSSOAXfZ/rcPbUaD89sbg3Yf38sp0d/GbsqKcPgCQ:OmqWKAh/rIbUaD89ug3G38K0xGwcICQ","tlshash":"065423bed07015b9278cad1c9b98de9640fe94b11bd5b746036f0cb903c9a721e5cb2b","first_seen":"2026-02-13T14:14:54.19821Z","last_seen":"2026-03-07T09:52:36.982037Z","times_seen":3,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":23,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/i.ibb.co/TBKnmXyL/76303b7148ca.jpg","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /i.ibb.co/TBKnmXyL/76303b7148ca.jpg HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15032\r\nlast-modified: Fri, 13 Feb 2026 04:19:27 GMT\r\nexpires: Sun, 13 Feb 2028 16:19:27 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://i.ibb.co/TBKnmXyL/76303b7148ca.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"bd048badc98d67d1\"\r\nx-bytes-saved: 29126\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15032,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5c9ad34cb027ffb744daf601c5fde5d2","sha1":"e12317b225e22da7a81d7500a7d90329c159e7a8","sha256":"60a233a462cd16242bc86fa05a02e23202e9d6fd64f8720dd0ed01075e6db67c","sha512":"0be2efa564fa569cf0e8e5167462afdcb9dbbec87393a39eaafb5e15622f67df7d04ae7e1d207967698fd94d12e086e9574a8053fc888d085495b99f2656f1ab","ssdeep":"384:dP9q658Ocb1/x/cHcWPQJFDr4GCEkokcf6fjLYPoQ:d865tcbDK+p4jEjSjH","tlshash":"4562bf9217af352d744728b3081a75a41c440e093f4bdeda0376788e973b5f0eaa23b7","first_seen":"2026-02-14T01:40:51.856169Z","last_seen":"2026-02-14T01:40:51.856169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":19,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/i.ibb.co/WN9VBSpK/f88cab55c71a.jpg","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /i.ibb.co/WN9VBSpK/f88cab55c71a.jpg HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8584\r\nlast-modified: Mon, 09 Feb 2026 07:38:06 GMT\r\nexpires: Wed, 09 Feb 2028 19:38:06 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://i.ibb.co/WN9VBSpK/f88cab55c71a.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"bb161d430860307d\"\r\nx-bytes-saved: 19914\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8584,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"61277e0072f6fbce8cd8c4c0c50b8727","sha1":"d09bc86b0bb6308ca50e138a84eea7c7d0b018da","sha256":"80416f50e74d0e1dbbe030fe012b1424b8c8928df46fa4fc636a39c8e7a831f3","sha512":"12ce0af591d3674a984ed68e70ab3001b2e1de55ec70ee7c88f93b4e633e70224950c0444a58cf5a3f9fa4614b162d49a9cba0ded89c3f9284c4df87f3780f6b","ssdeep":"192:YCtqN4a9AR19uUUufFbV+bCU9BrHCuMGqAoPqR9qzjkWnz:dqSwAR7FU64PHC8PRgzwWz","tlshash":"e002b072dd45c3dea88652ea3b2502b11e35f717ca1008da8eca7973e3539c97db3244","first_seen":"2026-02-13T14:14:54.194521Z","last_seen":"2026-02-14T01:40:51.857123Z","times_seen":2,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":17,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/i.ibb.co/6ch4kQG4/0592a8d1f14b.jpg","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /i.ibb.co/6ch4kQG4/0592a8d1f14b.jpg HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10946\r\nlast-modified: Fri, 13 Feb 2026 04:19:27 GMT\r\nexpires: Sun, 13 Feb 2028 16:19:27 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://i.ibb.co/6ch4kQG4/0592a8d1f14b.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"3a27a5ef6d43d5ce\"\r\nx-bytes-saved: 17847\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10946,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dbc787635a180617eb352b2128cc5e6a","sha1":"6a33137d03be3bb2e427c457b3fe04b72e503b51","sha256":"b600ad59715dc1069202b4e22562eef89ad6c82daba3d05ec7c232ce3d2f0e55","sha512":"e6134926b088e309629607eece494ad62a8f57c565f7f41e30bd941a45332eae0f78a58b2427de6b75d61d80a58c134a5ef4cbed405b5427c1199c014401871e","ssdeep":"192:gLc8lROJQi83PlPDdCbjRslzNdvHAd8UUu4Hw0BD5o9Xkl:gLcMkJ4PJDd6UnvgIu4HPF5ou","tlshash":"6e32b0087b2cada27439c131fcc7313ee0d2ee72b202d8e5730795db1d98a5aa9c0551","first_seen":"2026-02-14T01:40:51.858Z","last_seen":"2026-02-14T01:40:51.858Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":24,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datahub.pages.dev/okx/offerlink.json","fqdn":"datahub.pages.dev","domain":"datahub.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datahub.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 20:25:51 GMT","end":"Sun, 03 May 2026 21:24:30 GMT"},"fingerprint":{"sha1":"AE:61:AE:D2:8F:CC:64:F4:0F:D4:F8:5F:64:B3:6F:7A:EF:44:EE:CA","sha256":"A2:11:E7:D8:E5:60:38:A8:F5:E3:8E:C1:FF:8D:73:12:0C:CD:73:07:86:1F:C9:08:48:A7:CE:59:E1:CC:3D:C6"}}},"request":{"raw":"GET /okx/offerlink.json HTTP/1.1\r\nHost: datahub.