{"report_id":"0a22bc1a-3a42-4d3c-af90-b6ec55513904","version":0,"status":"done","tags":[],"date":"2026-07-12T18:27:56Z","url":{"schema":"http","addr":"ethereum1.org","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ethereum1.org/","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"title":"Ethereum I — Fair Launch, No Premine","dom":{"size":65515,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65479), with no line terminators","md5":"9c9ba9065db65528c3ac945986f9728b","sha1":"093c156054597273a5db53dd35ea01d9afba3e85","sha256":"4e0d9e91275d2c354deb3ce5a73d9474e9d1fd47f651365cdc9270c113219dbd","sha512":"d607ceb8a103b756e75a056beee6b77616387df68ef84cdc4369af40232516c3f7d56ed2fb5f447225ddc3af55a87e7693a37fd1806006d3bbdf9554b895120d","ssdeep":"1536:fFVCag1w4g1wLlTh6in52uhURU37WctImvf/SFnImvDMmSrzKPTTxhxi9ZzVhAQR:f9Aw4AwrGuZLhIPCBz","tlshash":"f053d53452446b7d51278be8f2b97b3952ad83acc227851af2ed437217c2d64ed336c8","dom_hash":"domhash854911384465c9cfb008cab86ad361ea","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ethereum1.org","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T18:27:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-07-12","alert":"Detects mining pool protocol string in Executable","trigger":"ethereum1.org/_next/static/chunks/0dldamhexgq...js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2018-01-04","description":"Detects mining pool protocol string in Executable","modified":"2021-10-26","nodeepdive":"1","reference":"https://minergate.com/faq/what-pool-address","rule":"CoinMiner_Strings","score":"60"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-07-12","alert":"Detects mining pool protocol string in Executable","trigger":"ethereum1.org/","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2018-01-04","description":"Detects mining pool protocol string in Executable","modified":"2021-10-26","nodeepdive":"1","reference":"https://minergate.com/faq/what-pool-address","rule":"CoinMiner_Strings","score":"60"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ethereum1.org","ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-26","domain_rank":0,"first_seen":"2026-07-10T08:36:52.915464Z","last_seen":"2026-07-10T08:36:52.915464Z","alert_count":52,"request_count":25,"received_data":8256505,"sent_data":12364,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ethereum1.org/","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-07-13T08:16:39.692639Z","times_seen":186095,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4501a5fd4dd6c8a98278f8a92ffe1a89","sha1":"54d2460a39b8521c5cfe2da2cbc2ad546e5aa3ef","sha256":"f40b89dbf3521f3fa5c94155c280adb41213d32becd7e1b206641c29b6d90fb1","sha512":"5ab304e96d0ac971d4d35159ba14bd9ea031a570cda3904ca7cdbbab1eee7c8cfed7548efba24e1a8361f7b9f2ae051c7b3512f115c5bbf86835af8014f42050","ssdeep":"","tlshash":"4e21b247ea2afc413c32dd4e151f2f758ae0ea7b9572915eb28ece990921972078c890","size":1387,"data":"","first_seen":"2026-07-10T08:36:59.273667Z","last_seen":"2026-07-12T18:27:59.255429Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6525ff9b6f138632200ba43918e502a","sha1":"3887dfb9386ec3efcc6a24c353cb372893ac3c18","sha256":"ecf83be88003bbed97a86f84c0338549e7fcaa28971474d38f125a08d03d0abe","sha512":"4fe93c57d1badbd4352f9e305049b05f18b6d2adc79981b5fdb5e6d8ebc522eb505a08a74717d0285ed8b20a45534d437d5b581d8b19be483f039a1ae0ef81b0","ssdeep":"","tlshash":"0981be2e7809dd4becbe7c6d023e9d3a14cc897b4794dab8868dcf140a4647a27d6dc0","size":3911,"data":"","first_seen":"2026-07-10T08:36:59.275162Z","last_seen":"2026-07-12T18:27:59.256203Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"227524e39a7422672de1cbbb6f5cc6d8","sha1":"020ea6bfde7a61d5532fc489b4a945ed4bdd0ab3","sha256":"61f40608266a7257dc036f59652d3dbc4eaad078bdd07249f68478e1b6af2314","sha512":"bfc7a6facbf892d528ffbfebf84ed2a96d078426fe108db7c4bea6a70b1f4e445f88c7e3bef450abccad26686e697934c84a3a123eb5eb56997294b2b3d0bb54","ssdeep":"","tlshash":"e6b09b74e005fda555a505616525e445226f544d195414602113919516099191717dc0","size":112,"data":"","first_seen":"2025-11-01T20:55:10.866828Z","last_seen":"2026-07-13T02:20:45.969718Z","times_seen":2353,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"46f772db12bc1b33f0ff6c7c53633796","sha1":"eb8afa04e0dd4fb1dbe189b17b292b947cc3e787","sha256":"b67ef17b56c2915cd30f8e4902e71d6eab5f1e6574ba30e19ff716a1553986c8","sha512":"a30df2d7f36835745d21cec4a4d974852eab3c7b70bff09b97394ce457e85360ffbf5a774580a513e6ba0cfc80318ce6622731faf68411f65ac34c3257f0d2eb","ssdeep":"","tlshash":"c7c08090cc42cc1dc6660f261c3a1c3521dcc97417455546ddd5d9281985b3105b5d89","size":177,"data":"","first_seen":"2023-08-13T00:55:19Z","last_seen":"2026-07-13T07:54:16.06518Z","times_seen":11548,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4074b43b8c7b433da2c3df412aa5dde4","sha1":"579504763c6ec97a36c102d4a9bfacdadcae9223","sha256":"97231238ce66fe16c01c4b34b1275ec036789678bbc5d54a974bdbeb88094763","sha512":"d713eb86d21a7793fbac778a438490db88e51182e27d17def0d0de9840846197f9c78a2757b5ef978a44cd8577592a3631db5d5dba39a10a190f1f7f6b241a3e","ssdeep":"","tlshash":"4811ba156d09ed02dbdaed1c00be1c3ac0ccc2a94ae19936808cdc6488f6970afe1b42","size":947,"data":"","first_seen":"2026-07-10T08:36:59.277651Z","last_seen":"2026-07-12T18:27:59.258909Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/chunks/0kx34367~j~sm.js","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e192a3e643de9e004aae7c3898f0c95c","sha1":"bcd0c7506e59e82433597af6540d9130c5f6ce49","sha256":"85efec7784fa9b137ad67e3d0d5fd124f4fa87d4182689a9cb5390134d7175b1","sha512":"971d3ea6fa485a35212f2f859fe25d2ccfe1849264e5f8a20c4a659ea1fec77351575bb86ca65e1ba57a832c992647b1bdc5c11cbcee3b2c6d24a7e52e8f7640","ssdeep":"384:e6hyUJQrtg6KaFpY5UG2er6e2Op1c5BYjYvG4MjNN2L+kYLoOWfwE6LUNxphKhVM:e6Ymc5Bqj4MjHE+PorH6LUWhVxgz3","tlshash":"03e2c6a471d5f89117a754a9803f500bf23d0c76256cb4b0a3e2ccea79a059de533fda","size":32795,"data":"","first_seen":"2026-07-10T08:36:59.267317Z","last_seen":"2026-07-12T18:27:59.241335Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/chunks/0p8o-off0oonx.js","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c322aed69fee94d5b63ce2cd586cb055","sha1":"664f5eb1f6db818ca6d642a50a297e5d85a27ee3","sha256":"b1f9302606acb9827597c52b92bd41ee475041b5528f17f4077c338dc567f71f","sha512":"ef68bc9a0e22bd0cd42b266168016a39ecdcc0e4e10919c94bf86211de2617e5e48d7646f723a317b0db805b7b77655a8d1c22c3fe5791de52201fbe1122bc66","ssdeep":"192:hF6c6UpCzsGWNz2Wlbyg2Hc6/qNki8oc0oQ:nxFCzsGWUmbccYC","tlshash":"27d186dd72e2f49a43ab1291403b1016f37d0ea4944da054e3a5e89f7e30a9e81f2f79","size":6324,"data":"","first_seen":"2026-05-15T14:10:27.862716Z","last_seen":"2026-07-12T18:27:59.244781Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/chunks/0se78ya_3ldiv.js","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9381d3fdc3433ef387299b5cbf0b98d","sha1":"ba072392ad0eb78d64d1b8665f1b2b7dfd9497b4","sha256":"cdc191127ec48934d62163e41c7f9ab3c5779c9356ace7b73