{"report_id":"154332b4-5795-429a-a9ee-fd64a76d2f89","version":6,"status":"done","tags":[],"date":"2025-10-17T02:06:41Z","url":{"schema":"https","addr":"freeethereumclick.com/","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"104.21.79.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"freeethereumclick.com/","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"title":"Free Ethereum Faucet"},"submit":{"url":{"schema":"https","addr":"freeethereumclick.com/","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"104.21.79.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-21T02:06:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"freeethereumclick.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-28","domain_rank":713727,"first_seen":"2025-10-17T02:06:42.804174Z","last_seen":"2025-10-17T02:06:42.804174Z","alert_count":104,"request_count":52,"received_data":1718681,"sent_data":24827,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":3,"received_data":21628,"sent_data":1484,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":13,"received_data":289171,"sent_data":7160,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/160x600/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dbe01565f22313877e75ac581119ac38","sha1":"1efaf245d550523dc22787686135521e199646f1","sha256":"ce7eec9c5b99eef00154ed101fecf2ef26bc5cb84f5648cbf887515028287b9e","sha512":"391ad3f2c642ab424d5bc6375fe9dc6a58b425f9151313f26c1c8686b69ee5463d16427c4689009870e489d345425a8c5e7e820f9682973d199e2e1934fdf7cc","ssdeep":"192:6N44VNlABIiFlBOk2Snqjbcu9R/nkN17nkWDCYYWXF2kK6CCVi17tKQXedpxao/I:A44jilTnGN1uXIespKOo2XpUFarV","tlshash":"a892eba8ba31f2b29bf355fd412f1509b27a94ade40880d0718cc4f529b5e8641f7f7a","size":20715,"data":"","first_seen":"2023-11-05T14:46:28Z","last_seen":"2026-06-28T06:59:04.618441Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/300x250/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dbe01565f22313877e75ac581119ac38","sha1":"1efaf245d550523dc22787686135521e199646f1","sha256":"ce7eec9c5b99eef00154ed101fecf2ef26bc5cb84f5648cbf887515028287b9e","sha512":"391ad3f2c642ab424d5bc6375fe9dc6a58b425f9151313f26c1c8686b69ee5463d16427c4689009870e489d345425a8c5e7e820f9682973d199e2e1934fdf7cc","ssdeep":"192:6N44VNlABIiFlBOk2Snqjbcu9R/nkN17nkWDCYYWXF2kK6CCVi17tKQXedpxao/I:A44jilTnGN1uXIespKOo2XpUFarV","tlshash":"a892eba8ba31f2b29bf355fd412f1509b27a94ade40880d0718cc4f529b5e8641f7f7a","size":20715,"data":"","first_seen":"2023-11-05T14:46:28Z","last_seen":"2026-06-28T06:59:04.618441Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/300x250/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"23d89aef4915a997207162d471001df5","sha1":"cb893a10550004d4755bf74cab24a0cda02de47a","sha256":"b1be62ee609f9155ecc9da0702b73ad5fdf15706cb650d450a3b2b24659deb26","sha512":"a63a0cb5ac4d2886b6e677609afde51e9d3df8254da0d51b80b2b9e5697325796ca391a56b33171a76afb7af4463e6b0d83982c3aeb813016322d0eb4593d117","ssdeep":"","tlshash":"a451526ab250757441d392f2101f564aa13ef1b5d80cd09d3ad0dcfa5eb289e013af7e","size":3093,"data":"","first_seen":"2024-02-19T13:11:48Z","last_seen":"2026-06-28T06:59:04.615467Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/160x600/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"23d89aef4915a997207162d471001df5","sha1":"cb893a10550004d4755bf74cab24a0cda02de47a","sha256":"b1be62ee609f9155ecc9da0702b73ad5fdf15706cb650d450a3b2b24659deb26","sha512":"a63a0cb5ac4d2886b6e677609afde51e9d3df8254da0d51b80b2b9e5697325796ca391a56b33171a76afb7af4463e6b0d83982c3aeb813016322d0eb4593d117","ssdeep":"","tlshash":"a451526ab250757441d392f2101f564aa13ef1b5d80cd09d3ad0dcfa5eb289e013af7e","size":3093,"data":"","first_seen":"2024-02-19T13:11:48Z","last_seen":"2026-06-28T06:59:04.615467Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/7515-1f8821000592c53d.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb45be19c0f0e77f30e4b9ccf14aaa83","sha1":"9add384770ae44a1d84f5403a3eeeb6ed64c8bbd","sha256":"3039fd336cdaae0f7dabb25774099a2bfc22b661705aad727f90f00ddc121bcc","sha512":"b4977d274eee98fdc3c9d6ec7e67161d9d9629d0414734ec4a1716b3e64a5c26869aa7a15bd81a8d6a312809922b05725052cc6dbaa26c0af4ea155f8558cad8","ssdeep":"384:EKq+Qh5rBV1DJg2Cx7lkkddVK009SrVW7P/VOO:i1/1dg2ykkM00Y8Z","tlshash":"f25265795180a3e9b62b4484756ec908732f2644cb7c98f4b9ba94210358fe8b61fbdd","size":13217,"data":"","first_seen":"2025-10-17T02:06:47.647303Z","last_seen":"2025-10-17T02:06:47.647303Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/5862-429519da5dfb9196.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c29d1d7f7322c89da18bdef59bfab009","sha1":"b42a4ab7773c22f672adef731fe953f3afbf3ea5","sha256":"c97be2052969d4ac0ccbf3472386d1fe8f3531dc8187ef0b53ea8076204498fb","sha512":"555ac2458f881e6e71d11c53d1166e97116b4b9a2e74468fad3a29a294d55778c2ba1451e249d6b1f03a5d7a0c04947ad51b79893b404436c6b7785927ff35fe","ssdeep":"192:9Vk51AvZ03qL+gOQidOWmv/LRQIWze0hM/eGCUhnMfg:9VkDAvZ03qL+gOQidOWm7R3aszeo","tlshash":"fe2254289554feabf8394c8dbb5fcc18e22f3744db254c30b6bca81206a959437277d5","size":10509,"data":"","first_seen":"2025-10-17T02:06:47.532858Z","last_seen":"2025-10-17T02:06:47.532858Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/300x250/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"efb9f8d9d482d626fffe28ebcc09477a","sha1":"74a8591083a923a9e578e3bb248933e85363c608","sha256":"b786f84de12d42ce8ee6ce50e759e278c45bd3312972dc662a08c3d389ce7611","sha512":"5ff15817a199cc063dc4f84e32f30d50b4b4a541d143f2d6c123b8852cc83ce6c3478caa3c4164931bc2717043ea136fa40bf978d3d32595c37a30a4d0126b5a","ssdeep":"192:kni4BDVRPX38Gsc01geUUutN9Cw9lWBP15:knFxRPXUcogbUBvP15","tlshash":"dd02f9a5b300697882d3f1e3619f0507b53a94a5fc889d9e32a8dce21cb0dd60177fb8","size":8813,"data":"","first_seen":"2024-02-19T13:11:49Z","last_seen":"2026-06-28T06:59:04.636818Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/300x250/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec3137797c90c57474149d879ed216e8","sha1":"b7c9bfbcb326a207a34230b7a6b59aa3796217d4","sha256":"8654665e9497ea69ade0780c2ddc607387c348171a3a7b9c11dfd00b4352dffc","sha512":"707a1101416b98625bc251211150ac2b554527e383d011b137ad051524093e36e11d1f0764b70ce4b7175177adf26bd753a5f7f16d05a4cdf770646faddd0cc3","ssdeep":"","tlshash":"7c515844f930a2f1066791e5a12f650af33b65adfc18d6c9114cccf464b168b0b62fb6","size":2873,"data":"","first_seen":"2024-02-19T13:11:49Z","last_seen":"2026-06-28T06:59:04.619376Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/300x250/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e1ce687edb8ee62c35f88d28f656875","sha1":"39184f8b6ec9465c0b6de18e0019a8f7d84596e8","sha256":"196b783a9de9948108a3d7322e38d156ba03151421bc825495b8dc1c9d350d29","sha512":"e17ccaada1c0b2e87e944e6806beedc60ffd72281beea7956d5c40ceed6598e81c0492b01cddf33cecb1d6224b3e33987c9abd5477c556a34ecbb0c990a319d8","ssdeep":"96:AuVE3B826Nyr7OUbrynubNDZ66Wf7QzmdLmNBeL:wB8crNn369sz0iBeL","tlshash":"fbb1857f72a17a720a8254d6841f154aed3b68fbc40841e8feb5e8e35cb98421279f34","size":5380,"data":"","first_seen":"2024-02-19T13:11:49Z","last_seen":"2026-06-28T06:59:04.624204Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ff37c17806f6b19af5978be3f43a02d","sha1":"9985a0e2e0774cb0cf351b59d035bce30e2cf930","sha256":"7bcb4eb7a1f7790a06e95134715ac9c7e176e9886502141ae8c38a224c64840f","sha512":"f1666531bfb7bd83da6401be78983ed85ed73bc539fa0c18704feab08666cc46cb38ffde8003afe1d6db7290f173469cec2e13fbfa0b7f7198932b48d01022c3","ssdeep":"","tlshash":"f431a024886700a5945319eb3a6e58507471b073713cf902b46d62682fd8b1d6362edb","size":1870,"data":"","first_seen":"2025-06-30T16:52:49.563355Z","last_seen":"2025-10-17T02:06:47.699626Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/160x600/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"efb9f8d9d482d626fffe28ebcc09477a","sha1":"74a8591083a923a9e578e3bb248933e85363c608","sha256":"b786f84de12d42ce8ee6ce50e759e278c45bd3312972dc662a08c3d389ce7611","sha512":"5ff15817a199cc063dc4f84e32f30d50b4b4a541d143f2d6c123b8852cc83ce6c3478caa3c4164931bc2717043ea136fa40bf978d3d32595c37a30a4d0126b5a","ssdeep":"192:kni4BDVRPX38Gsc01geUUutN9Cw9lWBP15:knFxRPXUcogbUBvP15","tlshash":"dd02f9a5b300697882d3f1e3619f0507b53a94a5fc889d9e32a8dce21cb0dd60177fb8","size":8813,"data":"","first_seen":"2024-02-19T13:11:49Z","last_seen":"2026-06-28T06:59:04.636818Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/160x600/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec3137797c90c57474149d879ed216e8","sha1":"b7c9bfbcb326a207a34230b7a6b59aa3796217d4","sha256":"8654665e9497ea69ade0780c2ddc607387c348171a3a7b9c11dfd00b4352dffc","sha512":"707a1101416b98625bc251211150ac2b554527e383d011b137ad051524093e36e11d1f0764b70ce4b7175177adf26bd753a5f7f16d05a4cdf770646faddd0cc3","ssdeep":"","tlshash":"7c515844f930a2f1066791e5a12f650af33b65adfc18d6c9114cccf464b168b0b62fb6","size":2873,"data":"","first_seen":"2024-02-19T13:11:49Z","last_seen":"2026-06-28T06:59:04.619376Z","times_seen":100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/300x250/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f82a224e138183ba39f444e2d892f10f","sha1":"cbcdad10814a286dd59308e078050c395f0f9cf7","sha256":"f64eba0ea336c57bdaae672f23877c949f2b93f9891a22de204ded91337d1948","sha512":"5187670cf40edcdc0607066d41e5df787ab29394c4fd1218505fd42f249d33c12d0fd3c6d427e9372f4c3a42f30acc19cccc8367d1cf6dbf2adbdf3a47f6d998","ssdeep":"","tlshash":"07512459b2a2493447de18ee851b1549b33e342cc80861bcb5c4d4e2edf6b910a3af7d","size":2584,"data":"","first_seen":"2025-10-13T06:15:21.954065Z","last_seen":"2026-05-20T05:43:49.62349Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/main-96e9b4333635008a.