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nOrigin: https://ercusdt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:40:28 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ezk6UVVqAwlyDhlGwAOaGtiM4MEIA6V6xUr4RZlH1o0JiIffRN2IuSylZm8jIs26fiMY%2FBR5ooY3YTrgxBc2JAeMlhlOLplY1n7LqVgOLG4m\"}]}\r\netag: W/\"00561fca4bdd73a12d4bf6143fe04529\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd8db8a7988c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15320,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text","md5":"c00618f95d20a3c67b7be5273981c105","sha1":"baddfea561fe07f851d3bbae1372a32c0a85d4b7","sha256":"fc5c81b2d57234e139d939147b783b608ca2a87b92be3260208e00a2bd9b71a6","sha512":"f6f2717c6798dfd540f9e5179236adf44ab5f061a5772289e32f14901d802edaee25457a7261220f01519551819b6bc51dc68a25bb3b40311a48e5ba294aa13b","ssdeep":"384:97LBEc37WBe5VYQfPQXHh+nKKK9+a7cfz55p2GTvaGH:J5b5v","tlshash":"d3621777c0ac1ca31380c0a6508b1a5ce216471f8c84bb82f79b5a1d9f9f8bf75b565c","first_seen":"2026-02-13T14:14:54.200189Z","last_seen":"2026-03-07T09:52:36.985389Z","times_seen":3,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":25,"dns":8,"connect":1,"send":0,"wait":138,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datahub.pages.dev/okx/en/cta_landing_promotion_data_en.json","fqdn":"datahub.pages.dev","domain":"datahub.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datahub.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 20:25:51 GMT","end":"Sun, 03 May 2026 21:24:30 GMT"},"fingerprint":{"sha1":"AE:61:AE:D2:8F:CC:64:F4:0F:D4:F8:5F:64:B3:6F:7A:EF:44:EE:CA","sha256":"A2:11:E7:D8:E5:60:38:A8:F5:E3:8E:C1:FF:8D:73:12:0C:CD:73:07:86:1F:C9:08:48:A7:CE:59:E1:CC:3D:C6"}}},"request":{"raw":"GET /okx/en/cta_landing_promotion_data_en.json HTTP/1.1\r\nHost: datahub.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nOrigin: https://ercusdt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:40:28 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GMBuCEFR75CgGCY1fHghIrL1eCnH7GO4psfdcVDfE%2BoAJI5pucujEPNIR4%2FSGX35KaMMwclIj2dcdb0jGVdcGtVWErVuPBjOqB2FPSmnoO4w\"}]}\r\netag: W/\"3dd4c38dbf6bdeb56c88a790a1519cb1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd8db8aba3fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2908,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9aa997939da46516c1b3f01a7dc4b69d","sha1":"fbc49c17ae34a83112170984f537a152bfaf9e8f","sha256":"b96f31ff088fd283f8e4eb15fec9cd8dd6ee269dc49d8d50992638f91f1910a3","sha512":"b86fe8285d60364d0e257b7e49f72659c2f5c935e36972c3f49a7a8e943cc2c3ef81158eda16a0f4590aa91cf12db91bca4e738d9344fcba394840eb0554f10f","ssdeep":"","tlshash":"9851a914e3707dc6011662646a2c412695e65b5f0cb9692c3f8d039e2f0da4f89fb7e8","first_seen":"2026-02-13T14:14:54.18568Z","last_seen":"2026-02-14T01:40:51.859647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/media/logo_hu14914300139070109146.png","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:28.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ercusdt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:55:31 GMT","end":"Wed, 06 May 2026 12:55:24 GMT"},"fingerprint":{"sha1":"65:1C:B7:EC:F4:51:05:D7:3F:84:8B:15:30:A4:04:D8:0B:F8:6A:E8","sha256":"02:49:56:5D:C4:2A:6C:06:DC:B6:E8:B9:A5:FD:DD:C5:63:92:31:FD:6A:49:C4:3D:FE:43:94:1D:45:A9:34:FE"}}},"request":{"raw":"GET /media/logo_hu14914300139070109146.png HTTP/1.1\r\nHost: ercusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 429\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"5b7bfbd34ea8127bcd259260e787b225\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ls8m9s9lx9CuOjPLlm908YVGkHpPIoHZdNEBneQScv96vxT%2FFn9wFo3Wen61sahupIksrfEapDZfVECwikblEkhbArIidVjpZcoo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 01:40:28 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: 9cd8db8c0c171a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":429,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced","md5":"7c37994490df844b8bca8b7d9bb38299","sha1":"fe88df74c4bd65a782033c48d8c4b1b900c81ed3","sha256":"e11d279fac31fc9bde3565725702be7a13f1a32e0a9504ffb22997f3cd48b7f9","sha512":"d81eabae3fffd92ba1eda93c436e1a8ebf4abea91c8c5ac34c31db12b0f6f7ba445a2c9f6ca24ca3981a3bc166e8a3890c60ba97bf634df7a39a92b7f360a47b","ssdeep":"","tlshash":"78e0239a1d42406f84815f72908729607cc5305d0e0184cc37ab61f04615168b0f0b84","first_seen":"2026-02-13T14:14:54.178056Z","last_seen":"2026-02-14T01:40:51.860519Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ercusdt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T01:40:26.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ercusdt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:55:31 GMT","end":"Wed, 06 May 2026 12:55:24 GMT"},"fingerprint":{"sha1":"65:1C:B7:EC:F4:51:05:D7:3F:84:8B:15:30:A4:04:D8:0B:F8:6A:E8","sha256":"02:49:56:5D:C4:2A:6C:06:DC:B6:E8:B9:A5:FD:DD:C5:63:92:31:FD:6A:49:C4:3D:FE:43:94:1D:45:A9:34:FE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ercusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RnXHGgRhBw5Z3QDxNNRaOZloPnFmOMh%2BP5LBjAz132MbCpjvQlwTO9rzvVwS9TswH5IE6eVSAeyfHm2xe6irNZR1I0t9xaiHtg5u\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=7,cfOrigin;dur=100\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cd8db845b255a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":231411,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1219)","md5":"08f5645b24e2bf463fd9041117d9cc1c","sha1":"5c6acb79779adf58c11c01242ccef220c633cf9d","sha256":"ec2c55e9fd991fd58fecd8e6321597672e8aafbc31ce832b6fe2dae064dc7970","sha512":"15f8ed9ef986a32a00f139d21ac667ad4afcf9378a782018e323de9f917324bc606d30e0f931be1b07cbc3b1c449505f523d81c83dfd1154a3c0c25077acc207","ssdeep":"1536:y7Ig+9RspPghsifiH8Ks22EYYWjsysrcr4eBroQ9kGEkQJ3AAvjl1DcvZsEgbhs/:Xg1l8/0YQsuQ60osD3jtD","tlshash":"b6342a39a2f0197e404382f4ab26bf1d6d9ee517c05f9584f7ac82f05f86c92ee47198","first_seen":"2026-02-14T01:40:51.861731Z","last_seen":"2026-02-14T01:40:51.861731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":18,"dns":0,"connect":1,"send":0,"wait":119,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ercusdt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/pagefind/pagefind-ui.css","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ercusdt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:55:31 