b55db5288c5b816","sha512":"56e96382d5cbbb177b5aeb7f5bd40bead3b5483da7a95e7649581474b062993eab68135c92615458de71293ee4ab74e2e36e96d9b0226e9cb1799e4f97ee9fb8","ssdeep":"384:cqzfWst5gWTnLYV3uXeqbktdeUtd8bmzlu2uNf9zXYpDuYNb4xzpk81mZTDxJRio:XDWstOoy3zIxqD97hlFUyCDFZnXqvcaV","tlshash":"9933d9753395faa302db91d9d0370012f2780d7130ad24b4b395d8af399dd8992faf6a","size":54651,"data":"","first_seen":"2026-07-10T08:36:59.248783Z","last_seen":"2026-07-12T18:27:59.252936Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/chunks/0dldamhexgq...js","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"186fde2c3fed95a0024d423f47afebec","sha1":"ac4803bacaf2dd6be90a3431a95f3ac6b0ca9249","sha256":"a9e3b9d13992db3a155696853fc251b952171ffc25a52358577a8f9c92775ca4","sha512":"9b69e59f110ea1dac1dac893db62be119746df16587466a73893ba0f0875a5592f60b02a70eaa69fce9c9a4265d7ff09420367a6a91fefffe31e4b105f91230f","ssdeep":"1536:RIdEgkOeaKZHZhhE+racAMog1wNpSnmv+sud6AJD3qh/1X:OdPkHaKl1Nmc/oAwnOsu/WX","tlshash":"cc8319257245bffc66af83cce4ae600ce22e0b54c21e4965f6ed78361b44294b563f8d","size":87152,"data":"","first_seen":"2026-07-10T08:36:59.251431Z","last_seen":"2026-07-12T18:27:59.245627Z","times_seen":4,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-07-12","alert":"Detects mining pool protocol string in Executable","trigger":"ethereum1.org/_next/static/chunks/0dldamhexgq...js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2018-01-04","description":"Detects mining pool protocol string in Executable","modified":"2021-10-26","nodeepdive":"1","reference":"https://minergate.com/faq/what-pool-address","rule":"CoinMiner_Strings","score":"60"}}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/chunks/07sqoht8-to1l.js","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0d3edd078cb2e691eba6dbb05ad9a9c","sha1":"86e74eae09fb19be2763421c444c9f6f14e47470","sha256":"e41d354dc731e4e591a5a96728ddd9888ec78fb8dd341baa0f29909098d0dca8","sha512":"eed1c1f59e16f0977d05c4ff23d37956c34b0d8784ea997005cfad769f24780137becd0d41cad3285e2c87bc44c966ac257dd760af61d16b59cf9505f40cce3a","ssdeep":"384:r7odkTd9FjBTxdaBhToIpoVbIBqjac/s+rPYjDExpCkKMny1V0U+cwQh0HAlweql:q0M5DoVkpc/s+zYXExp7ly1V0USL","tlshash":"8013d7b132d4faa3529341e4e43f2016f2790c7520ad6470a7e89c9f754c88da6befa5","size":44413,"data":"","first_seen":"2026-07-10T08:36:59.268666Z","last_seen":"2026-07-12T18:27:59.250275Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/chunks/06oxnureaddy..js","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb9cd6947311fbe2720557616b7e20fe","sha1":"6e8ba85df7de7bee2eefcb81352f856cdd094e6d","sha256":"139ac7941204d3432b72f26f5e0285d425500707ef35f0d931a4e38037c87db4","sha512":"feefbb29d937162c7d49aa224125a34ead06357bc03ee2d6e4022f410b0ebf40e288fe67a85299ae90eaeff78a3058259f13c382ead7e5983ca97c5595f131b0","ssdeep":"3072:GVdfsJco1ZacJOiWPWQLNOnZWCbt3EY75B:GVdfsJco1Z9JOiAWUNeZ93EcB","tlshash":"e9d3f7f936d1f442076b50aac03f0006f22c4d77289e6860e3e5ddda756469de1b3faa","size":141621,"data":"","first_seen":"2026-05-15T14:10:27.839743Z","last_seen":"2026-07-12T18:27:59.243227Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_vercel/insights/script.js","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e699b6e4471fd6950176e39c5f1ace0","sha1":"a3957a826a0c77a338e1bd9b408b90c6215491f8","sha256":"79bf638dd4acdeb9b80c5a4009a3e1986968d615e9557dcf23d91b5e8ad158d8","sha512":"c49b40fbcbe959fab505da0d27a9f3c273a3740f07b34433619e5bc88cd7dd54564609284f4ee30ae219a1572a0a255fe9af92f2f948931b761cbc1be3605e2f","ssdeep":"","tlshash":"2251a5ea74a1e16d4ad79275817f1204f37f2a92fc05000132d99c9d3539d1dea73f99","size":2495,"data":"","first_seen":"2026-02-17T21:27:06.661745Z","last_seen":"2026-07-13T08:26:59.391428Z","times_seen":16633,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/chunks/turbopack-0qalub.su4d7d.js","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67529c0eaa480cb0a8e030b8d9f0cc80","sha1":"a05648ebd30151703673a52da68a55ce714d883b","sha256":"934f8691aa916c84565fb4cdbeb40a6ff63df156b6805bdf63c1eb9bc01b9dd0","sha512":"31678f74ddbd4a191db0abdac568ec50d70c4fe3dc770f6c402348a6e37040fecb16435a5d203e57aa3def6ba1d4df49624c30f39499829bce8e4f11b57260ae","ssdeep":"192:S4gMSBC88Esg6+9ErUO/l5UTNWn+S3sBT4fCT3cXXqroor+yLxH:S4gMSta/lKW+ssqCTMKIyLxH","tlshash":"d632c7ea33a6f07343af90ebd06f4004f1798469145e541cd39ca8eb28395aa85e7f76","size":11019,"data":"","first_seen":"2026-07-10T08:36:59.245585Z","last_seen":"2026-07-12T18:27:59.251606Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/chunks/0nb.jqspx-ja4.js","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b91e90d244eaed32d9bce9506c4e2307","sha1":"2ed8feb35227b0ef3a6766f4688675ec36b1be96","sha256":"8e4ea7906a61d2d5608c349a0c7267b13d85d8aa71e59e4d26f0677807019a62","sha512":"1a886430ea59ece2c587c74478877ad7e06b79604204c29525d8c883d6f1fc0be5f1c642a84bb1aad52695e2c5d4e0382e2c57f1f2267cf5902f2a75aaa73acf","ssdeep":"3072:4lLt1hMDyXcY7E704KAtBGM8BsbgISmZJ7XkqMA2i9nyC4aXr:4lLtrOyXcYwAAJv70yn9nyC4aXr","tlshash":"5f24fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","size":227316,"data":"","first_seen":"2026-05-19T14:45:58.768916Z","last_seen":"2026-07-12T18:27:59.234886Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ethereum1.org/","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T18:27:27.728Z","timestamp":1783880847728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 1151437\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\npriority: u=0,i\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 12 Jul 2026 18:27:27 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, accept-encoding\r\nx-matched-path: /\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cjhrb-1783880847816-7087ca27982c\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BmlZEfHKfKgIABlZQkFG3QS3ZVIvksxffkLX0VRJOQPYZUqbOqKfxf%2BSEXMIP7w3n1LnUmi6EINZxKQWJ%2ByhRqWq1XT4guejTo3RdNu%2FrIVtUarIf%2Fccf2wEfLYKD%2FyK\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a1a21a22ca2f56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65340,"size_decoded":11996,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65304), with no line terminators","md5":"7351e2852661b727a0da2ab02e9ed6fc","sha1":"c64ef643fab4d53082171b922957b81c31bb3899","sha256":"3950f7d0056473255c077aff0c4fd325d9353c3157458e284f32097832015fec","sha512":"ff5eca686843d5d50faf42a6b0c2dcb766159f43ece27dd84fb764de043aa56ec0520c0c92e99d90494fe459c3f94b5978062ae122d5eea56d9277ca015e03d9","ssdeep":"1536:atag1w4g1wdl2hBpiCSuhURU37WctImvf/SFnImvDMmSrzKPTTxhxi9ZzVhAFtGa:aIAw4AwmsuZLhIPJB3","tlshash":"fd53d53452446b7d51278becf2b97b3952ad83a8c227851af2ed437217c2d64ed336c8","first_seen":"2026-07-10T08:36:59.239227Z","last_seen":"2026-07-12T18:27:59.220857Z","times_seen":4,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":52,"connect":16,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-07-12","alert":"Detects mining pool protocol string in Executable","trigger":"ethereum1.org/","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2018-01-04","description":"Detects mining pool protocol string in Executable","modified":"2021-10-26","nodeepdive":"1","reference":"https://minergate.com/faq/what-pool-address","rule":"CoinMiner_Strings","score":"60"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/chunks/0wjwl2cr8b9rp.css","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.104Z","timestamp":1783880848104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /_next/static/chunks/0wjwl2cr8b9rp.css HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum1.