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cec733fb0ecaeca0cf97d16541e07946","sha1":"aceb6731d2ff101952b91143e9b09783e4774a06","sha256":"7169ae661581ef285d7119f77d15ace8568f6f3476fcd428c4d6285afc1c3143","sha512":"87c24f391e42a4c13d8005bcacdb150b55ee77fc069b723685ed3a49bc2506050d638906134fb09dceadd098da69f1c2e01038b098948879d07d4c04342b7461","ssdeep":"1536:Em00QXtSwh9pyZEZHXTtHbkus9MNJGzf+6iokB2zU6:EHDh9FDBgsNJGL+2kBQU6","tlshash":"26b31ab676d1f8b203db41d4843b0007f3691cba146f6051b3eadcd6b5a099ea0b2f79","size":117015,"data":"","first_seen":"2025-06-30T16:52:49.508564Z","last_seen":"2025-10-17T02:06:47.600689Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/300x250/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1ffbdcbda718627f45e3337130b91b2","sha1":"14bb4ad8a003253d52cbd938b695631f9557682e","sha256":"e5b23521694ce43d399dfd065809793399c991781dd26760d6a7f24f87721624","sha512":"fe460aa3ffbfcaacc22dfc5039c2f246819a57fc5612a7e615c39f84c5c636b37c92e59ce7edf99804e5e6af6b649d3c699a98d5d062436becc37ecbdb58bf8b","ssdeep":"192:7j39wGlz+knVDmtyZHE70JO1APuRHWBwxkKkIP+uGL/5WFIV:Nlz+knVDmbGuxWBwxkKH+9LV","tlshash":"5af1a6a832103e7949db16fbe39f148339326462d904896e749ddc90bebccf14267db5","size":7587,"data":"","first_seen":"2025-09-03T18:45:47.668188Z","last_seen":"2026-07-21T03:15:59.957137Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/160x600/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e1ce687edb8ee62c35f88d28f656875","sha1":"39184f8b6ec9465c0b6de18e0019a8f7d84596e8","sha256":"196b783a9de9948108a3d7322e38d156ba03151421bc825495b8dc1c9d350d29","sha512":"e17ccaada1c0b2e87e944e6806beedc60ffd72281beea7956d5c40ceed6598e81c0492b01cddf33cecb1d6224b3e33987c9abd5477c556a34ecbb0c990a319d8","ssdeep":"96:AuVE3B826Nyr7OUbrynubNDZ66Wf7QzmdLmNBeL:wB8crNn369sz0iBeL","tlshash":"fbb1857f72a17a720a8254d6841f154aed3b68fbc40841e8feb5e8e35cb98421279f34","size":5380,"data":"","first_seen":"2024-02-19T13:11:49Z","last_seen":"2026-06-28T06:59:04.624204Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/160x600/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f82a224e138183ba39f444e2d892f10f","sha1":"cbcdad10814a286dd59308e078050c395f0f9cf7","sha256":"f64eba0ea336c57bdaae672f23877c949f2b93f9891a22de204ded91337d1948","sha512":"5187670cf40edcdc0607066d41e5df787ab29394c4fd1218505fd42f249d33c12d0fd3c6d427e9372f4c3a42f30acc19cccc8367d1cf6dbf2adbdf3a47f6d998","ssdeep":"","tlshash":"07512459b2a2493447de18ee851b1549b33e342cc80861bcb5c4d4e2edf6b910a3af7d","size":2584,"data":"","first_seen":"2025-10-13T06:15:21.954065Z","last_seen":"2026-05-20T05:43:49.62349Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/300x250/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"70dad4666c3e1e121d69f13c304412df","sha1":"ca8426726ec999f87fb3736159e68cbd52512e71","sha256":"dc89f7edf5339b105d9d046b3520821f5631a46d091e645d5c61868514d6557c","sha512":"11aeadb7280ffa8e220a27a06a828fee0ec81262dc990c7db247def9e2e499e915b3d312af8900a2b2e23d8fb3d4468ad2b0b71b1af98763aa0c69520118562a","ssdeep":"","tlshash":"bdd05b5fb66060d0c80f48a8374b40d425704dde1715182eb6948e821ff4387003734f","size":264,"data":"","first_seen":"2025-06-30T16:52:49.566086Z","last_seen":"2025-10-17T02:06:47.717006Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/300x250/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2040de68f57fb616dd97ce9000004f1d","sha1":"efc9d80f561ce63962a96cbfa5ef122aef5d2f05","sha256":"1804021bd0d1bce0e0215ec538a1857952f511756042e6e385bde42a04de93ee","sha512":"5c19b0f99a49028c374d3d65726041b7971ed96ea0e5c1de5ed2594213bb77e89fbec8d1a26ddfa186cab36f1bc46011fed7651ac0dc37de50e8ec4eec66758d","ssdeep":"","tlshash":"78110c4ea1c86f34cd8f498cb74743821d3398e6b318254d82ac1c705fe9f95c2b7982","size":871,"data":"","first_seen":"2025-09-21T00:50:10.615516Z","last_seen":"2025-10-17T02:06:47.721382Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/4589-4b6314fce12b9c8f.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"905117ea9b4fffcd4a6399b83763f868","sha1":"bbfce17ea224cc22e953208edce7dfbba9b79a77","sha256":"c865c39473164e7b7ccac65bfe96cb2bb91af7d0728d62fe70c9a7f79e9cc2c9","sha512":"f276c9382ee4e89190ebbc3097a6bcfec0383d949ff0540be5c89f69660207acb7597f9b3783185827f6777683f49f497e70080d1a4bd8786315f7e7736c1c80","ssdeep":"768:sTzXsY/AYU6+PPCky6L9Yr4I3kjJfVgY8VLWjpX/bQ2yzwFvR:jPl6+PqbW92lk0HWjpXUOFvR","tlshash":"3453f9c9b6a1b0b643d31156803f850bf3ba2d2d985ee054b361d8e47cb849e436bf76","size":63334,"data":"","first_seen":"2025-06-30T16:52:49.555005Z","last_seen":"2025-10-17T02:06:47.524592Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/pages/index-c20571666465223e.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8abd882c8675ee9c23ff6a74cf4f374a","sha1":"48e0e89d3c1370abbceb031be775a29c1f2e1097","sha256":"ebecf690f20cb02b8c9fce85a35e35ac0887055ea950216c9219b02ef4c2723a","sha512":"4f92b45e96c1d6e7e2d9ddc0224b5fd637aca2b1bef1b4ef743449302ab10b0820d3b983d19f357cef2eacb1f4be44d89bf9e790da0f8043eac00164ceffdf4b","ssdeep":"192:/9MGsULVIwUzAcexoWZnMRmuTvFI2wpP6:NsULVIwL/oWZMAXpC","tlshash":"1bf11194f288ed99fa7f09c9412fc00db31f3f49c76a0c76b9a8580156558c87b26bde","size":7827,"data":"","first_seen":"2025-10-17T02:06:47.63092Z","last_seen":"2025-10-17T02:06:47.63092Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/300x250/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"952dbbe9a1f27d29564271984c3dfe47","sha1":"5a6321adc7ccfa9766ffd0e45db3944d107f52a4","sha256":"d87df7d6287a3e3319c7544904d021f14a070be19ab83f19b5914d0153784b4e","sha512":"b9ff6094348d64ab388b1c37c04d777850b02c2601b521bf68c77dbfd59598ea739baf663e79cccae1befe5596ab1966c2d8002c154bfb90740af1505cec12cf","ssdeep":"","tlshash":"3f21ad3e7aee05364557e03c372f72819672d1db15009581384c4bad0ff0a5611b7bd8","size":1163,"data":"","first_seen":"2023-03-08T21:00:56Z","last_seen":"2026-06-06T19:52:03.218131Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/pages/affiliate-9cf0046eeb978abd.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b9e90c9609d7d57936b4437a3289204","sha1":"a886129b7992fb28e291a5143c63a0c3b9dba471","sha256":"a6359aaab2522b11bf30c4d38f61393659de6150962509caa40f3f6a6bc95275","sha512":"a40104924b561485e99f694f851d33964360e19f18b7aaabc9c3a03026f9593cdaac56579b05cbb1173a49e62dbab6d75fed6085f15b9f86c838443afddb82c7","ssdeep":"96:9AwnMsj80LlPxIO29wsyTfFWmg9zATbeED1exoWZasBtsPgPVXjJM2f5aQAmPo6:dlyvWsyTtWtzAdexoWZaGtsaFM2wpl6","tlshash":"c9f14114a489ad9dfa7e098c412fc00cb31f3b49c54a0c79f9f99c259a948c4b767bde","size":7833,"data":"","first_seen":"2025-10-17T02:06:47.627009Z","last_seen":"2025-10-17T02:06:47.627009Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/framework-d7b1fd6dc103448d.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60916262231ffc952d72062c0531daf4","sha1":"712d33eb1d80abd2c685f19432fe43948b0fcd94","sha256":"dbafc3ad8f58d9a750af73cf57b080f1333bbb5c4d23d31d0842bac971ae7b43","sha512":"def11364f133cd73f5d047e5cc45e34e639c9606576e236aac946db4352a5c78486857dfe9c0c09d12c7c130d1a12ac16d45a577308a8be752023e459252a8e4","ssdeep":"1536:fWUYDxRWp0vCH5vkpND2ciit5PNm3No1M4zp/FI8SZuWQt2vMs6sOfZLbOxxjHmz:eWplHritYwzp/FI8Suj2vD3wqPrYzB","tlshash":"6d040be83995f151aeb312b710af1813733c252b280d4d60a211fd9eb5b845eb17bf9e","size":181617,"data":"","first_seen":"2025-03-29T19:53:38.090565Z","last_seen":"2026-05-25T21:12:53.987732Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/3977-8d096a10cec965f4.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64a5c51bda9753da4fcec7f20332cd28","sha1":"63087d860c6e8f2e80033275a8300d2129435902","sha256":"dba417054d29b9d422ce5384d2a3efe6225d9185613862a23ae0cda08f511d3d","sha512":"2bd4c78c8d41f4e1a279f61fe6836c574d8215048076539cd8f6d4d44d786d6de0cb8b64a6eafd1d1969a7c994ca8b45c9015bad3723ffefbcf33c17807ee926","ssdeep":"192:fBnmGFYugZ3+z9GHgXWlGzoqNytA4QcUIkcGoWxmhsX:fkGFHgZ3+bXWY6A4QcycbWxFX","tlshash":"3912a714a156f6eea9b545cc802fc45d722b3950d90d8cb0faf09c6a15a8cdcb257fce","size":9820,"data":"","first_seen":"2025-10-17T02:06:47.667656Z","last_seen":"2025-10-17T02:06:47.667656Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/webpack-a51d67a8727b2200.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b07c94c777ee349984503fbdcb499bc0","sha1":"1958bd939f2ba339184d2fb2ae640cd0d4ffbac3","sha256":"ea2caacff9ad829d3a170fe6bfb34194e372ff3ed4f459b9d3d42cb598586430","sha512":"fa9e9148d195ebe0a1cfb9c9a2e5e5c62b3381a4297f6340da16b1faba963e63c810e700bd6e4c8de8ea84732900b6dcd18035820086d1af6879724a8894372e","ssdeep":"","tlshash":"d861d86a36a0f9ba2a5009801d3f9997f6146433162fd8b0b32bec757538ad04566fb1","size":3225,"data":"","first_seen":"2025-10-17T02:06:47.597459Z","last_seen":"2025-10-17T02:06:47.597459Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/N20lBZGAzhcVkIQ-3i7uj/_buildManifest.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ce7a763a4cd1187fc8c76cd39a3d9ff","sha1":"56bd96ec5f8c124ca84098427d2e4b9b10aec6e3","sha256":"0d942ce0b9d4ad8e7c26a9488237e6d7512af6dffc013b235f0d4536a2bfa526","sha512":"dc8f139c761439bd68f78167a97e609d4bec98eb3ce3a17bbfedae5bdf800557dc02c48998ecefe642611afcd2eed43c8e3d981d273c6c73ddcac8bc12729b1b","ssdeep":"48:9rdjeYLlXBx/7bqJr/MWgBOQDB1dlfbfPIbMtPTo7q3SlOEwGBUGwQK7S/ljN:xNRdur/MrkQDBvtzIbc1qEywQz/z","tlshash":"5c128876940ae5025de0dd01363f3f6789d0eeb689b2c2a5935f5eb893c327187488e2","size":9809,"data":"","first_seen":"2025-10-17T02:06:47.547206Z","last_seen":"2025-10-17T02:06:47.547206Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/pages/_app-a626a452848e167a.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d421b445833905eee1cc13e01d862250","sha1":"de4906ec6053390b98bcc91d60aec55d80e13cf6","sha256":"349c22c1b45d2ccc42fc9b449293b2f140135e4b78a654dd14d8976fa1fb7328","sha512":"03787dc0886a016d737fa7727926c34914c13aeaa361ffeaa168738c4f083a07db4a5197c06e033fa015e70df87066073c8d631f57e5be1797c4457232d53aa0","ssdeep":"1536:3Ss4T8M6UvJ5RZ/51O8ungA9EeHCmSJdHGnBBnfHjbHpmJ3nmJ3uE6un6OPBJHxE:CVT8M6C5T3kF1MvTk/L/LquJnMsEHs8j","tlshash":"30043bc0b620e2fc59d75885551f8808f21e64a89ddeccb87bbd8aa501a6dccf523fc5","size":176529,"data":"","first_seen":"2025-10-17T02:06:47.663721Z","last_seen":"2025-10-17T02:06:47.663721Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/N20lBZGAzhcVkIQ-3i7uj/_ssgManifest.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-11T23:07:06.102527Z","times_seen":252492,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/160x600/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1ffbdcbda718627f45e3337130b91b2","sha1":"14bb4ad8a003253d52cbd938b695631f9557682e","sha256":"e5b23521694ce43d399dfd065809793399c991781dd26760d6a7f24f87721624","sha512":"fe460aa3ffbfcaacc22dfc5039c2f246819a57fc5612a7e615c39f84c5c636b37c92e59ce7edf99804e5e6af6b649d3c699a98d5d062436becc37ecbdb58bf8b","ssdeep":"192:7j39wGlz+knVDmtyZHE70JO1APuRHWBwxkKkIP+uGL/5WFIV:Nlz+knVDmbGuxWBwxkKH+9LV","tlshash":"5af1a6a832103e7949db16fbe39f148339326462d904896e749ddc90bebccf14267db5","size":7587,"data":"","first_seen":"2025-09-03T18:45:47.668188Z","last_seen":"2026-07-21T03:15:59.957137Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/160x600/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fba796c51d64ce8a3256789c50b37415","sha1":"adc61c80154ff19d29581c6aed847f45f157537b","sha256":"f89d95ddb8d17fadffdb6d5de71430f349cfeb7ee00180358b829de94e12425e","sha512":"fa75f47a09dab7e93c720db825c90c77dd52a9a62b044e9f608fc03b30807dce16e2c89c36705ae37cbe38feecdd95ad78152f3f44d79b88e2ebff850794a17e","ssdeep":"","tlshash":"c3c0125aa6a15194cc0f5498379751a525308a9e1b15192ee6548f421de4386401b34a","size":182,"data":"","first_seen":"2025-10-17T02:06:47.728588Z","last_seen":"2025-10-17T02:06:47.728588Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/7391-1167995a2b7ae2cb.