GMT","end":"Wed, 06 May 2026 12:55:24 GMT"},"fingerprint":{"sha1":"65:1C:B7:EC:F4:51:05:D7:3F:84:8B:15:30:A4:04:D8:0B:F8:6A:E8","sha256":"02:49:56:5D:C4:2A:6C:06:DC:B6:E8:B9:A5:FD:DD:C5:63:92:31:FD:6A:49:C4:3D:FE:43:94:1D:45:A9:34:FE"}}},"request":{"raw":"GET /pagefind/pagefind-ui.css HTTP/1.1\r\nHost: ercusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-store\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q1Z%2FZUdU6koMlPBxqG1%2BQRvjF59%2FwUZxz%2BXf6Yj7Ud70jWe0kva2MD5hx5WSOQ%2BE8mo6tvmYyWFlUDsKnWjn%2BZiO6iaG9YekLOXq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: 9cd8db860b791a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T22:09:47.054277Z","times_seen":16193308,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ercusdt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/i.ibb.co/PzbVmvw3/image.png","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /i.ibb.co/PzbVmvw3/image.png HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 288680\r\nlast-modified: Wed, 11 Feb 2026 09:30:59 GMT\r\nexpires: Fri, 11 Feb 2028 21:30:59 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://i.ibb.co/PzbVmvw3/image.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"054919bda8f256ff\"\r\nx-bytes-saved: 270906\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":288680,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c9694deed50cd342e2f767d60e485aa6","sha1":"e9d12fa74da4d913b617cb13fbe44afbeca06c06","sha256":"11ec845bf37485fe2d38ec6a0d7a6d8a1d0adbec544c140a0871556d1ae572ea","sha512":"63b7c7670f2d0573dc5c58243f5209e414ed14fcfef981dd00f0014d149f9873fdfc5ef96b2c59725f28fa8cdce447e8df7a3a0f665eb12dfa18259b8a8f686f","ssdeep":"6144:lovdfPN6KhdPkfwB6/GCkrvqzzNOJ65hg9kk5O1gMu:Sf7dPzvAzNbTgaDVu","tlshash":"325423c716589204d2fe6ffd5b75e50a4a08be163432f321c2ff8a16b95b92d03768d2","first_seen":"2026-02-13T14:14:54.186511Z","last_seen":"2026-06-03T16:04:45.442645Z","times_seen":10,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":9,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 15248\r\ncf-ray: 9cd8db8699fd23eb-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"620188b3-3b90\"\r\nlast-modified: Mon, 07 Feb 2022 21:01:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 74976\r\nexpires: Thu, 04 Feb 2027 01:40:27 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BuR48qpziExNb344Tz7HkDT7mb%2BESuwGJDV9isyNHJZIMKxfKb4MprzgpH5XQJklYcj7ZvnaV3RmJD6MpYVBz1AbuOyW1MGJ5RUftfi7E9g1OgYVTBhD3QMTtpyEdUzFFP%2Bxss%2FA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89220,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65317)","md5":"dfb8fc36e102730fddf78b5494eb0035","sha1":"b513d9a39af2ee145f12c1ba03f9982960c47029","sha256":"8d321d88cb97fdedc3189506c25de9292c6e73a60ebaab496243346c6404480e","sha512":"f6eb006b5d0844ed078689e9c80215a63af294fbe80f088f52229d5a4e6ddcfca8958d5c39de03484d066beae2e00b93ae83d1e5a42f5d4f710baa8e3e7cc57a","ssdeep":"1536:iUMVM6MVMkMVM9MVMNMVMispxd1zJJ29Nll3IV7UHsR+z:Dd1NY95IV7UMR+z","tlshash":"8a93a9e9e04c05d56732c44baf99b37ca5b6f73cd5810da9f02f580c19d26a822c6f7a","first_seen":"2023-04-06T16:57:15Z","last_seen":"2026-06-06T21:42:05.876504Z","times_seen":11443,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":11,"receive":1,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/i.ibb.co/PGchZ0DJ/92f2ce99e098.jpg","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /i.ibb.co/PGchZ0DJ/92f2ce99e098.jpg HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9092\r\nlast-modified: Tue, 10 Feb 2026 08:03:56 GMT\r\nexpires: Thu, 10 Feb 2028 20:03:56 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://i.ibb.co/PGchZ0DJ/92f2ce99e098.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"6fb8a953ad60a796\"\r\nx-bytes-saved: 23547\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=14.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aa4bfa90c7109f51cc6d894a452868c8","sha1":"90f7048149246c38d7084745c2f2e9abbfc7ab0c","sha256":"3927fba308fdaa38c5e2c7edcef3d86f9f853426b4b2157adc3fe7b1ec9beb11","sha512":"7a1c4328e9401d7558d410ae4d535d96b6c348114e69d325612d21b8d0103137594e64d622965ab7ffb61b5feb2c1a5b0f6524062b2944e4eb630616a757fc0f","ssdeep":"192:1zZv0UKB23iS2Y8m0FVCqcSYIUTxATDCBYrX:FZS2iK8mF8UT6/r","tlshash":"4f12bf3463e84b97c433d5b00aa95985510baf3ceba1c07666bd16d4d5b29ccac3e80e","first_seen":"2026-02-14T01:40:51.863936Z","last_seen":"2026-02-14T01:40:51.863936Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":5,"dns":0,"connect":10,"send":0,"wait":27,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/i.ibb.co/ZQJ7nnZ/e7f5b9a9287b.jpg","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /i.ibb.co/ZQJ7nnZ/e7f5b9a9287b.jpg HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20596\r\nlast-modified: Fri, 13 Feb 2026 04:19:28 GMT\r\nexpires: Sun, 13 Feb 2028 16:19:28 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://i.ibb.co/ZQJ7nnZ/e7f5b9a9287b.