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 34\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"0wjwl2cr8b9rp.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: W/\"56391b8532cad024078facf1326ead9b\"\r\nlast-modified: Sat, 04 Jul 2026 14:54:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0wjwl2cr8b9rp.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qwqgb-1783880813661-8e6fb7ac4d9c\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wwc1jgaVqVs8Iqi2UJ75vx9jTw7jDdohhU0SBbEillggNKtPfDakKGdU4XIscZGUX6dfEDOL8a3ma7gwskOuV51OlUx6RmbIyevy3mAcIDtRM375XelKmTdcXFTKoJ3q\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a1a21a24aa3c56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8604,"size_decoded":1865,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (8603)","md5":"56391b8532cad024078facf1326ead9b","sha1":"2df4a6f1fed312ddb9aec095d6f6b0385fe2297b","sha256":"546cb423b9fd75612873d55763a24f0a71651d1ee58ec94d52b95e49d37a9230","sha512":"9b6d6ff2cc83c7c48929404fd940732316191ff6bb22421441f4a4f0a0a978f4ab3ce8cb8135496586b508f1590ff9bc524989b21c08d77f0e00c0aa9f5d926f","ssdeep":"192:PpZpOtsE0OavTfOPqeSOLQ4KWkbBK2OMB3:PZOtEOaDOPeOLQ4KWaI2Oa3","tlshash":"9d029e34142a9846d2f3dd6634ce3a03680d043557eb5626d97e2a798efe83b53f1b38","first_seen":"2026-07-10T08:36:59.265981Z","last_seen":"2026-07-12T18:27:59.223841Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/favicon.ico?favicon.0tg0yx~cc8ooj.ico","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.329Z","timestamp":1783880848329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /favicon.ico?favicon.0tg0yx~cc8ooj.ico HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum1.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: W/\"27038b9e44d9c3c4699ec9c3b09ccee2\"\r\nlast-modified: Sat, 04 Jul 2026 15:17:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7tnbz-1783880813933-396fc3921dd3\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wZQUW0TNihy7QzdNq2mAbLV2AvNZ6xr1Em6UWK%2BdYgl4N8BPu%2BdOXgkH8wIhpLU1WWKq8Hh%2B4xhjMDWwkVsy6Y3EUkHQiYWN7TljEx%2FXWTGFkk5e%2Fud7E8jJ4I%2Bpq5lH\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: a1a21a260a8256c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1876356,"size_decoded":1877317,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 1254 x 1254, 8-bit/color RGBA, non-interlaced","md5":"2ebad1b2a90be6a8ed64ed415b0486bf","sha1":"ec5650ca7bef836f315393a4a210d0f99dbed676","sha256":"37cf91b8af8f5da8499868e5752bb36df9889a5f06f0575a31c33d7aa17eee42","sha512":"475f0aafc48a6cc703024ed253566eec991e951ae3cefee1c8acc74db972126ba77e7bdb2bf15d747cf77f63359f1627269d5501bd28f6bd1c6c5401069d2d0b","ssdeep":"24576:XSvNUZGq5gmEllQ71GQz1AsOi3xD+CjbW+aGyE:KNUn5ilwjehi3Al+5n","tlshash":"01253389c800ea3b85ec61fd2752def8b53cba3aa1454c3da9934c94e25b79b4747c31","first_seen":"2026-07-10T08:36:59.260534Z","last_seen":"2026-07-12T18:27:59.225884Z","times_seen":4,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_vercel/insights/script.js","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.345Z","timestamp":1783880848345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /_vercel/insights/script.js HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum1.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 34\r\ncache-control: public, max-age=2678400\r\ncontent-disposition: inline; filename=\"script.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: W/\"8e699b6e4471fd6950176e39c5f1ace0\"\r\nlast-modified: Sun, 12 Jul 2026 13:26:31 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1:arn1:arn1::wxw69-1783880813975-09c357b8c033\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m2035BHwLL3OoLo4rRRp2%2BhxzqdEh4t1W0qLGnMkKg0El%2FR2aCu5Ngdwhvvlm3troUsIc%2F8%2BbDjKL0fjc6ylCpaTx1EOXqdRg7Gvz9A%2Fdm4Qs%2FMdq%2BBk7GJXE7LDVnlQ\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a1a21a262a8556c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2495,"size_decoded":2345,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2495), with no line terminators","md5":"8e699b6e4471fd6950176e39c5f1ace0","sha1":"a3957a826a0c77a338e1bd9b408b90c6215491f8","sha256":"79bf638dd4acdeb9b80c5a4009a3e1986968d615e9557dcf23d91b5e8ad158d8","sha512":"c49b40fbcbe959fab505da0d27a9f3c273a3740f07b34433619e5bc88cd7dd54564609284f4ee30ae219a1572a0a255fe9af92f2f948931b761cbc1be3605e2f","ssdeep":"","tlshash":"2251a5ea74a1e16d4ad79275817f1204f37f2a92fc05000132d99c9d3539d1dea73f99","first_seen":"2026-02-17T21:27:06.661745Z","last_seen":"2026-07-13T08:26:59.391428Z","times_seen":16633,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/?_rsc=yIp22O3xgPPxC28X","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.357Z","timestamp":1783880848357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /?_rsc=yIp22O3xgPPxC28X HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereum1.org/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_index\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 1151467\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: W/\"f81f3cd17d95713981e80e4a85fc39b5\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, accept-encoding\r\nx-matched-path: /index.segments/_index.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gnhvg-1783880848367-651545c8c6f3\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jckMdbE6xFbxBiIAHdvy%2BEwdiJ5F4HTb0vd0fHgRbnhq7lHwKW7H0dwMciRE%2BjMARrfJro%2FibzL3dp9EYrNzFd8ZlK4azFsTeQOWrSocrJkXrYOF6wl090E1mK%2BjV8O9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i=?0\r\ncf-ray: a1a21a263a8856c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2324,"size_decoded":2091,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1883)","md5":"3ed53eada848c2d8b54ea9dba3230db6","sha1":"e216857d18fc1d1d6458334d9d1cbe01a2ebdd70","sha256":"43f7ba44b996ba4b92a93a54a571d78d70799ac2857662c09f1f45ad38dbc529","sha512":"108cd6502733b7221f5011f9e174e79856e3b24dc6e99f2d14d3fa95455ed164ca7459a64160b9ad2fa6ba8401047348b215b0b0df773c9226d20e100109e501","ssdeep":"","tlshash":"b741103acb18fe2e7d63819c201fe71a919c013ba7704d79d2adee3802801767b867c1","first_seen":"2026-07-10T08:36:59.262824Z","last_seen":"2026-07-12T18:27:59.232817Z","times_seen":4,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/chunks/0nb.jqspx-ja4.js","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.113Z","timestamp":1783880848113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /_next/static/chunks/0nb.jqspx-ja4.js HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum1.