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"232a28fc78c311787b5f968f13e3ae63","sha1":"6d6b0d309e79de24e71dac62258572e6410ceca2","sha256":"3c5fefb78bf90ea8215694367757b47cd5e59e26842aa7a1907e518baec3285c","sha512":"d981348ab8a0f4be1e87e796c8cf4e73dc417a0f78baf2a9b774ef06b76c76e4ec554b1c075206f74aec9c75ffada43375a2587c2575e1fef2a0eb3eeec296a4","ssdeep":"192:krS1d+N9Ull5UOoUnN0LPUCvUQJUCnuL5:US1oQlEOBnFHQKCnuN","tlshash":"f4f153cd35dab48cd317a055056fa0dbe1767d169ccc8749d338b0e2bc245be602af9a","size":7505,"data":"","first_seen":"2025-10-17T02:06:47.614988Z","last_seen":"2025-10-17T02:06:47.614988Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/160x600/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3364ee63c4ca3a7079b148b457f9d8d7","sha1":"57fb1e71a0e786ea9dc9ac6594f811ab68e94725","sha256":"5aa4422ccc49b6ff533f517f03b36158d1fc190f6b2af4494d7e19c469a81eb0","sha512":"ba9631a070e2381f699f4bc3eb4d30aeb8b1ec8c9b08c2d756d45f653ac644e5ff49c02462513df498b3942b0e4c840da5463c9993d7eeff421a2436c8684f4b","ssdeep":"","tlshash":"24014e8cd5c86b35cd8f498cb38753831a3398e6b214265e866c5d709ff9b94c197a81","size":710,"data":"","first_seen":"2025-10-17T02:06:47.737012Z","last_seen":"2025-10-17T02:06:47.737012Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/2868-4037a20516902ce1.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa5e3369b778a95307a2d286363900c5","sha1":"a988b9ccfe19b7837298c67d50cd400104545f00","sha256":"942bb68bdd103e7f2065cc08754152ed136db042f3f3f51856d5595679700a68","sha512":"a4e70115e8fee7c145fe1e27fdca7e1bd968e206a8e9c444c8bea0447376019abde01fd00581086a8effbd6871024ed789afe1fda0fc3bf7fd94608d5b20538e","ssdeep":"192:Mevc1ARS4siRHBfCflxe45Nxav3avt7RUsj3wnS1oM2J6X3c7:Mev+ARS4sYHB8lvaCvt7RjgAoMvM7","tlshash":"b55287a8eb65fb6ff83544c99b8bcc0cb11f6904cb354c30b7b8a45606955907b3ab9c","size":14335,"data":"","first_seen":"2025-10-17T02:06:47.607905Z","last_seen":"2025-10-17T02:06:47.607905Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/160x600/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"952dbbe9a1f27d29564271984c3dfe47","sha1":"5a6321adc7ccfa9766ffd0e45db3944d107f52a4","sha256":"d87df7d6287a3e3319c7544904d021f14a070be19ab83f19b5914d0153784b4e","sha512":"b9ff6094348d64ab388b1c37c04d777850b02c2601b521bf68c77dbfd59598ea739baf663e79cccae1befe5596ab1966c2d8002c154bfb90740af1505cec12cf","ssdeep":"","tlshash":"3f21ad3e7aee05364557e03c372f72819672d1db15009581384c4bad0ff0a5611b7bd8","size":1163,"data":"","first_seen":"2023-03-08T21:00:56Z","last_seen":"2026-06-06T19:52:03.218131Z","times_seen":235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"freeethereumclick.com/images/coins/doge.svg","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /images/coins/doge.svg HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\netag: W/\"175fb-199a6a99278\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VjYIyZY2gYlEkk%2FiNSSHYj6opx5wSHWaj5qaiYndOxbgkR4qU%2BWEOlXJelQqH0ws5Wbr2NhyXD0wvYK5SPIu6z6y0LehwJDHmHm54dlhDzTORUw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c6ba9975695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95739,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"edef22dbc0ee5d84b4b80c318760bb4e","sha1":"ec8b35cf48c097a8f3b5c18099322a03c5ffeedb","sha256":"7275036b5311506651c6732b1d18f484c844db1ddb42e95aa091df10ac888050","sha512":"d547001c1757cc7389aeb38a14dc09b257b1bdc14f51710b6d86ad73d4080f924bf6835d842efecf549540dc1ccd56189de6016420085bd27734f3e87566275c","ssdeep":"1536:05Nb00D85rdY+CiuZbNwnKvLMGz0j4aksaCkQQowPygULx5BFp0gL:FOI7","tlshash":"ff9375f6a3d8b2e0e406e7f4c52a95b6766f38fe3b56cb4443e45d94aa1116d88cccc0","first_seen":"2025-06-30T16:52:49.497274Z","last_seen":"2025-10-17T02:06:47.463167Z","times_seen":4,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/images/coins/ada.svg","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /images/coins/ada.svg HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\netag: W/\"1c83-199a6a99278\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iUvk1yh4yq%2FvccMvuG1QdVotTXWWrJGY3sg1iCAJ29axNIg%2BGMSevGx8g6nsOdmqjNcN4vOzK6asKppcaY9vtEOkZbacgPs4catz%2Bw5ceToauwY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c6bb99c5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7299,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da1ef23313b9ca59bd7f3f15d04835de","sha1":"031c17bc265dcbfbb48b285363d63d6ca79b912b","sha256":"6358f7af41f225271c26ea5a32d2b07790e80c511e92de9b350824e772dd02a3","sha512":"fe94633afd422e199fd94d6eca79642f7a791af65232a94efe0c977017e1771a44dd9ee13c8fb215d395a4d5ef067547fa8110d5d1b449e9894b615316ee171f","ssdeep":"96:utV+us0X0TXDQjzWa88LETELQnhB5BOFVWsBbp8Be2bZlXfhaXVh3+eX:UBZ2XDQjz28LEToOT6TWabp8Be2bZKY0","tlshash":"bae15ee163cca1e4d60b97e4862aa0357f1b70f6af41d7450ab85e29b9058afc8dccc0","first_seen":"2025-06-30T16:52:49.482747Z","last_seen":"2025-10-17T02:06:47.470073Z","times_seen":4,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Ubuntu:700|Hind:regular|Montserrat:regular,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freeethereumclick.com/ads/EarnBit/300x250/index.html","date":"2025-10-17T02:06:19.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css?family=Ubuntu:700|Hind:regular|Montserrat:regular,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Oct 2025 02:06:19 GMT\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6602,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d8baf562391a897d0f5dfbd2b67920d4","sha1":"06a68309f7ce188eb2fd8ae50bc000cffce98ebd","sha256":"f7d32e2cfb05b18f386199801f92b3ca63cd22b429a0eb70b6de01ed44b19eec","sha512":"82eefa433120beb343cf36d6e2917bdb9c5a6687dc52ccec8da9c32309aebdfc2eadd74f411e3a5dfc5002a7c50a78ac17cac69d6684d0453e8c28d70c5d8703","ssdeep":"96:MOL1OLoJc+uiOLkNtOOLRwOOLOFZOhOOLJOOLeJc+udOOLu9NtOOCRwOOCOFZOh3:RAMaqRa7h5OsuQRD780ORuoW3zQ6FZZH","tlshash":"26d1be91145ba900a7431cc623cf7e36ce4e21967495c576bbfe2c98ace6c364362b2d","first_seen":"2025-10-17T02:06:47.476604Z","last_seen":"2025-10-17T02:06:47.476604Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/300x250/logo-dark.svg","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/ads/EarnBit/300x250/index.html","date":"2025-10-17T02:06:20.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /ads/EarnBit/300x250/logo-dark.svg HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/ads/EarnBit/300x250/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:20 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\netag: W/\"120d-199a6a99278\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vuF5ZoWBY2a%2FaAKqunSuts0HkBIPCONpYOycylj2KfE9BSzt8kJprpi6ILvxw8%2FBauZiqyraEUbGWNPvsaQBDCWrKEdlMFMiLxQyfckUp%2FUd5bk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c712adf5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4621,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1ee3d8f69ece088dfe5ac360e80f657c","sha1":"c0330b45e70fc04615a7395f301c66ca991293c9","sha256":"3602a4c47656672b8b5deed638f4e29b90b1d09f2719a133d44827e5710fd98e","sha512":"b43bdd9480332ed6fd9b33abd9b8f86a36d035b47f4887ee59d4305d05ac0e6420a4212a7629447e9a58e6aea5cebf87da3a6b168a9390cd5e06b1e869d6285d","ssdeep":"96:HpSq8FTeNKeCOwIHBfNJ/K1QggQNRqB5mi3ta/RsOU+:HpSq8FTeNKeCOjNK1QggQOBda/RsOt","tlshash":"a49174cdbb6093c5694467d2bf0358f9692ec8fb9c8f0ab0d1156f026cca8b8cd545d1","first_seen":"2025-10-17T02:06:47.480692Z","last_seen":"2025-10-17T02:06:47.480692Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/css/29ca54cf084d26e9.css","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/css/29ca54cf084d26e9.css HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"64d7-199ab925d2d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 308570\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JOU3wtozC0tMyd%2FF5aMPsgGt94LsxYxJzzgVaFMx73TVfdP%2Booxoo6xutJ1KVgo6UcnytDGF4QZVIQxLl84HmlgZGyEDRUKCPTGSMdsKggWG8X8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c69a8f65695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25815,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (25815), with no line terminators","md5":"d4fa19820deb07261f743427fa5e24a7","sha1":"aa3e2998b84150844479b95e7d71cb04c1e8eb7a","sha256":"f5fa84baf106dbe512f1b9c54ee2daca4102cd808377058a5554d18a7a42ee6d","sha512":"09e51cb1b0ddbf7ef4c24a20cd82b73be8fac80955d3aa252afabf79e9d5576a1265a2884dccfa31ae23ce16f2b4b31e54f5143002588c43187004f1ec9716dd","ssdeep":"192:z9gERO86UoNENHVXtXN2kRdqy+2v/ZBQYHmjX72KVgfJzJmfwKRI+GY0OMdq/yON:z9Txfd/ZBQYH8gRdO1/yXtfdbKB","tlshash":"4ec274238b80307da4a7d65bccd1ea9931697045f66bdffafd20242e96c31421636f8c","first_seen":"2025-10-17T02:06:47.488789Z","last_seen":"2025-10-17T02:06:47.488789Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/N20lBZGAzhcVkIQ-3i7uj/_ssgManifest.