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"19e503e4299a32db\"\r\nx-bytes-saved: 48531\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20596,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"610e7dc0fc4a8e631bbf174abd2c5a7d","sha1":"2c7a3946d2b67be4efcf5a370b4242d5567d54fa","sha256":"87b948e51c72f627e3fac906090c8d02acda172dc56a136c12dc044f80ef9231","sha512":"5170bf85490fbd0e87f0da32f0aa478f33fce91becac947509ba29fc0a37cbb3a3f4b1536087cc2fd6b2acfb24d0e2d428f55e2001eff2260e894cb1d006175d","ssdeep":"384:A+V+VWRYm4p7KqgMChutNQLv5cIGZxWuwTX8arW32OKroKiPYMblBcHKl92RU:A+V+VWa/OqtNemIGZM/D8MnTrcPxcq35","tlshash":"f292e03679dca972f0332a54e157084eaeec30c135acde5d26ef8ea0f20014155d4afe","first_seen":"2026-02-14T01:40:51.864886Z","last_seen":"2026-02-14T01:40:51.864886Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":14,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/i.ibb.co/QvBj3kkf/985b55d85442.jpg","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /i.ibb.co/QvBj3kkf/985b55d85442.jpg HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21080\r\nlast-modified: Fri, 06 Feb 2026 23:13:19 GMT\r\nexpires: Mon, 07 Feb 2028 11:13:19 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://i.ibb.co/QvBj3kkf/985b55d85442.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"d8e314afe6345542\"\r\nx-bytes-saved: 32847\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"412446e33750ca7d57547ec2d2e82caf","sha1":"c45d1f0fbe6d3b88b407d55380fcc4e55cfd0736","sha256":"ef3c536e92d715b6eeacf247eb9957bac0eea110af3fbf4460e71ab3e8f76ef8","sha512":"77b838a4210ef3f2a07076f9e69f72c7f27c28a68144e47f12a92a3f321bd8433488c0d6e8c4ad11c118400e2148a1ace52c949203e38235e91be59a7585f652","ssdeep":"384:SiBRAs2YcUHQYm2DEsNCCgrEYWhEelJk9s+FhkrO5tFubfRPwgRMdQV:SiBp9hwYZUDrbeQ9sIhkWu5w2IW","tlshash":"eb92e1f5f2eefde06e401482827b241a1738c901724f6721ac92da3ba5a47e25d8fc85","first_seen":"2026-02-14T01:40:51.865644Z","last_seen":"2026-02-14T01:40:51.865644Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":14,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/i.ibb.co/JWH4xKnC/image.png","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /i.ibb.co/JWH4xKnC/image.png HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 56726\r\nlast-modified: Sat, 31 Jan 2026 12:57:24 GMT\r\nexpires: Tue, 01 Feb 2028 00:57:24 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://i.ibb.co/JWH4xKnC/image.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"13ef4dd56989ba47\"\r\nx-bytes-saved: 48917\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56726,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3c8365a733c581dcd2cbcedef93aa007","sha1":"4b73e2f3c724b43237930491bef7aa3cebe00388","sha256":"095cdb3c7c67d881aea0244750c541b8f94bb1d67de9965fc39520d096e9a464","sha512":"1c1067380773c92b1aa40d6d804ae14c2996c430be835d0f35b2d25b86ba44637f0c26ffbc17d8d30054e2a167381ac1b41e07e5fbafccb7d80563b5671c252b","ssdeep":"1536:8mmmm6UXyTKddp21rRs0x1JD1g/73RBepj5e5V24YlAAkRV5a:8mmmm6UJorRsw1DO7hQpFO2OAkRm","tlshash":"1643f20cc2f6f828b373ba373549971466d81dc482cb0c62485967dbf5bb9cb2566c72","first_seen":"2026-02-13T14:14:54.192746Z","last_seen":"2026-03-07T09:52:36.968784Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":9,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/i.ibb.co/S4srtmW5/image.png","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /i.ibb.co/S4srtmW5/image.png HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 98856\r\nlast-modified: Sat, 31 Jan 2026 12:57:25 GMT\r\nexpires: Tue, 01 Feb 2028 00:57:25 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://i.ibb.co/S4srtmW5/image.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"f1aa3ea0827ec560\"\r\nx-bytes-saved: 224423\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98856,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e3a8d49574b6cc8e7fbd3c1ef5ed96d7","sha1":"8d676c5e119d886e873b16e15c24ffb84a98592e","sha256":"84f133f380d2337a67182e67962ba1a0a8455d228d2c36ae2cd7bafd4be25d4c","sha512":"a679e1eaf8b5e028080ac9aa64d027f7f00cdc0aab4c37f1c7f8eef6f1212ba028ae274424dff31304497f014377c8af9a01302543c8894917447eb2379fbe69","ssdeep":"3072:nYwOFDA37GxU3GRcGXth6LP66tjoJcEK7X2JV:d2A3nGRLXth6z6ySQX2v","tlshash":"cea312e4d27f24cc6d033de593e826abe7a45eeba88cbbf5048e510d214440ed27e5d9","first_seen":"2026-02-13T14:14:54.183872Z","last_seen":"2026-03-07T09:52:36.952478Z","times_seen":3,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":24,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/i.ibb.co/RTrFqdSx/image.png","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /i.ibb.co/RTrFqdSx/image.png HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 189746\r\nlast-modified: Sat, 31 Jan 2026 18:00:17 GMT\r\nexpires: Tue, 01 Feb 2028 06:00:17 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://i.ibb.co/RTrFqdSx/image.