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 34\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"0nb.jqspx-ja4.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: W/\"b91e90d244eaed32d9bce9506c4e2307\"\r\nlast-modified: Sat, 04 Jul 2026 14:54:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0nb.jqspx-ja4.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qwqgb-1783880813626-5fb9446ce578\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YMWTwUeIZSuFS3WdhlkpDN%2BnSb%2FQD0F4qtqGZJCX5IrhjIpjIhSF%2Ft55BWhVL%2FjohNXIcReWfbq%2BRVy6hiUvGCxqq%2BjIy2f0ArerHmvl5LSoJPvDnf73PYnZ2rRzuzMw\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a1a21a24ba4056c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":227316,"size_decoded":73338,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b91e90d244eaed32d9bce9506c4e2307","sha1":"2ed8feb35227b0ef3a6766f4688675ec36b1be96","sha256":"8e4ea7906a61d2d5608c349a0c7267b13d85d8aa71e59e4d26f0677807019a62","sha512":"1a886430ea59ece2c587c74478877ad7e06b79604204c29525d8c883d6f1fc0be5f1c642a84bb1aad52695e2c5d4e0382e2c57f1f2267cf5902f2a75aaa73acf","ssdeep":"3072:4lLt1hMDyXcY7E704KAtBGM8BsbgISmZJ7XkqMA2i9nyC4aXr:4lLtrOyXcYwAAJv70yn9nyC4aXr","tlshash":"5f24fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","first_seen":"2026-05-19T14:45:58.768916Z","last_seen":"2026-07-12T18:27:59.234886Z","times_seen":20,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/media/051742360c26797e-s.p.0f97p8c3305p~.woff2","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.200Z","timestamp":1783880848200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /_next/static/media/051742360c26797e-s.p.0f97p8c3305p~.woff2 HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum1.org/_next/static/chunks/0wjwl2cr8b9rp.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"051742360c26797e-s.p.0f97p8c3305p~.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: \"570751c5f8b418972c1976160ba6ed85\"\r\nlast-modified: Sat, 04 Jul 2026 14:54:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/051742360c26797e-s.p.0f97p8c3305p~.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::krljs-1783880813617-6009df9f05ad\r\nserver-timing: cfExtPri\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BL61Jo3tXUpJnTBkkju6DiGdspHrEG5yp6QJWsSALuIccE%2BXgZ3JKhE7OXyB5r64219bZtG2gepBOwsB5JoHLKWW9%2BYDHFdjad3YLMs%2Fz52jDBJ7wXWjV7r7CjAOSPjX\"}]}\r\ncf-ray: a1a21a254a4f56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31340,"size_decoded":32387,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31340, version 1.0","md5":"570751c5f8b418972c1976160ba6ed85","sha1":"340e696a955046b002f111c8dd6e30320b456184","sha256":"2c32b9b3ee358c119e210f6f5195f9bd34894d78a785ff2e95d60e718e400af4","sha512":"73bbf3aeeb856003fe948ce03ae8003e7d028d6c1953156d25587c8296d16dc10a22a5e2d3ae946fbc47e55abde4a6ef5cd2b9f9127601c6d2dc030373a5ddf0","ssdeep":"768:y67qM/ZLgNMFA8HoABvJCI7aaM0sY0/oPx0F7Qsrcvisih:l7zx0z8IABol0X0/oP6zAvXih","tlshash":"74e2f19ae864a1c79c7911be7d3c3a53db30ab2d3f6473b428214a0eb9763315933915","first_seen":"2024-10-28T02:31:38.693103Z","last_seen":"2026-07-13T07:57:51.616998Z","times_seen":1972,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/favicon.ico?favicon.0tg0yx~cc8ooj.ico","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.327Z","timestamp":1783880848327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /favicon.ico?favicon.0tg0yx~cc8ooj.ico HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum1.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 702579\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: W/\"27038b9e44d9c3c4699ec9c3b09ccee2\"\r\nlast-modified: Sat, 04 Jul 2026 15:17:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7tnbz-1783880813933-396fc3921dd3\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E0GLHLYF0kav5X0n%2Fh8t2jnHD6DzvuWQooyNETVRNWDj8I9DL38WHYBbxKU4l96V3wrpPj0pd%2FexYzfLK6OjV%2Bgek76LMtR%2FLRommkIeKEQ%2FMpxfrFJFTa8sIprNkz2i\"}]}\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: a1a21a260a8156c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1876356,"size_decoded":1877320,"mime_type":"image/vnd.microsoft.icon","magic":"PNG image data, 1254 x 1254, 8-bit/color RGBA, non-interlaced","md5":"2ebad1b2a90be6a8ed64ed415b0486bf","sha1":"ec5650ca7bef836f315393a4a210d0f99dbed676","sha256":"37cf91b8af8f5da8499868e5752bb36df9889a5f06f0575a31c33d7aa17eee42","sha512":"475f0aafc48a6cc703024ed253566eec991e951ae3cefee1c8acc74db972126ba77e7bdb2bf15d747cf77f63359f1627269d5501bd28f6bd1c6c5401069d2d0b","ssdeep":"24576:XSvNUZGq5gmEllQ71GQz1AsOi3xD+CjbW+aGyE:KNUn5ilwjehi3Al+5n","tlshash":"01253389c800ea3b85ec61fd2752def8b53cba3aa1454c3da9934c94e25b79b4747c31","first_seen":"2026-07-10T08:36:59.260534Z","last_seen":"2026-07-12T18:27:59.225884Z","times_seen":4,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/?_rsc=7h4NYy5eoyMcNlUN","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.355Z","timestamp":1783880848355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /?_rsc=7h4NYy5eoyMcNlUN HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereum1.org/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 1151466\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: W/\"9db59c42af31724ca5d69112ea2470a0\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, accept-encoding\r\nx-matched-path: /index.segments/_head.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wxw69-1783880848364-9f8d8fe81acf\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P3CLloUlyTX4n2hgEUBP3AtkclNq09sXMVyFP2Bev0DXgbtlAAQQegvYHqCZXJcQUaXf7WG50XlFQicY%2Byllt4v2ZDO1OB8loHwMnh9JY0FxXraAVnu8hXwM9amyh70e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i=?0\r\ncf-ray: a1a21a263a8756c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1527,"size_decoded":1763,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1154)","md5":"d7a63cb80f3c99547474b90fe64ec0bb","sha1":"4f34b9d29012799ec0a9e338c4449dc119906254","sha256":"0bbd67ee2a261fc27c18ac8c01048e274abb8a23315e65bcc46a660cca252550","sha512":"e4f0924915977a5b8a5b16559685021f80545367640b26a98f673913dfa5df9e4d9812b23428cfebecb5a0abc0a8b8f8d3160e5ffa9819502478f69c2bb5b029","ssdeep":"","tlshash":"9531ef3a8a18dd2a2fb78588048f531ed35d123bcfb45976818e4d280aed7332f562e1","first_seen":"2026-07-10T08:36:59.27013Z","last_seen":"2026-07-12T18:27:59.23705Z","times_seen":4,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/?_rsc=8nTjltbQWvg6NcbE","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.358Z","timestamp":1783880848358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /?_rsc=8nTjltbQWvg6NcbE HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereum1.org/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i=?0\r\naccess-control-allow-origin: *\r\nage: 1151466\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/x-component\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vsfy5361lK3NRdEDk2boH2mIODD9gwdOOw9d7M1WCGx7Ixz1z4QdX71Zd1he1FJX8vZcfbb2dscZBYYscVp2y%2FTyIOUEaMEhb6qIUf%2B%2BTTW1RehOhihKecWcDWW8EH0i\"}]}\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-matched-path: /index.segments/__PAGE__.segment.rsc\r\nx-nextjs-postponed: 2\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::24tk6-1783880848368-18f92ea908ad\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\netag: W/\"a4505b8cd3c810c3512576247d098c70\"\r\ncf-ray: a1a21a263a8b56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":904,"size_decoded":1531,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (424)","md5":"e8cb97a440fc19dc529003850c2949d1","sha1":"82c11b11b1187f542171ecf3c62fa8fb463a255e","sha256":"63dbad0aee75c111a88a7fe7982af9c5cdefe3e06f28667998bf3bd450cb3288","sha512":"7215297ab28c13e1ff866114561f1402ed2fa7d687143e02ce7be779c8e7b26402d9a1c7727c9a2f19ef373c564de240cb0bb1744b84ccabad5cd8b3e7aaa158","ssdeep":"","tlshash":"a511af17c739fd5b1cb2c84c285f9b7712ad1537a53688aad29fccac0a4997607480c0","first_seen":"2026-07-10T08:36:59.27176Z","last_seen":"2026-07-12T18:27:59.238965Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/chunks/0kx34367~j~sm.js","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.107Z","timestamp":1783880848107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /_next/static/chunks/0kx34367~j~sm.js HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum1.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 34\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"0kx34367~j~sm.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: W/\"e192a3e643de9e004aae7c3898f0c95c\"\r\nlast-modified: Thu, 02 Jul 2026 22:48:12 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0kx34367~j~sm.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zjtnl-1783880813617-82cd9ad6dbc9\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2L0N6ObUe6ODtPRpyKsv3O%2FhSH7fPecE8BDzbDW%2Bm9UfJAC2xKBXGj42UkFDs1XYRQCJrdtjqt%2BDEI6hPkSr8%2BmYLMuasiLYPGbqhpZ%2BEU4BkKH0YHEmDfe4as3Vh%2Fm9\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a1a21a24aa3e56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32795,"size_decoded":10930,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29362)","md5":"e192a3e643de9e004aae7c3898f0c95c","sha1":"bcd0c7506e59e82433597af6540d9130c5f6ce49","sha256":"85efec7784fa9b137ad67e3d0d5fd124f4fa87d4182689a9cb5390134d7175b1","sha512":"971d3ea6fa485a35212f2f859fe25d2ccfe1849264e5f8a20c4a659ea1fec77351575bb86ca65e1ba57a832c992647b1bdc5c11cbcee3b2c6d24a7e52e8f7640","ssdeep":"384:e6hyUJQrtg6KaFpY5UG2er6e2Op1c5BYjYvG4MjNN2L+kYLoOWfwE6LUNxphKhVM:e6Ymc5Bqj4MjHE+PorH6LUWhVxgz3","tlshash":"03e2c6a471d5f89117a754a9803f500bf23d0c76256cb4b0a3e2ccea79a059de533fda","first_seen":"2026-07-10T08:36:59.267317Z","last_seen":"2026-07-12T18:27:59.241335Z","times_seen":4,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/chunks/06oxnureaddy..js","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.114Z","timestamp":1783880848114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /_next/static/chunks/06oxnureaddy..js HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum1.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 34\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"06oxnureaddy..js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: W/\"fb9cd6947311fbe2720557616b7e20fe\"\r\nlast-modified: Sat, 04 Jul 2026 14:54:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/06oxnureaddy..js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::24tk6-1783880813627-6bec4e592ac2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yfUPKuvqJAwfg2PhK%2BRolXpG9umRjorlEsnDy5t5UGAAhi5LmNNNHof6lAQxttUE8fc8JcjNv2pP3LwZNEqTZHxb0CNi20CWBplwIotVo1cetqVOj8eJYOA6kkfacroE\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a1a21a24ba4156c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141621,"size_decoded":40615,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fb9cd6947311fbe2720557616b7e20fe","sha1":"6e8ba85df7de7bee2eefcb81352f856cdd094e6d","sha256":"139ac7941204d3432b72f26f5e0285d425500707ef35f0d931a4e38037c87db4","sha512":"feefbb29d937162c7d49aa224125a34ead06357bc03ee2d6e4022f410b0ebf40e288fe67a85299ae90eaeff78a3058259f13c382ead7e5983ca97c5595f131b0","ssdeep":"3072:GVdfsJco1ZacJOiWPWQLNOnZWCbt3EY75B:GVdfsJco1Z9JOiAWUNeZ93EcB","tlshash":"e9d3f7f936d1f442076b50aac03f0006f22c4d77289e6860e3e5ddda756469de1b3faa","first_seen":"2026-05-15T14:10:27.839743Z","last_seen":"2026-07-12T18:27:59.243227Z","times_seen":114,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/chunks/0p8o-off0oonx.js","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.119Z","timestamp":1783880848119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /_next/static/chunks/0p8o-off0oonx.js HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum1.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 34\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"0p8o-off0oonx.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: W/\"c322aed69fee94d5b63ce2cd586cb055\"\r\nlast-modified: Sat, 04 Jul 2026 14:54:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0p8o-off0oonx.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5z67h-1783880813632-022e468620f0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x4ucoP0wW0v8lc6bkNLs7G%2FuyrUENFXli4exhduiKAHm2UWszOzQefxmmx4efPbCVwu6v72Pjg5bxse808ZtwOEK2q4wzMDH5oZbrOcrhazj64TaHxpMMOIk0YgcOX7V\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a1a21a24ca4356c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6324,"size_decoded":3730,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6324), with no line terminators","md5":"c322aed69fee94d5b63ce2cd586cb055","sha1":"664f5eb1f6db818ca6d642a50a297e5d85a27ee3","sha256":"b1f9302606acb9827597c52b92bd41ee475041b5528f17f4077c338dc567f71f","sha512":"ef68bc9a0e22bd0cd42b266168016a39ecdcc0e4e10919c94bf86211de2617e5e48d7646f723a317b0db805b7b77655a8d1c22c3fe5791de52201fbe1122bc66","ssdeep":"192:hF6c6UpCzsGWNz2Wlbyg2Hc6/qNki8oc0oQ:nxFCzsGWUmbccYC","tlshash":"27d186dd72e2f49a43ab1291403b1016f37d0ea4944da054e3a5e89f7e30a9e81f2f79","first_seen":"2026-05-15T14:10:27.862716Z","last_seen":"2026-07-12T18:27:59.244781Z","times_seen":16,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/chunks/0dldamhexgq...js","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.123Z","timestamp":1783880848123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /_next/static/chunks/0dldamhexgq...js HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum1.