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/N20lBZGAzhcVkIQ-3i7uj/_ssgManifest.js HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"4d-199ab925d01\"\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hRTS7DW3KCmU%2Bypyi9Lb9dpU2L%2BURFECEME4IRo7X7q%2BF2MJG1jLhSnUWgYdiFuxFQuDjpXFernWvRpQHAcQr7wPSHy44UlCR%2B9ZzXxSL%2BxQbDg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98fc3c69b90c5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-11T23:07:06.102527Z","times_seen":252492,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/images/coins/btc.svg","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /images/coins/btc.svg HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\netag: W/\"5b9-199a6a99278\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GAt%2Fd5CvIntjXqSLP35Hq9bywclhyNv8bQvGrnMJeuD9vEk1oygp%2BBBq%2BGP6kn%2Bie0SeDa%2FVYAGT4U3OTXU0L4wKCgcuqX381BktOonsQ6eoTQk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c6b09615695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1465,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7030e75ed25eab6f0467ea1226ad840c","sha1":"c810405428f11f450d868d85ef1b1bcb15d71cf6","sha256":"7c39cfd07add1473307f10c9d8021feaade9211dbb7fd69c3dae8a816a658d2c","sha512":"9e3e68d25eaef9d76f8010f782aa51669dad1fc31053b71486df20ada2d716e8e4da96d3d9d4b4e764c582d100b6483ae955ef1cc4876cfcb13f620c400b5bf4","ssdeep":"","tlshash":"c83152a9cad8fbe0e045dbb0a115643835c734fbbfc5e9a497951ea9b32201d899ccc0","first_seen":"2025-06-30T16:52:49.541088Z","last_seen":"2025-10-17T02:06:47.497813Z","times_seen":4,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/160x600/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /ads/EarnBit/160x600/index.html HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=0\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gfBwt8sk47GD8GQkGaiUmUwhlnUxdxysQDXmNnCpPuNL%2B24YDCT6FckIHHFXtz7ISFh%2Fibh1fuzugpNZkA04tkrGSgnsynHm4YdGwk6%2F2iPAT9o%3D\"}]}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: 98fc3c6b697f5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92173,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (34801)","md5":"5b6c82bd6ea3e1aa03936016525c0333","sha1":"8bf97d487fbc37acf47a92ea429b9f9c7a16a2aa","sha256":"16cfbf00a01cdffd3baa2da9ee5e2fd6522ce584aa20bbcbb9761cc2c3215b0e","sha512":"1ce02021e894a246157b65e24a8b8ab394ee0c311f9105e94d89920ed5808f9cac9528f8c150ab981e5739321341097103273cd6555c4ab4b1e0000a536ad984","ssdeep":"1536:UL/ewSb9Wb9/b9eiWXYaqRpewEewSb9Wb9/b9JiWXNaqRi44jGDiHrHHFxhSvP1G:5vrCO6","tlshash":"5a93c8ab7550317083734baac3cfad081738c567f410589d72c9d8d65fa5be813aaa3b","first_seen":"2025-10-17T02:06:47.503567Z","last_seen":"2025-10-17T02:06:47.503567Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/300x250/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /ads/EarnBit/300x250/index.html HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=0\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tMud2mTxGQzwB7PNwAVnp7VT7sf9UXzke2EZwjC%2BrKPtNMW%2BO38cv5CXLGwUpzrH8eq%2F%2B%2BuAWPMeNrAdPXD8FZYQ1ZIoiwUlhMIlhz8XSWW3XhA%3D\"}]}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: 98fc3c6b79855695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87515,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (30030)","md5":"da3d5ea22ede208d49ddd6c101282250","sha1":"6bd27fef9dac1aad97e0962d4ca6b10cdf8a516d","sha256":"b221899d0429c6c81a33bb82595c702b108ced62989e6380bc1950fc06e8fdd5","sha512":"068e5bd169fa728186f518c443b44305272a25de5199abac238c14427415054f0329bd7b04c4e675f334456ddfb875b54686ac4fc9a00a56d01e0eb34dfaa9d6","ssdeep":"768:hLO0W31GDBBbcRhZ44jilDiHrqUPSOBHFx97SvP19Xilx5z3eUezOFmaxlzfnJmg:hLo44jGDiHrHHFxhSvP19SJ3bAgh+6","tlshash":"cf83d9aa75102174827387aa83cf9d08173dc5a3e414489e71c9d8d65fb5fe813abe3b","first_seen":"2025-10-17T02:06:47.50925Z","last_seen":"2025-10-17T02:06:47.50925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/images/coins/trx.svg","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /images/coins/trx.svg HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\netag: W/\"448-199a6a99278\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2B3i07B%2FYAlcDop%2BpcbqK7FDP%2B7gg9ZFQU2tRC91yAktvCHey3sdCyKCcNXe3LZMIF68M%2F4tpj8s8WDylZcH7ICRqNhe6IECwf%2BZVxt1Zw%2F8DRY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c6bb99d5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1096,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"950833cdf73d0f899b2202d1580bc77e","sha1":"4726e436a96b827787de7ae2fdffac835f0b48e2","sha256":"debc5ff8ba2d4b11995a692e6150e5aee10c3e0c5a68ab10fe68c169fdd8986e","sha512":"5d67a4c5aea3e215976155bc2d7c4b208e50b830940415812ca50d2f16eeb04b15f4d014362b72ea86966f0a210056d8261bd543d5ae3b86838972f7b8a44486","ssdeep":"","tlshash":"bc1160e5e3bdb3c0eb0aa766e4e6b024306832f76b91a11cc5e41871ba5305d4842cc4","first_seen":"2025-06-30T16:52:49.493591Z","last_seen":"2025-10-17T02:06:47.514214Z","times_seen":4,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2tp2ywxg089UriI5-g4vlH9VoD8CmcqZG40F9JadbnoEwARZtRSW32.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/dmsans/v17/rP2tp2ywxg089UriI5-g4vlH9VoD8CmcqZG40F9JadbnoEwARZtRSW32.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://freeethereumclick.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:05:23 GMT\r\nexpires: Fri, 16 Oct 2026 12:05:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 50456\r\nlast-modified: Wed, 10 Sep 2025 16:29:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14348, version 1.0","md5":"9508ec8af5185edfc30ec76125ee0dd0","sha1":"fc31558149b2585f34abf097e50bb06a368f2379","sha256":"35c5efa0e5daa52ee5c6500f5be354bf751fb65c4e49e1d6806c6eb5883e8fe9","sha512":"d27ef8002d11c05bdd71267b52035769d23463cbacd17c57076c14b0c783ff8dcfe8c7437dc900fb4c3a5372f9f4dfcc8c8251b7401267ca5adad565dbdf70cc","ssdeep":"192:0Ia6UeJuAc9X5HMnQ63M2im+R9hv6IbQanP2tUqYU95C3HOZ18s1TotqlKiC0QcB:TUguNWFxa1MdUqN0XOZ1D1ToglhrgU","tlshash":"2e52cfae0781f314ca662b66d83ac5d3c6147aebbf14683dda0c85eec961f0818e40c1","first_seen":"2025-09-12T07:33:47.330806Z","last_seen":"2026-08-11T10:51:24.470462Z","times_seen":1209,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":111,"dns":1,"connect":8,"send":0,"wait":9,"receive":1,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/4589-4b6314fce12b9c8f.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/chunks/4589-4b6314fce12b9c8f.js HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"f766-199ab925d45\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 305355\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=plxYC8%2FFRxIUlE9DGhXGla4oTJb9aLAx3%2FjM6wilr%2FBNvB0MXYH5d8mQwrscwj4rPyVIr2a52M9xRwu4vCdZvjBYTlQwEcVCO3CftHjFv2DxdY4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c69b9015695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63334,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (63334), with no line terminators","md5":"905117ea9b4fffcd4a6399b83763f868","sha1":"bbfce17ea224cc22e953208edce7dfbba9b79a77","sha256":"c865c39473164e7b7ccac65bfe96cb2bb91af7d0728d62fe70c9a7f79e9cc2c9","sha512":"f276c9382ee4e89190ebbc3097a6bcfec0383d949ff0540be5c89f69660207acb7597f9b3783185827f6777683f49f497e70080d1a4bd8786315f7e7736c1c80","ssdeep":"768:sTzXsY/AYU6+PPCky6L9Yr4I3kjJfVgY8VLWjpX/bQ2yzwFvR:jPl6+PqbW92lk0HWjpXUOFvR","tlshash":"3453f9c9b6a1b0b643d31156803f850bf3ba2d2d985ee054b361d8e47cb849e436bf76","first_seen":"2025-06-30T16:52:49.555005Z","last_seen":"2025-10-17T02:06:47.524592Z","times_seen":4,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://freeethereumclick.com/ads/EarnBit/300x250/index.html","date":"2025-10-17T02:06:19.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://freeethereumclick.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 15:33:08 GMT\r\nexpires: Fri, 16 Oct 2026 15:33:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nage: 37991\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-08-11T21:35:46.443422Z","times_seen":17094,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/300x250/logo-dark.svg","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/ads/EarnBit/300x250/index.html","date":"2025-10-17T02:06:20.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /ads/EarnBit/300x250/logo-dark.svg HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/ads/EarnBit/300x250/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:20 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\netag: W/\"120d-199a6a99278\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S1nuEpKa%2BJ4UR8SnNYFFfHjOMBRYsM2tMl9iz34KqyfY2GhvIucmF3jJGUTUHXQd8A6zYA6fGpFTwABdd2yVWZ9jUfJneRXv%2B3VoL1DuiWU0CmM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c712ae35695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4621,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1ee3d8f69ece088dfe5ac360e80f657c","sha1":"c0330b45e70fc04615a7395f301c66ca991293c9","sha256":"3602a4c47656672b8b5deed638f4e29b90b1d09f2719a133d44827e5710fd98e","sha512":"b43bdd9480332ed6fd9b33abd9b8f86a36d035b47f4887ee59d4305d05ac0e6420a4212a7629447e9a58e6aea5cebf87da3a6b168a9390cd5e06b1e869d6285d","ssdeep":"96:HpSq8FTeNKeCOwIHBfNJ/K1QggQNRqB5mi3ta/RsOU+:HpSq8FTeNKeCOjNK1QggQOBda/RsOt","tlshash":"a49174cdbb6093c5694467d2bf0358f9692ec8fb9c8f0ab0d1156f026cca8b8cd545d1","first_seen":"2025-10-17T02:06:47.480692Z","last_seen":"2025-10-17T02:06:47.480692Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/5862-429519da5dfb9196.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/chunks/5862-429519da5dfb9196.js HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"290d-199ab925d49\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=khqIfU88xkxBfmELM%2BgV3fDJgPNJZTRo4%2FFDUFYQZXaVXhLg0rxdvfYeUMRlm0z%2FC%2BuekPIQ6o38ITih2qiUxa6iUVSKkYLNTnj2biZaVlDItCE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c69b9055695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10509,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10509), with no line terminators","md5":"c29d1d7f7322c89da18bdef59bfab009","sha1":"b42a4ab7773c22f672adef731fe953f3afbf3ea5","sha256":"c97be2052969d4ac0ccbf3472386d1fe8f3531dc8187ef0b53ea8076204498fb","sha512":"555ac2458f881e6e71d11c53d1166e97116b4b9a2e74468fad3a29a294d55778c2ba1451e249d6b1f03a5d7a0c04947ad51b79893b404436c6b7785927ff35fe","ssdeep":"192:9Vk51AvZ03qL+gOQidOWmv/LRQIWze0hM/eGCUhnMfg:9VkDAvZ03qL+gOQidOWm7R3aszeo","tlshash":"fe2254289554feabf8394c8dbb5fcc18e22f3744db254c30b6bca81206a959437277d5","first_seen":"2025-10-17T02:06:47.532858Z","last_seen":"2025-10-17T02:06:47.532858Z","times_seen":1,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/favicon.ico","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fD4ZDsGY7IJ9mr%2FzJUUYIw5e5E1T3FBgcNf7eCbh6TK3dIuuhTLTZy8KQ6Dns2evG80Yz%2FJl7o%2BriOVDcqpNiw0cIAKGQkHffHtuhuOGBv0zuLg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98fc3c6ac9545695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-08-11T21:10:38.107482Z","times_seen":46904,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://freeethereumclick.com/ads/EarnBit/160x600/index.html","date":"2025-10-17T02:06:19.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://freeethereumclick.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 15:33:08 GMT\r\nexpires: Fri, 16 Oct 2026 15:33:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nage: 37991\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-08-11T21:35:46.443422Z","times_seen":17094,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":100,"dns":0,"connect":0,"send":0,"wait":12,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://freeethereumclick.com/ads/EarnBit/300x250/index.html","date":"2025-10-17T02:06:20.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://freeethereumclick.