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"8388b38238d002fc\"\r\nx-bytes-saved: 125046\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":189746,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"27bd4ed60e0fff215ae83e421716759a","sha1":"e01af4838e0138f4781c4b1167886c493570aaae","sha256":"e698024f03d69a1175e11617ec8f346755fbf99664b60d28fe12bd63066f9e15","sha512":"1ce920f361f2c7cecae575ada1ddf6aeb642a4adcaee5184b5600964d3c49a754881ce0c04610fbdf9c85a01a965edd047bb04ffebfb5585af7c4ff8fdaaa03f","ssdeep":"3072:GBpkmcMlUZXsJ5CJHD6r/XgaIYSlDAyC3Gj6qX+QSGai6+H9oDV2lN9yzDa:kWmJuZ8m+rPbIVlUyC3GGGQUOAyzO","tlshash":"2c04236b810dbc493e6c29eaaa9c843bc201c3b7a82cf152877b5df6855bf52d0d4445","first_seen":"2026-02-13T14:14:54.182195Z","last_seen":"2026-06-03T16:04:45.450085Z","times_seen":9,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":23,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/i.ibb.co/F4TvMrsx/8cd2e8a5e508.jpg","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /i.ibb.co/F4TvMrsx/8cd2e8a5e508.jpg HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7212\r\nlast-modified: Fri, 06 Feb 2026 18:22:04 GMT\r\nexpires: Mon, 07 Feb 2028 06:22:04 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://i.ibb.co/F4TvMrsx/8cd2e8a5e508.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"81fef45c4b34d5a3\"\r\nx-bytes-saved: 16797\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7212,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"71f5f2fde5d33977b1224368e157dfb8","sha1":"5914c5895f7c8fdcbe86a21dd3c8f2ca6a67396e","sha256":"c5ed5478979a6ae87223e2d85c925e0cf819ce5a6b5c7eed190f7066e8186321","sha512":"1b364a7f450954b029be2dd87a9724832ad0ed8b07ce7ebafe7359b856c160cddc347e29f1731faa0ad3a18231235a6efbed85d770065c66017d164d5eb6fb2f","ssdeep":"96:At727+4B7tSKA9BaFBogrEdmijPYuFuqvWsD4du/Z8DlN3KTCyE8heIFnO5pP6Cv:u7277tSTkBtr2w7lGS3P1KApDhmw3","tlshash":"86e1907d359b8fa23b275c54169c0108137f69f952852764d78bb7eb87c012f65ce30a","first_seen":"2026-02-14T01:40:51.870505Z","last_seen":"2026-06-03T16:04:45.473469Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":23,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/i.ibb.co/S7ZSvMfk/3db5f275e78b.jpg","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /i.ibb.co/S7ZSvMfk/3db5f275e78b.jpg HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7774\r\nlast-modified: Sat, 14 Feb 2026 01:40:27 GMT\r\nexpires: Mon, 14 Feb 2028 13:40:27 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://i.ibb.co/S7ZSvMfk/3db5f275e78b.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"704f0e8a75046fe0\"\r\nx-bytes-saved: 15093\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: MISS arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=129.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7774,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"25d544d686ebe05d9847bd4ebafaf251","sha1":"df51d53400785237290bbd733a94f5825a0ed903","sha256":"04d061e827aeb51b406ee8434a22a2bfd29333571e523e4360327a7b7fd271f0","sha512":"c0e1e314e357de9f9ce224dc313b7df3cdc48bf6fe9493b4d5846916cb44ac0934dab41de6742e7517a118db4684aa758689530c7a02b5833069069002729b35","ssdeep":"192:9kifAEAkLoY8iCqylspXKL8fSS15qaHaXYHSa:BAEtzAoXKL6unXYH3","tlshash":"06f1ae4425525ecc7e8df792864c2822d99c7e2ee46c8116e5138af6f1e0a639dc0251","first_seen":"2026-02-14T01:40:51.871368Z","last_seen":"2026-02-14T01:40:51.871368Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/i.ibb.co/Q7BDfD8j/image.png","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:28.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /i.ibb.co/Q7BDfD8j/image.png HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 01:40:28 GMT\r\ncontent-type: image/webp\r\ncontent-length: 606\r\nlast-modified: Sat, 31 Jan 2026 12:57:24 GMT\r\nexpires: Tue, 01 Feb 2028 00:57:24 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://i.ibb.co/Q7BDfD8j/image.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"06c1277652649409\"\r\nx-bytes-saved: 7303\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 26\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":606,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"85b50ce6c7622273810bc6a686142028","sha1":"8ed4cbbd95016ab6a1449177435bc9259a075315","sha256":"9439c1e7c17cec67f805b141bcd162e0b032d0704ad6661b5a5ad3a5ffad305f","sha512":"77fd23d1a35752e120a277a88e42d5f202f5fb2d3ff421e33d7b7dea559bda45a0358e58ca04a1745f5564a724104cd1976abd0719d9d87d775221a7bcade1a4","ssdeep":"","tlshash":"75f06231f16ac04da047c69df7e40558bad2b0133275a40245fca0f11e348cc2c201da","first_seen":"2026-02-14T01:40:51.872274Z","last_seen":"2026-05-09T14:04:25.03598Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/i.ibb.co/2YH89wRz/5388f9223940.jpg","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /i.ibb.co/2YH89wRz/5388f9223940.jpg HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10896\r\nlast-modified: Tue, 10 Feb 2026 08:03:56 GMT\r\nexpires: Thu, 10 Feb 2028 20:03:56 