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 34\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"0dldamhexgq...js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: W/\"186fde2c3fed95a0024d423f47afebec\"\r\nlast-modified: Thu, 02 Jul 2026 22:35:41 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0dldamhexgq...js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rm6gs-1783880813637-64a0da3ef28c\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PAgOcI%2FmqEW2X1cL2MiS3HOzvHzMiKsy1xZwaxkms5hH2jyfok4vmS4SiE4lUPEhh9N12IXVXWAtl3XcNpzp2QLyhMkdLij0uruRP7wf3Kepa9jqlZH11Zpj6VgFx0wT\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a1a21a24ca4556c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87152,"size_decoded":27923,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54811)","md5":"186fde2c3fed95a0024d423f47afebec","sha1":"ac4803bacaf2dd6be90a3431a95f3ac6b0ca9249","sha256":"a9e3b9d13992db3a155696853fc251b952171ffc25a52358577a8f9c92775ca4","sha512":"9b69e59f110ea1dac1dac893db62be119746df16587466a73893ba0f0875a5592f60b02a70eaa69fce9c9a4265d7ff09420367a6a91fefffe31e4b105f91230f","ssdeep":"1536:RIdEgkOeaKZHZhhE+racAMog1wNpSnmv+sud6AJD3qh/1X:OdPkHaKl1Nmc/oAwnOsu/WX","tlshash":"cc8319257245bffc66af83cce4ae600ce22e0b54c21e4965f6ed78361b44294b563f8d","first_seen":"2026-07-10T08:36:59.251431Z","last_seen":"2026-07-12T18:27:59.245627Z","times_seen":4,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-07-12","alert":"Detects mining pool protocol string in Executable","trigger":"ethereum1.org/_next/static/chunks/0dldamhexgq...js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2018-01-04","description":"Detects mining pool protocol string in Executable","modified":"2021-10-26","nodeepdive":"1","reference":"https://minergate.com/faq/what-pool-address","rule":"CoinMiner_Strings","score":"60"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/hero-mascot-cutout.png","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.128Z","timestamp":1783880848128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /hero-mascot-cutout.png HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum1.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 425885\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"hero-mascot-cutout.png\"\r\ncontent-type: image/png\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: \"3376b963509a793da097e76de87d79c9\"\r\nlast-modified: Thu, 02 Jul 2026 22:35:41 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /hero-mascot-cutout.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bjslg-1783457627620-498dba548d72\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u6MSckefEDkYGUOpJ6Sxu1SOSbLPk8K%2Bw9NSk4ssqqaDkBrOM96ETouDHfW%2BIP30WY7srhze4VmHf2q17vAov4qD5yp7ZsFqAimYRXu3jTsxgXaFrUmoKcGnrH326mil\"}]}\r\ncf-ray: a1a21a24ca4656c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1631455\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1631455,"size_decoded":1632458,"mime_type":"image/png","magic":"PNG image data, 1226 x 1283, 8-bit/color RGBA, non-interlaced","md5":"c77bd6fe5e9ea13064128f19c9c40cf8","sha1":"75008f4c761f8d150ab0935d04c8ee3dfa672c31","sha256":"9779decd8b8c17d545723711febb575d685be5ff98ce4446d9080fb8e53886a4","sha512":"7ccf64807f6072d204131a62dd0d6a8445bc6a9684d106a5692a5247bf0ba98c3b04e68e66ea5a504aee6010cb794b1b4d10a0b1fa28bd868c2eb9cce91895bc","ssdeep":"24576:PcZ+wjpDY376BjDmXtYU7b7BGz5PfxhgJ1SUIBjJMxDoABiPh4XJ:PUp837tD7BG138CMxDo+iaZ","tlshash":"842533702b33f6346604dae701ac869573a0065a14f7234bfd476ddc8d8ead998e872d","first_seen":"2026-07-10T08:36:59.258524Z","last_seen":"2026-07-12T18:27:59.247162Z","times_seen":4,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/media/051742360c26797e-s.p.0f97p8c3305p~.woff2","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.198Z","timestamp":1783880848198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /_next/static/media/051742360c26797e-s.p.0f97p8c3305p~.woff2 HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum1.org/_next/static/chunks/0wjwl2cr8b9rp.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"051742360c26797e-s.p.0f97p8c3305p~.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: \"570751c5f8b418972c1976160ba6ed85\"\r\nlast-modified: Sat, 04 Jul 2026 14:54:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/051742360c26797e-s.p.0f97p8c3305p~.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::krljs-1783880813617-6009df9f05ad\r\nserver-timing: cfExtPri\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V4%2B2tLYn%2F9RmGzmqE99KeNZsljZKXbMXDi%2BSteCp98iHAkyC9BhqhxJHwB5YLMV6JkdiQcQAkdKcRQkgfYv%2FwT9j29ZKbK7edFh5YU6MWmfa1DP4R8wRz13QijKRUEPB\"}]}\r\ncf-ray: a1a21a253a4a56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31340,"size_decoded":32389,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31340, version 1.0","md5":"570751c5f8b418972c1976160ba6ed85","sha1":"340e696a955046b002f111c8dd6e30320b456184","sha256":"2c32b9b3ee358c119e210f6f5195f9bd34894d78a785ff2e95d60e718e400af4","sha512":"73bbf3aeeb856003fe948ce03ae8003e7d028d6c1953156d25587c8296d16dc10a22a5e2d3ae946fbc47e55abde4a6ef5cd2b9f9127601c6d2dc030373a5ddf0","ssdeep":"768:y67qM/ZLgNMFA8HoABvJCI7aaM0sY0/oPx0F7Qsrcvisih:l7zx0z8IABol0X0/oP6zAvXih","tlshash":"74e2f19ae864a1c79c7911be7d3c3a53db30ab2d3f6473b428214a0eb9763315933915","first_seen":"2024-10-28T02:31:38.693103Z","last_seen":"2026-07-13T07:57:51.616998Z","times_seen":1972,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_vercel/insights/view","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.370Z","timestamp":1783880848370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"POST /_vercel/insights/view HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://ethereum1.org/\r\nContent-Length: 125\r\nOrigin: https://ethereum1.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":125,"data":"{\"o\":\"https://ethereum1.org/\",\"sv\":\"0.1.3\",\"sdkn\":\"@vercel/analytics/next\",\"sdkv\":\"1.6.1\",\"ts\":1783880848366,\"dp\":\"/\",\"r\":\"\"}"}},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-remaining: 999\r\nx-ratelimit-reset: 60\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::cjhrb-1783880848386-0bf616bca599\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BbvDGBeu0wToY7jnKnFa44MyBNLGSx2l95kBxmTnesVwglUzGwBNl886P2bs0AgLJssjAqaFDln1qOIDJDDygRTeAwkEScMMmFlfeOuCtO65np6fbBUP2MXKFSidVimT\"}]}\r\ncf-ray: a1a21a265a8d56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":869,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-07-13T08:16:36.322399Z","times_seen":345469,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/media/051742360c26797e-s.p.0f97p8c3305p~.woff2","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.102Z","timestamp":1783880848102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /_next/static/media/051742360c26797e-s.p.0f97p8c3305p~.woff2 HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ethereum1.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"051742360c26797e-s.p.0f97p8c3305p~.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: \"570751c5f8b418972c1976160ba6ed85\"\r\nlast-modified: Sat, 04 Jul 2026 14:54:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/051742360c26797e-s.p.0f97p8c3305p~.