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 15:33:08 GMT\r\nexpires: Fri, 16 Oct 2026 15:33:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nage: 37992\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-08-11T21:35:46.443422Z","times_seen":17094,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/160x600/logo-dark.svg","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/ads/EarnBit/160x600/index.html","date":"2025-10-17T02:06:20.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /ads/EarnBit/160x600/logo-dark.svg HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/ads/EarnBit/160x600/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:20 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\netag: W/\"120d-199a6a99278\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mu9n3o57%2FF2QKrzMXZAvQRHnvxPHeiWxBQcTuxTkTRJTSHw%2FnbIRSx35wmIsjfKS%2Be16S0CSgXfxH8GqluQ8WenshBFnVq9DTF7Qj8O9S3%2FEMr8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c712add5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4621,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1ee3d8f69ece088dfe5ac360e80f657c","sha1":"c0330b45e70fc04615a7395f301c66ca991293c9","sha256":"3602a4c47656672b8b5deed638f4e29b90b1d09f2719a133d44827e5710fd98e","sha512":"b43bdd9480332ed6fd9b33abd9b8f86a36d035b47f4887ee59d4305d05ac0e6420a4212a7629447e9a58e6aea5cebf87da3a6b168a9390cd5e06b1e869d6285d","ssdeep":"96:HpSq8FTeNKeCOwIHBfNJ/K1QggQNRqB5mi3ta/RsOU+:HpSq8FTeNKeCOjNK1QggQOBda/RsOt","tlshash":"a49174cdbb6093c5694467d2bf0358f9692ec8fb9c8f0ab0d1156f026cca8b8cd545d1","first_seen":"2025-10-17T02:06:47.480692Z","last_seen":"2025-10-17T02:06:47.480692Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/300x250/man.png","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/ads/EarnBit/300x250/index.html","date":"2025-10-17T02:06:20.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /ads/EarnBit/300x250/man.png HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/ads/EarnBit/300x250/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 76799\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\netag: W/\"12bff-199a6a99278\"\r\nage: 0\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V0I%2FliUsqODyRqvcAmT90cvvDeruGGBvgrmsQXwzkWatqWLtdE9K6n%2BHEHwv9Q7ukx9jQeYHAJZ%2BCGyOndj7LTOgHaz6yjmCwzMhZs5ZdCvl3kY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c712ae45695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76799,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 704, 8-bit colormap, non-interlaced","md5":"cc1e14007256a71cff2ac4ee0a8a2db5","sha1":"31f2d37bf829ef827f985cf861a6ff10c90db4f5","sha256":"1750d8be0f828a194386f8f9dc650efd2cbeb36eff6eee74b31bf5200c8b8482","sha512":"6870cefff183daaac17fb32311929e7a6de43c91622524cb75444e9f0dd03976d35919e2638201bafa55e34ff49cd9bdfa3b98c49038309d7dc57f5b032755de","ssdeep":"1536:XusSFbvLwFYicJRVJzeuZDjY+hQrXg9xP9M1OUzpTMcoK:esksYi4VJ5tqoaF/B","tlshash":"817302e05f5a80247e6cc40f0931d1e6afd33f50a5a0b6e3a90bf977743720121732a6","first_seen":"2025-10-17T02:06:47.539394Z","last_seen":"2025-10-17T02:06:47.539394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/css/29ca54cf084d26e9.css","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:20.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/css/29ca54cf084d26e9.css HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://freeethereumclick.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:20 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"64d7-199ab925d2d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 308571\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wJ4vlyV11hZuQypZhHCBC7Gm8rc4YAUvvQbk52eUtaWSfKop9Hb8knpy1QpSe47yaE%2BzGVyDLjnUXT42nCGpvST46czDpRyBHtIV0SJyyIcvrXc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c714ae95695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25815,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (25815), with no line terminators","md5":"d4fa19820deb07261f743427fa5e24a7","sha1":"aa3e2998b84150844479b95e7d71cb04c1e8eb7a","sha256":"f5fa84baf106dbe512f1b9c54ee2daca4102cd808377058a5554d18a7a42ee6d","sha512":"09e51cb1b0ddbf7ef4c24a20cd82b73be8fac80955d3aa252afabf79e9d5576a1265a2884dccfa31ae23ce16f2b4b31e54f5143002588c43187004f1ec9716dd","ssdeep":"192:z9gERO86UoNENHVXtXN2kRdqy+2v/ZBQYHmjX72KVgfJzJmfwKRI+GY0OMdq/yON:z9Txfd/ZBQYH8gRdO1/yXtfdbKB","tlshash":"4ec274238b80307da4a7d65bccd1ea9931697045f66bdffafd20242e96c31421636f8c","first_seen":"2025-10-17T02:06:47.488789Z","last_seen":"2025-10-17T02:06:47.488789Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/N20lBZGAzhcVkIQ-3i7uj/_buildManifest.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/N20lBZGAzhcVkIQ-3i7uj/_buildManifest.js HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"2651-199ab925d05\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YbqX2t04sEiKUwzhiegI9ieFipvaML%2FbhkITmwj6l53gJdtGA7ExdFnzJOT3HXZw5rInf%2F0I1ElHR%2BtZgKGwi2%2BxVru7%2BHMoGvO0dQ0GWCU%2FSnU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c69b9095695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9809,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (9809), with no line terminators","md5":"3ce7a763a4cd1187fc8c76cd39a3d9ff","sha1":"56bd96ec5f8c124ca84098427d2e4b9b10aec6e3","sha256":"0d942ce0b9d4ad8e7c26a9488237e6d7512af6dffc013b235f0d4536a2bfa526","sha512":"dc8f139c761439bd68f78167a97e609d4bec98eb3ce3a17bbfedae5bdf800557dc02c48998ecefe642611afcd2eed43c8e3d981d273c6c73ddcac8bc12729b1b","ssdeep":"48:9rdjeYLlXBx/7bqJr/MWgBOQDB1dlfbfPIbMtPTo7q3SlOEwGBUGwQK7S/ljN:xNRdur/MrkQDBvtzIbc1qEywQz/z","tlshash":"5c128876940ae5025de0dd01363f3f6789d0eeb689b2c2a5935f5eb893c327187488e2","first_seen":"2025-10-17T02:06:47.547206Z","last_seen":"2025-10-17T02:06:47.547206Z","times_seen":1,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://freeethereumclick.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 11:50:33 GMT\r\nexpires: Fri, 16 Oct 2026 11:50:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 51346\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-11T23:35:39.196786Z","times_seen":390517,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":121,"dns":1,"connect":9,"send":0,"wait":24,"receive":1,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://freeethereumclick.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:57:50 GMT\r\nexpires: Fri, 16 Oct 2026 12:57:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 47309\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-08-11T23:30:48.293395Z","times_seen":291429,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":121,"dns":1,"connect":8,"send":0,"wait":24,"receive":1,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/css/3b5ed5a91c58f9ea.css","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:20.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/css/3b5ed5a91c58f9ea.css HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://freeethereumclick.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:20 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"63b7-199ab925d05\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MFkZrfqWbcmazH28P5AOY6CTENzLQ7zGsnO%2BgWJT8CEHHkjfeEyOTaA8wM3W%2F1I6Q%2BljTuSQsczJVRds8yjGnSxSvVi2aLgAZD%2FaVlh%2BC1CKRDY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c73cb9c5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25527,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (25527), with no line terminators","md5":"46688cf8d80ecc64a869b40fa39a8e6a","sha1":"d1126fa8965d812fae61beafa8e10090ef57510c","sha256":"b6f4feada0786578bc44ff3753dee14dab61f514e0f104376549a71a7c9ed64e","sha512":"a55e9693103012022a7827d446ce59413dd89f12da84c39ad3fc4afa9fe5ab03f473f44611e0d7aecbcfc50301a8fb493dbcdf6a7c88480b217afbab59a5c264","ssdeep":"384:z9Txfd/ZBQYH8gRdO1/y/C+o+Ce8SPo5oJoZo17lufhfGhvrEm4:ZT/ZBQYHzTOhuvRo5oJoZoWZ","tlshash":"a2b275234f94353da4a3c657d8d0d99a31697186f22bdebafd30202e96c31571536f8c","first_seen":"2025-10-17T02:06:47.559814Z","last_seen":"2025-10-17T02:06:47.559814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/160x600/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /ads/EarnBit/160x600/index.html HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=0\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z9o5HDWIyBJDK6mkwRP76%2BGqFxiDgUzVQxJUunWu7q5gMcpWrLGZ4aXfyZY1TsxJedYtussSl8Ci%2FLn8xV8xOiDkg8XLXAQmXmcnIZ18%2FP7f6Cs%3D\"}]}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: 98fc3c6b79865695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92173,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (34801)","md5":"5b6c82bd6ea3e1aa03936016525c0333","sha1":"8bf97d487fbc37acf47a92ea429b9f9c7a16a2aa","sha256":"16cfbf00a01cdffd3baa2da9ee5e2fd6522ce584aa20bbcbb9761cc2c3215b0e","sha512":"1ce02021e894a246157b65e24a8b8ab394ee0c311f9105e94d89920ed5808f9cac9528f8c150ab981e5739321341097103273cd6555c4ab4b1e0000a536ad984","ssdeep":"1536:UL/ewSb9Wb9/b9eiWXYaqRpewEewSb9Wb9/b9JiWXNaqRi44jGDiHrHHFxhSvP1G:5vrCO6","tlshash":"5a93c8ab7550317083734baac3cfad081738c567f410589d72c9d8d65fa5be813aaa3b","first_seen":"2025-10-17T02:06:47.503567Z","last_seen":"2025-10-17T02:06:47.503567Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://freeethereumclick.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 12:55:03 GMT\r\nexpires: Fri, 16 Oct 2026 12:55:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 47476\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-11T23:35:39.261986Z","times_seen":275512,"resource_available":true,"data":null}},"time_used":272,"timings":{"blocked":121,"dns":1,"connect":10,"send":0,"wait":23,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/300x250/man.png","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/ads/EarnBit/300x250/index.html","date":"2025-10-17T02:06:20.