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://i.ibb.co/2YH89wRz/5388f9223940.jpg\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"64a9690954ae2565\"\r\nx-bytes-saved: 17919\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10896,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dac61232fd8d70ace4fb077568fbe0e6","sha1":"b21f00b5c3bbbd84806317ee84b8025ed49de1d4","sha256":"a5785c9a789b283ed7da5df6620737b5264c2fba15ef2e480c9dd028f34304a0","sha512":"732fc00eebd26ac73c912b9b7aa1e77ccba6794ba67595f393d33b904c1520a9993f224048ac739982f7733d7865af0ff817272b29e7fad1031b07ac84bd288e","ssdeep":"192:oTCaDIeMaHQNy4qbjYm+sjhd16S7DydSN00D+8ntybMNjX:cC6HQGbjrPpDcOntP","tlshash":"2a22d027f47c94d951fc46f7b98508c295d0f163f8a8b4cae2b99084b13ac847d5b831","first_seen":"2026-02-13T14:14:54.190105Z","last_seen":"2026-02-14T01:40:51.873181Z","times_seen":2,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":13,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datahub.pages.dev/okx/en/cta_app_download_link_en.json","fqdn":"datahub.pages.dev","domain":"datahub.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datahub.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 20:25:51 GMT","end":"Sun, 03 May 2026 21:24:30 GMT"},"fingerprint":{"sha1":"AE:61:AE:D2:8F:CC:64:F4:0F:D4:F8:5F:64:B3:6F:7A:EF:44:EE:CA","sha256":"A2:11:E7:D8:E5:60:38:A8:F5:E3:8E:C1:FF:8D:73:12:0C:CD:73:07:86:1F:C9:08:48:A7:CE:59:E1:CC:3D:C6"}}},"request":{"raw":"GET /okx/en/cta_app_download_link_en.json HTTP/1.1\r\nHost: datahub.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nOrigin: https://ercusdt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:40:28 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0eJB5i67qsTbx3fS2KEhbHY0NujBK5msUBwOsEhakM%2BFaG8xGRbPuYYdtQ0FYLTCRrv3EGCs52tCCWT%2BtKZUM5ysYs7r%2BNLu7EtIwrqcp3N\"}]}\r\netag: W/\"f559e1d1a72182d7b923e9627a30c1ef\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd8db8aba49c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1295,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a4ce698592a1311c7a69678f36e8bb0a","sha1":"d394d5463d1f10ea44de7e4f8f6d868e4e95ce06","sha256":"370be5eb87857e2ced272c65ae1604e725b7ae5255af9ce6632e2aaa2a6d4c78","sha512":"fcf79c81c48862f6e369e43a39aaea34e66e7177601a6ff63bc077d460000265f7fc49bed7da39119fa426015a4b2334c082beeac68eadf674f162d0c22e17c1","ssdeep":"","tlshash":"83211d65f3053ac751a66060bd79452a5a952b9f0ef0f3217e4e038f1b2a17e2d612fc","first_seen":"2026-02-13T14:14:54.195468Z","last_seen":"2026-02-14T01:40:51.874053Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/media/logo_hu16810768535902201733.png","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:28.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ercusdt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:55:31 GMT","end":"Wed, 06 May 2026 12:55:24 GMT"},"fingerprint":{"sha1":"65:1C:B7:EC:F4:51:05:D7:3F:84:8B:15:30:A4:04:D8:0B:F8:6A:E8","sha256":"02:49:56:5D:C4:2A:6C:06:DC:B6:E8:B9:A5:FD:DD:C5:63:92:31:FD:6A:49:C4:3D:FE:43:94:1D:45:A9:34:FE"}}},"request":{"raw":"GET /media/logo_hu16810768535902201733.png HTTP/1.1\r\nHost: ercusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1206\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0054dc1fc22d18c66fd1f3e176a6dd14\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l47gyXt%2FLDm8ONQ%2F9sYJ3NFCw33dcmCLBgsgvaAH0cwYNwNTmcAgNANcMzd4X6xKBRteNLWFZMS15lbuDLwpvcTpj8xJLoL%2BDq5z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 01:40:28 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: 9cd8db8c0c151a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1206,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"f378e07e370814984e25def687e3a447","sha1":"3d620da591f8abda0d324f15a3ec4f19af159aaa","sha256":"00690ff5925b9ebe338715e22dd1ec85cace3b284b1fb5196afba960d3f29c36","sha512":"3ff8344cec083fcfa0ec07e60c7a7caaa0592e0c7cba2b91e5bdd363d18f48e3b05a77d9a67314c120627556a65a6f099a51a0a5682f79f1ca03d8809eba7307","ssdeep":"","tlshash":"6721c94c3f0eee72677ba0267ee438c61c2f2948e168012e60f05f73eea1547a260995","first_seen":"2026-02-13T14:14:54.196379Z","last_seen":"2026-02-14T01:40:51.874858Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ercusdt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/icons/logo.png","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ercusdt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:55:31 GMT","end":"Wed, 06 May 2026 12:55:24 GMT"},"fingerprint":{"sha1":"65:1C:B7:EC:F4:51:05:D7:3F:84:8B:15:30:A4:04:D8:0B:F8:6A:E8","sha256":"02:49:56:5D:C4:2A:6C:06:DC:B6:E8:B9:A5:FD:DD:C5:63:92:31:FD:6A:49:C4:3D:FE:43:94:1D:45:A9:34:FE"}}},"request":{"raw":"GET /icons/logo.png HTTP/1.1\r\nHost: ercusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 3305\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"149f13d3c5fe4b6fa9501f1db176dcaa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NalMujTUoBLNEHjYh95aYsyW7m2GMyN%2BFKUd4aQsoSZytvBpW1SHNJCfGZJF%2FutKNpEjWmNC4hlssxjkbGhbUeB5OPM%2FZPPKUDvT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cd8db861b7c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3305,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"7ddcc7d3e607ff326fc0f493a40b83c7","sha1":"72882ddbf45ad621740ea9a72f71d5c08cb56a63","sha256":"7af40c1063773b426c41036d4baa2bc3b3013e386e9a63abf7f0993c4661656a","sha512":"8d9aa6cca908815805bb977f7489fe094eea06fa613c68a4871d3a0bc6a8b1b94086aaf1881968269dc3bcf97f708c487dc87866dcccf0b2517259e6a1430d3f","ssdeep":"","tlshash":"bc619418690e7d12f0c6341689bc79307a961d528b7a77ff238105a0d24ef5ef75e840","first_seen":"2026-02-13T14:14:54.197237Z","last_seen":"2026-02-14T01:40:51.875614Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ercusdt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i1.wp.com/i.ibb.co/Pvqzp2QB/image.png","fqdn":"i1.