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::krljs-1783880813617-6009df9f05ad\r\nserver-timing: cfExtPri\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xI7HpvSSY1jVNul855cBGNDBRWz1wF24qizOMvTtOVZrHV4X%2BBfc0kokgp%2FWQgkkvYZy2c2B2FrFSA3hfZUWVFjFYg4UUulbdsFZ0QkFi2pjug5xSWWpTkQmgEl5Fucx\"}]}\r\ncf-ray: a1a21a24aa3b56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":31340,"size_decoded":32385,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31340, version 1.0","md5":"570751c5f8b418972c1976160ba6ed85","sha1":"340e696a955046b002f111c8dd6e30320b456184","sha256":"2c32b9b3ee358c119e210f6f5195f9bd34894d78a785ff2e95d60e718e400af4","sha512":"73bbf3aeeb856003fe948ce03ae8003e7d028d6c1953156d25587c8296d16dc10a22a5e2d3ae946fbc47e55abde4a6ef5cd2b9f9127601c6d2dc030373a5ddf0","ssdeep":"768:y67qM/ZLgNMFA8HoABvJCI7aaM0sY0/oPx0F7Qsrcvisih:l7zx0z8IABol0X0/oP6zAvXih","tlshash":"74e2f19ae864a1c79c7911be7d3c3a53db30ab2d3f6473b428214a0eb9763315933915","first_seen":"2024-10-28T02:31:38.693103Z","last_seen":"2026-07-13T07:57:51.616998Z","times_seen":1972,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/chunks/0_jqk_dc6lcd3.css","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.105Z","timestamp":1783880848105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /_next/static/chunks/0_jqk_dc6lcd3.css HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum1.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 34\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"0_jqk_dc6lcd3.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: W/\"ecaa0086ef4b823c80039666b2bcefa3\"\r\nlast-modified: Thu, 02 Jul 2026 22:35:41 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0_jqk_dc6lcd3.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gf4sp-1783880813617-92c42b6976ae\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2QdoJrSWBJUlDK%2Bxtn7rQx81yWRImSuCNcPvzUifVazSgcY7D5HzmecimWxziKNzo3sW0GPF45zYrQ4%2B43Q7jKtoQjQOiykf1OG2jn4xCce16Mcy0UeG6Tkph4bJHlZ9\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a1a21a24aa3d56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127096,"size_decoded":21810,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ecaa0086ef4b823c80039666b2bcefa3","sha1":"9c396a39a05433bfa42255292cdf57a2f85075f6","sha256":"18bc9cf80067867d5b5cfe2cb0fa2042c68ad73d4fefd354df09dae5f6e48b7c","sha512":"b7cb1f2d47277cf205139fb7f452e039d51fa7c8918151c44e390dae1d82b104f88652514f8c4a2362f7be9da59feded80e9ece1f745e17d55b4fb7a39db35ac","ssdeep":"3072:ZqLhhlJj6uaqV9+fUtZTYUkmkAEtXMno+WDAm+ADRdtGBa:ZqLhhlJj6uaqV9+8tZTYUkmkAEtXMno/","tlshash":"e3c3c690b239ea3f7d3368f9938cb8cc511a70d0dd6986e9fe55622206c7bf5ad27104","first_seen":"2026-07-10T08:36:59.253588Z","last_seen":"2026-07-12T18:27:59.249498Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/chunks/07sqoht8-to1l.js","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.108Z","timestamp":1783880848108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /_next/static/chunks/07sqoht8-to1l.js HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum1.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 34\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"07sqoht8-to1l.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: W/\"d0d3edd078cb2e691eba6dbb05ad9a9c\"\r\nlast-modified: Sat, 04 Jul 2026 14:54:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/07sqoht8-to1l.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ncdch-1783880813621-880aa73fd823\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Es2LqGxctaY9zqgvM%2BJ3k4%2FqY%2BWIHm%2BfG6%2Bfzz%2FLrhOaR4%2BQNAJUxSrVUoV63U4svFCj%2BEUbeqAGVm0dcIhqgQRsVfNY8sZVEMV2%2FiIGvQMTu1eX8nl5KU1aksJPmiQV\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a1a21a24aa3f56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44413,"size_decoded":10715,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24404)","md5":"d0d3edd078cb2e691eba6dbb05ad9a9c","sha1":"86e74eae09fb19be2763421c444c9f6f14e47470","sha256":"e41d354dc731e4e591a5a96728ddd9888ec78fb8dd341baa0f29909098d0dca8","sha512":"eed1c1f59e16f0977d05c4ff23d37956c34b0d8784ea997005cfad769f24780137becd0d41cad3285e2c87bc44c966ac257dd760af61d16b59cf9505f40cce3a","ssdeep":"384:r7odkTd9FjBTxdaBhToIpoVbIBqjac/s+rPYjDExpCkKMny1V0U+cwQh0HAlweql:q0M5DoVkpc/s+zYXExp7ly1V0USL","tlshash":"8013d7b132d4faa3529341e4e43f2016f2790c7520ad6470a7e89c9f754c88da6befa5","first_seen":"2026-07-10T08:36:59.268666Z","last_seen":"2026-07-12T18:27:59.250275Z","times_seen":4,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/chunks/turbopack-0qalub.su4d7d.js","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.117Z","timestamp":1783880848117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-0qalub.su4d7d.js HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum1.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 34\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"turbopack-0qalub.su4d7d.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: W/\"67529c0eaa480cb0a8e030b8d9f0cc80\"\r\nlast-modified: Sat, 04 Jul 2026 14:54:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/turbopack-0qalub.su4d7d.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l7l9p-1783880813630-7136ef9f0e57\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oxvKNF4FTI3SY%2B0yzahc1jcZ9J%2B%2F9cZxGbqN4bTkA2z4CoxmqC8o6rNrmL4h0ckeLoo6aLjRHhZZOLpnZ%2F090XEWkEpG6K1YMOSp7AG74EY80Fe2Ll5%2F4X3yebr50Vtn\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a1a21a24ba4256c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11019,"size_decoded":5600,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10580)","md5":"67529c0eaa480cb0a8e030b8d9f0cc80","sha1":"a05648ebd30151703673a52da68a55ce714d883b","sha256":"934f8691aa916c84565fb4cdbeb40a6ff63df156b6805bdf63c1eb9bc01b9dd0","sha512":"31678f74ddbd4a191db0abdac568ec50d70c4fe3dc770f6c402348a6e37040fecb16435a5d203e57aa3def6ba1d4df49624c30f39499829bce8e4f11b57260ae","ssdeep":"192:S4gMSBC88Esg6+9ErUO/l5UTNWn+S3sBT4fCT3cXXqroor+yLxH:S4gMSta/lKW+ssqCTMKIyLxH","tlshash":"d632c7ea33a6f07343af90ebd06f4004f1798469145e541cd39ca8eb28395aa85e7f76","first_seen":"2026-07-10T08:36:59.245585Z","last_seen":"2026-07-12T18:27:59.251606Z","times_seen":4,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/chunks/0se78ya_3ldiv.js","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.121Z","timestamp":1783880848121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /_next/static/chunks/0se78ya_3ldiv.js HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum1.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\nage: 34\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"0se78ya_3ldiv.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: W/\"f9381d3fdc3433ef387299b5cbf0b98d\"\r\nlast-modified: Sat, 04 Jul 2026 14:54:08 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/chunks/0se78ya_3ldiv.