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /ads/EarnBit/300x250/man.png HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/ads/EarnBit/300x250/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 76799\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\netag: W/\"12bff-199a6a99278\"\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lwur1Re5H2ycUujt4GUosAQuPnVOAkGJGNkNjbrgb3oE5be%2BXrIsQHMPIF0oSPCly%2FdEpabUpnYt1CbyfdzuQGXOXPLModkCTpEpCGFbonQKwOY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c712ae15695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76799,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 704, 8-bit colormap, non-interlaced","md5":"cc1e14007256a71cff2ac4ee0a8a2db5","sha1":"31f2d37bf829ef827f985cf861a6ff10c90db4f5","sha256":"1750d8be0f828a194386f8f9dc650efd2cbeb36eff6eee74b31bf5200c8b8482","sha512":"6870cefff183daaac17fb32311929e7a6de43c91622524cb75444e9f0dd03976d35919e2638201bafa55e34ff49cd9bdfa3b98c49038309d7dc57f5b032755de","ssdeep":"1536:XusSFbvLwFYicJRVJzeuZDjY+hQrXg9xP9M1OUzpTMcoK:esksYi4VJ5tqoaF/B","tlshash":"817302e05f5a80247e6cc40f0931d1e6afd33f50a5a0b6e3a90bf977743720121732a6","first_seen":"2025-10-17T02:06:47.539394Z","last_seen":"2025-10-17T02:06:47.539394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/css/c34d8684d3602f18.css","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/css/c34d8684d3602f18.css HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"10237-199ab925d05\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xmq6DzA%2Be6B4Gj%2BeTAFu6eIOsKDA2mW806u75ypeBupQN0xP%2Bt5AtlgkmayGQ%2FvCgAAI0xQ98df0oanqYrCob%2F50tbSo7j7Y1dZKWt%2FNRj1nxiY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c69a8f45695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66103,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7db24bbec8494b0e2cb8a51c9a2c4ef1","sha1":"4eec0898e3608b1f96ad477db6c49d7e1a9c27cd","sha256":"4b8e56c88e76bd178b56442e22860f3253d1230b9e67d2f909a4fde2c8dcec45","sha512":"f12c335d9bcf1c6e7de847e742ebf82536bb78ea38fc543369ad36e5acb8a9e89dce413b314b0fac14b0dd057ded628ee2e23af06795c3cd56c0ee3cd21a3f56","ssdeep":"384:iM702b6w95zQ3AKl4++KItjtElYbh9XQ7ZnlC4SsSHDxqzHkr6RnhBDEf/qbhuaN:n04iIW4ybhuahzt6+FGcHv","tlshash":"1853f94186410a3eb863596659c19dccf28e90826dff1afefed9500cc3c93971b76b89","first_seen":"2025-10-17T02:06:47.569621Z","last_seen":"2025-10-17T02:06:47.569621Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/images/coins/doge.svg","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /images/coins/doge.svg HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T23:57:26.633165Z","times_seen":17845826,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/images/coins/bnb.svg","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /images/coins/bnb.svg HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\netag: W/\"4c8-199a6a99278\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uFUk4s11PzoPYC4%2FlBn5JVtWioj05n10jJBdezV4UGoHW9vsvP9e9fD5Hoh74w09kaJ3XKhY4sns6xbVgZVETFS0HJk%2F4Twsf3OahnYRiWIUrLo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c6ba9955695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1224,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e3458f87a85a75e96e930c4f85d54ac","sha1":"added3e7b64789edacb7a9e750043db975dd7c43","sha256":"182b8f8ac0d24f054414c680f90a1ed7409789aa3521394dd4bef1b33a10a76c","sha512":"59d3beaa22c7a07089ec59ff4988f5863f20a3fd731a8d6c4fb64b101c53953c7dbd8d5ef206c3885e1248cdefd8840361b57bc0fa1800a42ef6e95bd708deaf","ssdeep":"","tlshash":"3121dfb1f1dad2e850043f80dd355079ba3734f9fa99e20449e1077ca50218dc8aaae0","first_seen":"2025-06-30T16:52:49.490329Z","last_seen":"2025-10-17T02:06:47.579651Z","times_seen":4,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/images/coins/ton.svg","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /images/coins/ton.svg HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\netag: W/\"4ff-199a6a99278\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S6fCH4Zj6eUF8lvVE%2BnZ2ZblJkwsn4c%2BbIK2mucQWnzkCf45G8I8bSfzsKmuHpFYHsPZRu25sXD0U4Mu2o7yGymIh245q5cAq8oUbZkKEAYwlAA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c6bb99e5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"17f9d7f607f89587c3106ef44184ac7f","sha1":"a0e6c5fdc8c4342c0b76910b3208463cbf0a46f1","sha256":"00a910ec19848e72584526502e97216fd1b93a8b08320bf7248622980bf3cce7","sha512":"e5d2f4308eef22dc55eb32678f267977d077a27c8315dbdbe785b6aabe7e47dbf7e0fb4567edeb43bc45fe85c86d50de73d02bf15395d7dd9a4ee3372e992837","ssdeep":"","tlshash":"392112f5ba4dc1e2d3094b70b22669d3046f24f73f7bc698a7a46e98c90f54e4594844","first_seen":"2025-06-30T16:52:49.550292Z","last_seen":"2025-10-17T02:06:47.583238Z","times_seen":4,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aXo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://freeethereumclick.com/ads/EarnBit/160x600/index.html","date":"2025-10-17T02:06:19.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/montserrat/v31/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aXo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://freeethereumclick.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18824\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 11:50:34 GMT\r\nexpires: Fri, 16 Oct 2026 11:50:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 51345\r\nlast-modified: Thu, 04 Sep 2025 17:09:33 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18824,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18824, version 1.0","md5":"1c0792ac34ef600f99d93bc272a31080","sha1":"ae5da15d6686e876f61d4b94af769f22e65c06d5","sha256":"f9d9e65b15372cebcafc3acd1e664a564c5c4b23278de4d5760de9a13c530371","sha512":"c07164aa922caa6a95da016802a6371d727edb560d91dd8069db4b5d88f8a90e89aa0e77d7174455953a19908523959a64d3a1c05c3e3f4f9675f73504f7963c","ssdeep":"384:Xr/E9GyFdjOVDIyf4sfiVMy7ebj70FLAubHpEDysFaCY9bt64wJY1:XbJybOVDNwspy7kYVrpjsFaVph","tlshash":"4e82e1f94816b1abce56c237833938497510eea48365725b17158c184ecc97f8ddfa43","first_seen":"2025-09-05T07:31:34.656521Z","last_seen":"2026-08-12T00:05:10.140089Z","times_seen":8800,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":115,"dns":1,"connect":32,"send":0,"wait":24,"receive":1,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://freeethereumclick.com/ads/EarnBit/300x250/index.html","date":"2025-10-17T02:06:19.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://freeethereumclick.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 00:01:55 GMT\r\nexpires: Fri, 16 Oct 2026 00:01:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 93864\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-11T23:37:54.320841Z","times_seen":548571,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://freeethereumclick.com/ads/EarnBit/300x250/index.html","date":"2025-10-17T02:06:20.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://freeethereumclick.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 00:01:55 GMT\r\nexpires: Fri, 16 Oct 2026 00:01:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 93865\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-11T23:37:54.320841Z","times_seen":548571,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/meta/eth/favicon-16x16.png","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:20.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /meta/eth/favicon-16x16.png HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 668\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\netag: W/\"29c-199a6a99278\"\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jyq35H5z490sdB1tNZuhsW0n8RIbfXpXmFJtcx98ZSVmwzPuPmfpTmGYtTg8yDqJynWOELueZDoSxOfqL0BffNmDabHPa0EqT0gGLHfOsw7uPm0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c71ab015695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":668,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"b2e0d86604ed1326ad15e7c75bc06149","sha1":"4a4be55c420d04b7c9ff44a1d32763b0d2b7993d","sha256":"e123a724ff40c9c329b80c6ced98cdae6af4eeb017a60fafde75df21b3dd4071","sha512":"b09b5d2a656d4a8dc193b002c9b08eb10077874a96f9ef978d989142007a1b47cf8d30cdeee3be2679944dde9e7639ce28c7130764cf0499b328581859db5861","ssdeep":"","tlshash":"67018800f2b70235e09590afb9159762a4b1398cb2e1e3305f54305355843087c96673","first_seen":"2025-10-17T02:06:47.591861Z","last_seen":"2025-10-17T02:06:47.591861Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/webpack-a51d67a8727b2200.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/chunks/webpack-a51d67a8727b2200.js HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"c99-199ab925d45\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ad718Xxye0FxecZJqtlAERGTlW4BhoJJfJa0UhKWeNXrkpLiqjxLvhmqjzDSWPV31b%2FTUnzTQq%2FlOckpqvL67C1VWFLq8tzVSJy%2F73%2FBv8%2BITY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c69a8fa5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3225,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3225), with no line terminators","md5":"b07c94c777ee349984503fbdcb499bc0","sha1":"1958bd939f2ba339184d2fb2ae640cd0d4ffbac3","sha256":"ea2caacff9ad829d3a170fe6bfb34194e372ff3ed4f459b9d3d42cb598586430","sha512":"fa9e9148d195ebe0a1cfb9c9a2e5e5c62b3381a4297f6340da16b1faba963e63c810e700bd6e4c8de8ea84732900b6dcd18035820086d1af6879724a8894372e","ssdeep":"","tlshash":"d861d86a36a0f9ba2a5009801d3f9997f6146433162fd8b0b32bec757538ad04566fb1","first_seen":"2025-10-17T02:06:47.597459Z","last_seen":"2025-10-17T02:06:47.597459Z","times_seen":1,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/main-96e9b4333635008a.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/chunks/main-96e9b4333635008a.js HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"1c917-199ab925d05\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 250975\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w1uJ8bWqk%2Brm4M0TBtw7e3QrMRikbRyceiYas60CPwf6ZIwBRUvi0w8WiLU6yBQpNSerZ2i5mXiEikP1tEU3e8mIp5ggtRzebR8PE61Jx0QufjE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c69a8fe5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117015,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cec733fb0ecaeca0cf97d16541e07946","sha1":"aceb6731d2ff101952b91143e9b09783e4774a06","sha256":"7169ae661581ef285d7119f77d15ace8568f6f3476fcd428c4d6285afc1c3143","sha512":"87c24f391e42a4c13d8005bcacdb150b55ee77fc069b723685ed3a49bc2506050d638906134fb09dceadd098da69f1c2e01038b098948879d07d4c04342b7461","ssdeep":"1536:Em00QXtSwh9pyZEZHXTtHbkus9MNJGzf+6iokB2zU6:EHDh9FDBgsNJGL+2kBQU6","tlshash":"26b31ab676d1f8b203db41d4843b0007f3691cba146f6051b3eadcd6b5a099ea0b2f79","first_seen":"2025-06-30T16:52:49.508564Z","last_seen":"2025-10-17T02:06:47.600689Z","times_seen":4,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/images/coins/bnb.svg","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /images/coins/bnb.svg HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T23:57:26.633165Z","times_seen":17845826,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/images/coins/ltc.svg","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /images/coins/ltc.svg HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\netag: W/\"3d4-199a6a99278\"\r\nvary: Accept-Encoding\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2FStUSA0%2BCSFmiHGxeCxGKQJCM%2BnO73gq9tYdpNCgQ1gURxErLyVlhMNC8M8Zd1mHRvguOEytRosRgwk8cymyBoJkPBJFzRaCGDrprtTsKBEQ%2FE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98fc3c6bb99f5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":980,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ca52a51eea9a711960613987b24365a4","sha1":"97fe9fce22845f919e68ef62f28925545d1f9780","sha256":"08b827681a0363a120b9c5c39f79510b78a0a7633bf2192740722a3af233df34","sha512":"edf64b62b50649d622d24edfa54af9733040b93277ca7d8600380264df8100e00642e505a72271ad411c0e3763c2bb1e4630a1e2cf06b9de13947c62476c56ad","ssdeep":"","tlshash":"6f112179b3dbf6d1d24faf505928742a245720b53e0444be8a511630b5194af3b11cad","first_seen":"2025-06-30T16:52:49.528038Z","last_seen":"2025-10-17T02:06:47.604075Z","times_seen":4,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/160x600/logo-dark.svg","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/ads/EarnBit/160x600/index.html","date":"2025-10-17T02:06:20.