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.77.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /i.ibb.co/Pvqzp2QB/image.png HTTP/1.1\r\nHost: i1.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: image/webp\r\ncontent-length: 294478\r\nlast-modified: Sat, 31 Jan 2026 12:57:26 GMT\r\nexpires: Tue, 01 Feb 2028 00:57:26 GMT\r\ncache-control: public, max-age=63115200\r\nlink: \u003chttp://i.ibb.co/Pvqzp2QB/image.png\u003e; rel=\"canonical\"\r\nx-content-type-options: nosniff\r\netag: \"b24f09b6e9f53192\"\r\nx-bytes-saved: 333195\r\nvary: Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 25\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":294478,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0f5bcb260b9b70ae8c25d4aff1c21531","sha1":"1ba279d1d7eadde4fd3745f8760f803d90ad353e","sha256":"509a145e234b4c75f5e3bee63afca6f91644eaa14b489e3ffff1ab8efc1bdb86","sha512":"aea29900bf1f5e7692d0fb974ccbb6532b7cb64fd53b297e6228cb68b3b3149404bfe52176044bc3f30cf8fc847362b6aed5fe387f85e47bc175f81cad8204ab","ssdeep":"6144:B3PXYyUAn2tjqnHZGmeKPXmys1KXo+mqOYKC/aST8Kb0DxCV:NP56jueKvmN/BqOYN/a0z0Dxm","tlshash":"4754237827bb9322f6a99878dc3c9a7500e09954172913604f47d68bb1b1f1c8e5b36f","first_seen":"2026-02-13T14:14:54.204562Z","last_seen":"2026-03-07T09:52:36.974665Z","times_seen":3,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":9,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/js/flowbite.min.js","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ercusdt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:55:31 GMT","end":"Wed, 06 May 2026 12:55:24 GMT"},"fingerprint":{"sha1":"65:1C:B7:EC:F4:51:05:D7:3F:84:8B:15:30:A4:04:D8:0B:F8:6A:E8","sha256":"02:49:56:5D:C4:2A:6C:06:DC:B6:E8:B9:A5:FD:DD:C5:63:92:31:FD:6A:49:C4:3D:FE:43:94:1D:45:A9:34:FE"}}},"request":{"raw":"GET /js/flowbite.min.js HTTP/1.1\r\nHost: ercusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=URFDE18I5bKQev8xdtTNjU8QSlc5N9rNaIc7yZBtg2c%2Fj3lCP4JSK5Zi2iDBZj0RzY8R7vtRK5EVsVXuZ%2F3jjixU5OH2t8xSnvsk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d9710ab17c40437aff6b7d378b3aa9bc\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd8db865b821a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135728,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"3b3bf7664836ca0a1d889b010c154ace","sha1":"ca437ccc8fe48df4cef0a9beb5e2b60b9354052d","sha256":"486c6671f80c00f3b83bda1a667ba1d11fb0b848a0e7ee6a0014dcb8ceab384e","sha512":"dce848fab2bd0da40d6aefe8d87751adeeafd5cffa13031d63deb95276097af721c6f3bb995626a76c33dfd22095af5a2e3a6816bfbd214e0d9007871a0ef8fc","ssdeep":"1536:dY/R2t4FY/9iQt6y7/ZNf9vaChoUh3mcPsZ/JjB3+awTNWQpzS5Pp0O3M1gramEj:Fz3ASlh3jsozk0OPi","tlshash":"06d3e68db790793202df90f1813b1a0b633ba469d48684687529d8ee197cc8a7177fbd","first_seen":"2024-08-24T06:34:27Z","last_seen":"2026-06-03T16:04:45.423273Z","times_seen":151,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ercusdt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/css/main.css","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ercusdt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:55:31 GMT","end":"Wed, 06 May 2026 12:55:24 GMT"},"fingerprint":{"sha1":"65:1C:B7:EC:F4:51:05:D7:3F:84:8B:15:30:A4:04:D8:0B:F8:6A:E8","sha256":"02:49:56:5D:C4:2A:6C:06:DC:B6:E8:B9:A5:FD:DD:C5:63:92:31:FD:6A:49:C4:3D:FE:43:94:1D:45:A9:34:FE"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: ercusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x1zkkIUFi6c3A2sSmdy8UYqmXyAesUYW1mAnKOCl7UYHNeZFGTq0VdEV6AS9%2FRrPRIv9y9jHUMvTTHTTinEIM9HHzrMbZOb%2FgyWe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"48bd721b3388968ac0b21371eb7f7ae8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd8db861b7b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70475,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ebbbe7b6e007e6e14c536302640b1c2b","sha1":"f1511766a013c6486d84b06fec34b5b0394d4ce4","sha256":"e9de7d628e88910846b84b27ffca0909eca81d66d74bd2950b3ea32fa795c296","sha512":"8cb8853f83b5b1632ee55c1a682f7351f6f2cecf4c4ad2ca8b64b3ceb4181c20255bbd55745ac70f445f486b96c3dfea1cec5062f6f359aaf77f00371df8e113","ssdeep":"384:sahHLu6btC6WwgNBLDgfj75H9l4jLIDrH4pQUYiZNJ0VPt/QTmnn681fSQNyYC9i:1HL46WxBLADWZN+PtITmnn681fSQi9Z4","tlshash":"d963532daba1003b7c6384f6e199edadd51a71c5ee3a27ebbc5226009be13f74c53114","first_seen":"2026-02-13T14:14:54.179749Z","last_seen":"2026-04-06T01:36:58.335736Z","times_seen":4,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ercusdt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ercusdt.com/js/qrcode.min.js","fqdn":"ercusdt.com","domain":"ercusdt.com","tld":"com"},"ip":{"addr":"172.67.194.