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kjqj9-1783880813634-7562c09184fc\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8u799NxSftnleBdKrinZ3%2BQw4gkxPS6b9rtFxscZpS%2BPozGGND%2BulsGF1FdE1aTM9UtbJ5fGdGZb0%2Bn2nWx1iGcKo3syi3t3iiU8E%2BlkTVQBPsOKMyr%2BbLkDp3Eh6WWn\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a1a21a24ca4456c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":54651,"size_decoded":14474,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54649), with no line terminators","md5":"f9381d3fdc3433ef387299b5cbf0b98d","sha1":"ba072392ad0eb78d64d1b8665f1b2b7dfd9497b4","sha256":"cdc191127ec48934d62163e41c7f9ab3c5779c9356ace7b73b55db5288c5b816","sha512":"56e96382d5cbbb177b5aeb7f5bd40bead3b5483da7a95e7649581474b062993eab68135c92615458de71293ee4ab74e2e36e96d9b0226e9cb1799e4f97ee9fb8","ssdeep":"384:cqzfWst5gWTnLYV3uXeqbktdeUtd8bmzlu2uNf9zXYpDuYNb4xzpk81mZTDxJRio:XDWstOoy3zIxqD97hlFUyCDFZnXqvcaV","tlshash":"9933d9753395faa302db91d9d0370012f2780d7130ad24b4b395d8af399dd8992faf6a","first_seen":"2026-07-10T08:36:59.248783Z","last_seen":"2026-07-12T18:27:59.252936Z","times_seen":4,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/media/051742360c26797e-s.p.0f97p8c3305p~.woff2","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.199Z","timestamp":1783880848199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /_next/static/media/051742360c26797e-s.p.0f97p8c3305p~.woff2 HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum1.org/_next/static/chunks/0wjwl2cr8b9rp.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"051742360c26797e-s.p.0f97p8c3305p~.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: \"570751c5f8b418972c1976160ba6ed85\"\r\nlast-modified: Sat, 04 Jul 2026 14:54:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/051742360c26797e-s.p.0f97p8c3305p~.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::krljs-1783880813617-6009df9f05ad\r\nserver-timing: cfExtPri\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B0qtLSZPvsAK81TGFBKEhJ5adIlcW29WiMFC2DHZazz3lBD9xRhgLSyO9MuV0jgHb3%2BJMoQ38TX0tavDFIjHeXBh45mbYr%2F6OM0%2B2RxagZ4DALftM6OUfnXH7gnvnsww\"}]}\r\ncf-ray: a1a21a253a4b56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":31340,"size_decoded":32387,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31340, version 1.0","md5":"570751c5f8b418972c1976160ba6ed85","sha1":"340e696a955046b002f111c8dd6e30320b456184","sha256":"2c32b9b3ee358c119e210f6f5195f9bd34894d78a785ff2e95d60e718e400af4","sha512":"73bbf3aeeb856003fe948ce03ae8003e7d028d6c1953156d25587c8296d16dc10a22a5e2d3ae946fbc47e55abde4a6ef5cd2b9f9127601c6d2dc030373a5ddf0","ssdeep":"768:y67qM/ZLgNMFA8HoABvJCI7aaM0sY0/oPx0F7Qsrcvisih:l7zx0z8IABol0X0/oP6zAvXih","tlshash":"74e2f19ae864a1c79c7911be7d3c3a53db30ab2d3f6473b428214a0eb9763315933915","first_seen":"2024-10-28T02:31:38.693103Z","last_seen":"2026-07-13T07:57:51.616998Z","times_seen":1972,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/_next/static/media/051742360c26797e-s.p.0f97p8c3305p~.woff2","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.202Z","timestamp":1783880848202,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /_next/static/media/051742360c26797e-s.p.0f97p8c3305p~.woff2 HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum1.org/_next/static/chunks/0wjwl2cr8b9rp.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"051742360c26797e-s.p.0f97p8c3305p~.woff2\"\r\ncontent-type: font/woff2\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: \"570751c5f8b418972c1976160ba6ed85\"\r\nlast-modified: Sat, 04 Jul 2026 14:54:07 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /_next/static/media/051742360c26797e-s.p.0f97p8c3305p~.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::krljs-1783880813617-6009df9f05ad\r\nserver-timing: cfExtPri\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UpHZjZIsqx162Iw4UiGLrAmg5sA1%2BrdUDVpRK%2FyoxosIjUhVp8vryn7IArIuN68Ycr3NiWGx3UW%2BzgZ98L56c%2ByFHViY6u%2BdWuErMpcJcpAJO9L235yF52VtjqYp91rV\"}]}\r\ncf-ray: a1a21a254a5056c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31340,"size_decoded":32391,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31340, version 1.0","md5":"570751c5f8b418972c1976160ba6ed85","sha1":"340e696a955046b002f111c8dd6e30320b456184","sha256":"2c32b9b3ee358c119e210f6f5195f9bd34894d78a785ff2e95d60e718e400af4","sha512":"73bbf3aeeb856003fe948ce03ae8003e7d028d6c1953156d25587c8296d16dc10a22a5e2d3ae946fbc47e55abde4a6ef5cd2b9f9127601c6d2dc030373a5ddf0","ssdeep":"768:y67qM/ZLgNMFA8HoABvJCI7aaM0sY0/oPx0F7Qsrcvisih:l7zx0z8IABol0X0/oP6zAvXih","tlshash":"74e2f19ae864a1c79c7911be7d3c3a53db30ab2d3f6473b428214a0eb9763315933915","first_seen":"2024-10-28T02:31:38.693103Z","last_seen":"2026-07-13T07:57:51.616998Z","times_seen":1972,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereum1.org/logo.png","fqdn":"ethereum1.org","domain":"ethereum1.org","tld":"org"},"ip":{"addr":"172.67.213.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereum1.org/","date":"2026-07-12T18:27:28.207Z","timestamp":1783880848207,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereum1.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Jun 2026 18:36:19 GMT","end":"Thu, 24 Sep 2026 19:33:41 GMT"},"fingerprint":{"sha1":"AA:53:C5:DB:0D:2B:0F:A0:4F:81:0C:46:60:52:FE:2F:3D:1B:DE:BB","sha256":"34:AF:3B:92:1D:03:D4:E3:8F:9B:E9:A1:7F:3A:7B:57:D1:F8:04:E0:9D:B4:25:11:3C:B0:49:89:6E:58:93:DB"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: ethereum1.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ethereum1.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 425885\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-type: image/png\r\ndate: Sun, 12 Jul 2026 18:27:28 GMT\r\netag: \"27038b9e44d9c3c4699ec9c3b09ccee2\"\r\nlast-modified: Thu, 02 Jul 2026 22:35:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /logo.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6zq8s-1783457627616-8ffa4f2d2686\r\nserver-timing: cfExtPri\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZCS6OanfzEVmmWhICIUekyVlfEWhwWAcHDWblQXrF0McuXi%2Bcn%2BI7jrNzOm3eKmllnVdOSk%2BLWGZFuQLy4PxEOWsSPiYXdVCTv2KlmPsDv3etH3fW1zYeswj2pmKieC\"}]}\r\ncf-ray: a1a21a254a5256c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1876356\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1876356,"size_decoded":1877333,"mime_type":"image/png","magic":"PNG image data, 1254 x 1254, 8-bit/color RGBA, non-interlaced","md5":"2ebad1b2a90be6a8ed64ed415b0486bf","sha1":"ec5650ca7bef836f315393a4a210d0f99dbed676","sha256":"37cf91b8af8f5da8499868e5752bb36df9889a5f06f0575a31c33d7aa17eee42","sha512":"475f0aafc48a6cc703024ed253566eec991e951ae3cefee1c8acc74db972126ba77e7bdb2bf15d747cf77f63359f1627269d5501bd28f6bd1c6c5401069d2d0b","ssdeep":"24576:XSvNUZGq5gmEllQ71GQz1AsOi3xD+CjbW+aGyE:KNUn5ilwjehi3Al+5n","tlshash":"01253389c800ea3b85ec61fd2752def8b53cba3aa1454c3da9934c94e25b79b4747c31","first_seen":"2026-07-10T08:36:59.260534Z","last_seen":"2026-07-12T18:27:59.225884Z","times_seen":4,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"ethereum1.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}