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /ads/EarnBit/160x600/logo-dark.svg HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/ads/EarnBit/160x600/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:20 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\netag: W/\"120d-199a6a99278\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qEUoAQ8AZEmQ9dozlmOz%2FlXzw%2FqmnJXnVNq1wFOOYJ0f3mnmm991mQdSDoeehscxAFQsq%2BUROOR08Btmfs3YSCGYKHuBv5Q8fQ2K5qYa61p6wBQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c712adb5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4621,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1ee3d8f69ece088dfe5ac360e80f657c","sha1":"c0330b45e70fc04615a7395f301c66ca991293c9","sha256":"3602a4c47656672b8b5deed638f4e29b90b1d09f2719a133d44827e5710fd98e","sha512":"b43bdd9480332ed6fd9b33abd9b8f86a36d035b47f4887ee59d4305d05ac0e6420a4212a7629447e9a58e6aea5cebf87da3a6b168a9390cd5e06b1e869d6285d","ssdeep":"96:HpSq8FTeNKeCOwIHBfNJ/K1QggQNRqB5mi3ta/RsOU+:HpSq8FTeNKeCOjNK1QggQOBda/RsOt","tlshash":"a49174cdbb6093c5694467d2bf0358f9692ec8fb9c8f0ab0d1156f026cca8b8cd545d1","first_seen":"2025-10-17T02:06:47.480692Z","last_seen":"2025-10-17T02:06:47.480692Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/160x600/man.png","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/ads/EarnBit/160x600/index.html","date":"2025-10-17T02:06:20.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /ads/EarnBit/160x600/man.png HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/ads/EarnBit/160x600/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 76799\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\netag: W/\"12bff-199a6a99278\"\r\nage: 0\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oRO1oR%2Fu3lxH1chwfnNxamUeDBFrjo2x2pfPTZbpP1h23RFbZj1YwPGN211hryUTYvx1H8GvNfUYx4rsRL7W76m2XclYoHsYU2s2VlrBPoDeQeo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c712ade5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76799,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 704, 8-bit colormap, non-interlaced","md5":"cc1e14007256a71cff2ac4ee0a8a2db5","sha1":"31f2d37bf829ef827f985cf861a6ff10c90db4f5","sha256":"1750d8be0f828a194386f8f9dc650efd2cbeb36eff6eee74b31bf5200c8b8482","sha512":"6870cefff183daaac17fb32311929e7a6de43c91622524cb75444e9f0dd03976d35919e2638201bafa55e34ff49cd9bdfa3b98c49038309d7dc57f5b032755de","ssdeep":"1536:XusSFbvLwFYicJRVJzeuZDjY+hQrXg9xP9M1OUzpTMcoK:esksYi4VJ5tqoaF/B","tlshash":"817302e05f5a80247e6cc40f0931d1e6afd33f50a5a0b6e3a90bf977743720121732a6","first_seen":"2025-10-17T02:06:47.539394Z","last_seen":"2025-10-17T02:06:47.539394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/2868-4037a20516902ce1.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:20.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/chunks/2868-4037a20516902ce1.js HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"37ff-199ab925d49\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aMokQWN%2BQGaH8FFGTRQvCzd0U5ERPYF909M4FXx5cE9IP0yg9uwmdIrrrFUfCf9ZewjqvazCkuIccnaRH4R8dLDXtRQdGizzoVam0OUm7T2NXZU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c722b215695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14335,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14335), with no line terminators","md5":"fa5e3369b778a95307a2d286363900c5","sha1":"a988b9ccfe19b7837298c67d50cd400104545f00","sha256":"942bb68bdd103e7f2065cc08754152ed136db042f3f3f51856d5595679700a68","sha512":"a4e70115e8fee7c145fe1e27fdca7e1bd968e206a8e9c444c8bea0447376019abde01fd00581086a8effbd6871024ed789afe1fda0fc3bf7fd94608d5b20538e","ssdeep":"192:Mevc1ARS4siRHBfCflxe45Nxav3avt7RUsj3wnS1oM2J6X3c7:Mev+ARS4sYHB8lvaCvt7RjgAoMvM7","tlshash":"b55287a8eb65fb6ff83544c99b8bcc0cb11f6904cb354c30b7b8a45606955907b3ab9c","first_seen":"2025-10-17T02:06:47.607905Z","last_seen":"2025-10-17T02:06:47.607905Z","times_seen":1,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/7391-1167995a2b7ae2cb.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/chunks/7391-1167995a2b7ae2cb.js HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"1d51-199ab925d49\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bVcepz2lUVp9siapaBmjKDOuOe983Pf%2F32%2Bv63AU5iOlR2jlsHntyt4eF%2BmjONvhnJVN%2Bcpy7JTOl4VanVUNRHlMBYvhHqnl7NnoSCnhIYZcS%2BE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c69b9025695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7505,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7505), with no line terminators","md5":"232a28fc78c311787b5f968f13e3ae63","sha1":"6d6b0d309e79de24e71dac62258572e6410ceca2","sha256":"3c5fefb78bf90ea8215694367757b47cd5e59e26842aa7a1907e518baec3285c","sha512":"d981348ab8a0f4be1e87e796c8cf4e73dc417a0f78baf2a9b774ef06b76c76e4ec554b1c075206f74aec9c75ffada43375a2587c2575e1fef2a0eb3eeec296a4","ssdeep":"192:krS1d+N9Ull5UOoUnN0LPUCvUQJUCnuL5:US1oQlEOBnFHQKCnuN","tlshash":"f4f153cd35dab48cd317a055056fa0dbe1767d169ccc8749d338b0e2bc245be602af9a","first_seen":"2025-10-17T02:06:47.614988Z","last_seen":"2025-10-17T02:06:47.614988Z","times_seen":1,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/images/coins/eth.svg","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /images/coins/eth.svg HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\netag: W/\"2b9-199a6a99278\"\r\nvary: Accept-Encoding\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H8d7FZ5ZTtymSO%2FvnVcguTFP6V%2FHvTUJNY5IK0%2FzwrTbl5erKlSaUGmTl4QlQX2DSTlKXAOt%2FAvl5fJljYQQ2XEBUD5roQ0zRhB9yboQZPYNKG0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98fc3c6af95f5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":697,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c915971b2520298d0ece39d6ea29e111","sha1":"379bbe2a122d27a5656226b3973fd1a9c9f50afe","sha256":"1c1e9cc3e20a73d86daad9a0a19a15780bb02de681a83eb68cf6b5160324481b","sha512":"3319ed852e51072faa2f0e4d6ca788bd838b2986f4ccaa48ec9045ebf1005d84fe1719508ee28d65f6345028bfe1451ae6ea44992c9bf162c8dc7d4266c78a1a","ssdeep":"","tlshash":"c60147ee324d5062450ca721db8e30ff306620f174a40b50a8292b0b6ada59f6caff81","first_seen":"2025-06-30T16:52:49.532417Z","last_seen":"2025-10-17T02:06:47.619817Z","times_seen":4,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/images/coins/ltc.svg","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /images/coins/ltc.svg HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T23:57:26.633165Z","times_seen":17845826,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/300x250/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /ads/EarnBit/300x250/index.html HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=0\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iJ9qyEYM9YUIK4d7wZbqh99BL7ZY5%2FOM1IIIC9mfH0QqOWgIir6dR7NudqkCG%2BDavGDXwhyMZcUiwwxGTPbjO70I%2FygwcEsuFsDN8rKuhqkTS4s%3D\"}]}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: 98fc3c6b79845695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87515,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (30030)","md5":"da3d5ea22ede208d49ddd6c101282250","sha1":"6bd27fef9dac1aad97e0962d4ca6b10cdf8a516d","sha256":"b221899d0429c6c81a33bb82595c702b108ced62989e6380bc1950fc06e8fdd5","sha512":"068e5bd169fa728186f518c443b44305272a25de5199abac238c14427415054f0329bd7b04c4e675f334456ddfb875b54686ac4fc9a00a56d01e0eb34dfaa9d6","ssdeep":"768:hLO0W31GDBBbcRhZ44jilDiHrqUPSOBHFx97SvP19Xilx5z3eUezOFmaxlzfnJmg:hLo44jGDiHrHHFxhSvP19SJ3bAgh+6","tlshash":"cf83d9aa75102174827387aa83cf9d08173dc5a3e414489e71c9d8d65fb5fe813abe3b","first_seen":"2025-10-17T02:06:47.50925Z","last_seen":"2025-10-17T02:06:47.50925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Hind:regular|Ubuntu:700|Inter:regular|Montserrat:700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freeethereumclick.com/ads/EarnBit/160x600/index.html","date":"2025-10-17T02:06:19.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css?family=Hind:regular|Ubuntu:700|Inter:regular|Montserrat:700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Oct 2025 02:06:19 GMT\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7271,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e5118f37e6821c2f6b316f79e781602f","sha1":"a0078b378adbc23ada0a691ba4c83d391c182c8d","sha256":"e048b510bef3365f29d22c06de980fce928c59c898c2c5088294ad0b76418de1","sha512":"22f6a940a0abe0c3146168734733a8d552193c03258227e0fc57a2f188d9c17e7e40319a39550e56b7a93b15f30d9918f59e2bb14e104791afff6603c3d3185f","ssdeep":"192:RAMafOPtlye3KVfxE7DJ8ARRHW3zQ6FZZH:rFJFFqP","tlshash":"73e1bb92002ba400a7471dc623cf7e36de8f21957485c576affe1cc8ace6d264366b5e","first_seen":"2025-10-17T02:06:47.622531Z","last_seen":"2025-10-17T02:06:47.622531Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aXo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://freeethereumclick.com/ads/EarnBit/160x600/index.html","date":"2025-10-17T02:06:19.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/montserrat/v31/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aXo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://freeethereumclick.