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ercusdt.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 11:55:31 GMT","end":"Wed, 06 May 2026 12:55:24 GMT"},"fingerprint":{"sha1":"65:1C:B7:EC:F4:51:05:D7:3F:84:8B:15:30:A4:04:D8:0B:F8:6A:E8","sha256":"02:49:56:5D:C4:2A:6C:06:DC:B6:E8:B9:A5:FD:DD:C5:63:92:31:FD:6A:49:C4:3D:FE:43:94:1D:45:A9:34:FE"}}},"request":{"raw":"GET /js/qrcode.min.js HTTP/1.1\r\nHost: ercusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JgkO6nthel%2BU8t0w1dLCyFoQB%2FsqdweDWJVGvgv5Dpsupl3kuSq0au2rLENCqoequYuA8FSs9dunHC8Wze4Bw7oY1XYA3bIkbczm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7ada293847f072170f0c5a32bd67bad3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd8db865b831a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19927,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (19927), with no line terminators","md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-06-06T21:34:28.177385Z","times_seen":61465,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"ercusdt.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 10:36:27 GMT","end":"Fri, 20 Mar 2026 11:36:07 GMT"},"fingerprint":{"sha1":"C6:6A:71:84:C2:40:13:D1:A4:B7:DF:C4:1C:E1:54:F3:76:97:EF:6B","sha256":"EC:09:93:3E:E8:5D:9E:7A:B0:D9:7C:6D:85:49:92:10:89:9F:C8:FF:A5:1B:90:BB:AB:86:7E:D9:BA:0A:1C:4E"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nOrigin: https://ercusdt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 22 Jan 2026 17:06:04 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9cd8db86ba18dfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-06T21:57:34.532625Z","times_seen":337307,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":14,"dns":11,"connect":2,"send":0,"wait":11,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ercusdt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 01:40:27 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 126828\r\ncf-ray: 9cd8db8a5a40783d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"620188b3-1ef6c\"\r\nlast-modified: Mon, 07 Feb 2022 21:01:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 5324\r\nexpires: Thu, 04 Feb 2027 01:40:27 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5PSF1T5dcOujbcyNt5TuyF7b5dcoQyNHd9MfHd%2BkrA%2FjjuW3mKgXAtrqQuTs2aX4GQDcMGpS36wG5Tb%2FEWQsaC268De7L1oqkSdreNglOD2XiNT6doBDdbNLFjQN8jw8Ackd2ewl\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126828,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 126828, version 768.256","md5":"297973a488f688271dd223d542ba2697","sha1":"ed99d812e4c88826335f93acede3fad85c90fb54","sha256":"1b099f88c06ed0869872561c157f0ec9cbe133a0939d9ece4ee1e1f54bd4683d","sha512":"83c802972d9fee9dd7e3c0de42d8636c504e65ff20e43406bb446cc95a16acaa21789a03f0e2006148abfe47100bbd0c66aa4cf98f11e9b0220f1dcdb5204f46","ssdeep":"3072:caEaIjBfXHk79vCMuMZhQqmiutWxJfU52qiAx+SMfd:caEaIf3kxa5aaVMaHAScd","tlshash":"9dc3120ef3299411c6f0af104c63d6d627617389ffd548c767993e768aac9e70c28ea0","first_seen":"2023-04-10T14:50:44Z","last_seen":"2026-06-06T20:45:52.107505Z","times_seen":9457,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":10,"dns":1,"connect":0,"send":0,"wait":10,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datahub.pages.dev/okx/en/cta_landing_faq_data_en.json","fqdn":"datahub.pages.dev","domain":"datahub.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ercusdt.com/","date":"2026-02-14T01:40:27.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"datahub.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 20:25:51 GMT","end":"Sun, 03 May 2026 21:24:30 GMT"},"fingerprint":{"sha1":"AE:61:AE:D2:8F:CC:64:F4:0F:D4:F8:5F:64:B3:6F:7A:EF:44:EE:CA","sha256":"A2:11:E7:D8:E5:60:38:A8:F5:E3:8E:C1:FF:8D:73:12:0C:CD:73:07:86:1F:C9:08:48:A7:CE:59:E1:CC:3D:C6"}}},"request":{"raw":"GET /okx/en/cta_landing_faq_data_en.json HTTP/1.1\r\nHost: datahub.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ercusdt.com/\r\nOrigin: https://ercusdt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 01:40:28 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ygHvQ936QXtsPIo9dhBCJKLxB9bMwi3YLaIyK%2BNgCc5Yu1CFP1Nt1DB3oWdWIp5rox04QjciNm6I2m9NQscFXjPTUqhSslGUttL9uvTk16b\"}]}\r\netag: W/\"ba4aaf757c118effdaaca0585dc6c9e9\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd8db8aba2bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6036,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"085dc2a514cc61b3413062bf3ce976f9","sha1":"11fe33079f0403593ca1a34b843ba24d449f76d7","sha256":"1386d84d05ac4f1af9871607f4bc48fcaf2160a2f52ac0af208fd616c4500073","sha512":"c9e54390b72cf16b3f9c2e5218e3f39284cb843d2c524bd60be94c1ba3a95c7dee9f9128025da64be4f4ab1ae0ae9eac58d665b2f89a033b0b405f9dc1e13823","ssdeep":"96:PfUivEpN9RVwslq8kzdyaC/UFmAnxUUSsur9/0ZhfMuaaZ+2qAMeDY9yec:PcznSEqNyaD/+9r98ZhfMPHhreDUXc","tlshash":"e8c1746ed5f87dd7001760780228e14b3cb4ed9778ad6d64bb1f041c0f0aa3d0919b9e","first_seen":"2026-02-13T14:14:54.203021Z","last_seen":"2026-02-14T01:40:51.881697Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}