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18824\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 11:50:34 GMT\r\nexpires: Fri, 16 Oct 2026 11:50:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 51345\r\nlast-modified: Thu, 04 Sep 2025 17:09:33 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18824,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18824, version 1.0","md5":"1c0792ac34ef600f99d93bc272a31080","sha1":"ae5da15d6686e876f61d4b94af769f22e65c06d5","sha256":"f9d9e65b15372cebcafc3acd1e664a564c5c4b23278de4d5760de9a13c530371","sha512":"c07164aa922caa6a95da016802a6371d727edb560d91dd8069db4b5d88f8a90e89aa0e77d7174455953a19908523959a64d3a1c05c3e3f4f9675f73504f7963c","ssdeep":"384:Xr/E9GyFdjOVDIyf4sfiVMy7ebj70FLAubHpEDysFaCY9bt64wJY1:XbJybOVDNwspy7kYVrpjsFaVph","tlshash":"4e82e1f94816b1abce56c237833938497510eea48365725b17158c184ecc97f8ddfa43","first_seen":"2025-09-05T07:31:34.656521Z","last_seen":"2026-08-12T00:05:10.140089Z","times_seen":8800,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/pages/affiliate-9cf0046eeb978abd.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:20.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/chunks/pages/affiliate-9cf0046eeb978abd.js HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"1e99-199ab925d09\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=St8uaRDxamJcjbpE1D%2BABOoIWE6G87EPvQzpxxgM9xCFBH%2FBEVwDwI%2F89xopgjbhBbc%2Fq0SzzrlD7yo8SqImX6ol33RoBTZBVj8BMS6yn2GQ%2FTY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c722b225695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7833,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7827), with no line terminators","md5":"7b9e90c9609d7d57936b4437a3289204","sha1":"a886129b7992fb28e291a5143c63a0c3b9dba471","sha256":"a6359aaab2522b11bf30c4d38f61393659de6150962509caa40f3f6a6bc95275","sha512":"a40104924b561485e99f694f851d33964360e19f18b7aaabc9c3a03026f9593cdaac56579b05cbb1173a49e62dbab6d75fed6085f15b9f86c838443afddb82c7","ssdeep":"96:9AwnMsj80LlPxIO29wsyTfFWmg9zATbeED1exoWZasBtsPgPVXjJM2f5aQAmPo6:dlyvWsyTtWtzAdexoWZaGtsaFM2wpl6","tlshash":"c9f14114a489ad9dfa7e098c412fc00cb31f3b49c54a0c79f9f99c259a948c4b767bde","first_seen":"2025-10-17T02:06:47.627009Z","last_seen":"2025-10-17T02:06:47.627009Z","times_seen":1,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/pages/index-c20571666465223e.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-c20571666465223e.js HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"1e93-199ab925d2d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 250975\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TpSZvHDsW%2By%2BwB8CUynmQFTXk1FbhWiZ8VnDBpbMhkmk%2F60XZ1BRbVW0wzboxZTeLRo6hZMcsQQmd78osjj%2Fr9CRrPK1DqY5J3fOkwOobhE6QpI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c69b9075695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7827,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7821), with no line terminators","md5":"8abd882c8675ee9c23ff6a74cf4f374a","sha1":"48e0e89d3c1370abbceb031be775a29c1f2e1097","sha256":"ebecf690f20cb02b8c9fce85a35e35ac0887055ea950216c9219b02ef4c2723a","sha512":"4f92b45e96c1d6e7e2d9ddc0224b5fd637aca2b1bef1b4ef743449302ab10b0820d3b983d19f357cef2eacb1f4be44d89bf9e790da0f8043eac00164ceffdf4b","ssdeep":"192:/9MGsULVIwUzAcexoWZnMRmuTvFI2wpP6:NsULVIwL/oWZMAXpC","tlshash":"1bf11194f288ed99fa7f09c9412fc00db31f3f49c76a0c76b9a8580156558c87b26bde","first_seen":"2025-10-17T02:06:47.63092Z","last_seen":"2025-10-17T02:06:47.63092Z","times_seen":1,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/images/coins/ton.svg","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /images/coins/ton.svg HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T23:57:26.633165Z","times_seen":17845826,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://freeethereumclick.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Oct 2025 07:02:38 GMT\r\nexpires: Sun, 11 Oct 2026 07:02:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nage: 500621\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-11T23:35:39.359929Z","times_seen":296348,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":125,"dns":2,"connect":14,"send":0,"wait":20,"receive":1,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://freeethereumclick.com/ads/EarnBit/160x600/index.html","date":"2025-10-17T02:06:19.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://freeethereumclick.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Oct 2025 15:33:08 GMT\r\nexpires: Fri, 16 Oct 2026 15:33:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nage: 37991\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-08-11T21:35:46.443422Z","times_seen":17094,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/160x600/man.png","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/ads/EarnBit/160x600/index.html","date":"2025-10-17T02:06:20.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /ads/EarnBit/160x600/man.png HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/ads/EarnBit/160x600/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 76799\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\netag: W/\"12bff-199a6a99278\"\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bFFb%2BACqEB1keo0rjirXwWUEssbsDgkLGDMcKb0nfT70fKcl9Cyu%2FuVEqtDLmvyhEp9EVg5PioTVTJMJ0dN%2FcyoMkS4h5S6%2BojKG2EpnTt%2F9Tlg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c712adc5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76799,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 704, 8-bit colormap, non-interlaced","md5":"cc1e14007256a71cff2ac4ee0a8a2db5","sha1":"31f2d37bf829ef827f985cf861a6ff10c90db4f5","sha256":"1750d8be0f828a194386f8f9dc650efd2cbeb36eff6eee74b31bf5200c8b8482","sha512":"6870cefff183daaac17fb32311929e7a6de43c91622524cb75444e9f0dd03976d35919e2638201bafa55e34ff49cd9bdfa3b98c49038309d7dc57f5b032755de","ssdeep":"1536:XusSFbvLwFYicJRVJzeuZDjY+hQrXg9xP9M1OUzpTMcoK:esksYi4VJ5tqoaF/B","tlshash":"817302e05f5a80247e6cc40f0931d1e6afd33f50a5a0b6e3a90bf977743720121732a6","first_seen":"2025-10-17T02:06:47.539394Z","last_seen":"2025-10-17T02:06:47.539394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/2868-4037a20516902ce1.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:20.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/chunks/2868-4037a20516902ce1.js HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"37ff-199ab925d49\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pjk3DPx6lAV4Cc7uM2MLZL%2BdxyPSOOxmsUmh5pJGYd2PNjLjyVqWOrNjAPr9E5SRdSR5Q6D7Xkortei%2FpEIW5Tjoo5W41AxN8oDLk22BCcIRMbU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c73bb9a5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14335,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14335), with no line terminators","md5":"fa5e3369b778a95307a2d286363900c5","sha1":"a988b9ccfe19b7837298c67d50cd400104545f00","sha256":"942bb68bdd103e7f2065cc08754152ed136db042f3f3f51856d5595679700a68","sha512":"a4e70115e8fee7c145fe1e27fdca7e1bd968e206a8e9c444c8bea0447376019abde01fd00581086a8effbd6871024ed789afe1fda0fc3bf7fd94608d5b20538e","ssdeep":"192:Mevc1ARS4siRHBfCflxe45Nxav3avt7RUsj3wnS1oM2J6X3c7:Mev+ARS4sYHB8lvaCvt7RjgAoMvM7","tlshash":"b55287a8eb65fb6ff83544c99b8bcc0cb11f6904cb354c30b7b8a45606955907b3ab9c","first_seen":"2025-10-17T02:06:47.607905Z","last_seen":"2025-10-17T02:06:47.607905Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/framework-d7b1fd6dc103448d.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/chunks/framework-d7b1fd6dc103448d.js HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"2c571-199ab925d45\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 305355\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WOC4a1wCD16B4F8o0tKs2zZFbq1MoSek%2FTQaISFRc35q01x9gUomGn0%2BHUZbhx7oZIbO8csvn9%2FCi4OZhCMPmUeup%2FbldN5LsxxORrSasmmgDnc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c69a8fc5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181617,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"60916262231ffc952d72062c0531daf4","sha1":"712d33eb1d80abd2c685f19432fe43948b0fcd94","sha256":"dbafc3ad8f58d9a750af73cf57b080f1333bbb5c4d23d31d0842bac971ae7b43","sha512":"def11364f133cd73f5d047e5cc45e34e639c9606576e236aac946db4352a5c78486857dfe9c0c09d12c7c130d1a12ac16d45a577308a8be752023e459252a8e4","ssdeep":"1536:fWUYDxRWp0vCH5vkpND2ciit5PNm3No1M4zp/FI8SZuWQt2vMs6sOfZLbOxxjHmz:eWplHritYwzp/FI8Suj2vD3wqPrYzB","tlshash":"6d040be83995f151aeb312b710af1813733c252b280d4d60a211fd9eb5b845eb17bf9e","first_seen":"2025-03-29T19:53:38.090565Z","last_seen":"2026-05-25T21:12:53.987732Z","times_seen":42,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/7515-1f8821000592c53d.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/chunks/7515-1f8821000592c53d.js HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"33a1-199ab925d49\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a2iQwMxZS8KQxM5bbpulQSX%2FBPhDDCCljHydfqod6HvjqW%2FQkv1tuB3EMoxVxtX4VzgySqKBvUg6BvxQnvwshNr7jaN2i1dQbfKY%2BlDQ%2BI8zEBY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c69b9065695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13217,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13203), with no line terminators","md5":"fb45be19c0f0e77f30e4b9ccf14aaa83","sha1":"9add384770ae44a1d84f5403a3eeeb6ed64c8bbd","sha256":"3039fd336cdaae0f7dabb25774099a2bfc22b661705aad727f90f00ddc121bcc","sha512":"b4977d274eee98fdc3c9d6ec7e67161d9d9629d0414734ec4a1716b3e64a5c26869aa7a15bd81a8d6a312809922b05725052cc6dbaa26c0af4ea155f8558cad8","ssdeep":"384:EKq+Qh5rBV1DJg2Cx7lkkddVK009SrVW7P/VOO:i1/1dg2ykkM00Y8Z","tlshash":"f25265795180a3e9b62b4484756ec908732f2644cb7c98f4b9ba94210358fe8b61fbdd","first_seen":"2025-10-17T02:06:47.647303Z","last_seen":"2025-10-17T02:06:47.647303Z","times_seen":1,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:wght@700\u0026family=Poppins:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css2?family=DM+Sans:wght@700\u0026family=Poppins:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Oct 2025 02:06:19 GMT\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5697,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7d408b1ed43fb4538b71135117da29b9","sha1":"b9696405fe3ce1a45572d29daea225d2de0e59fb","sha256":"81aeab3f6c50e29800502c037a6ddd5296925195ee6ebdb085ac5bfb646168bf","sha512":"6cf3b4f08b42114074748c499487e8be17bd86d2d5981392448376219caf2edc4c6bb8f5c16368e695c2834cc4a3667ec5700c0b24adee0e25960289ac2c956e","ssdeep":"96:jOpaErtJc+ufOpaEaN3OEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMacO7:d+GogKQcXr3lVwa3RzJZ","tlshash":"6dc1bdd1087be114ab831cc122ce7d37ee1e9155b410e5786bfe0c98adabc294362b2d","first_seen":"2025-09-18T11:34:37.919878Z","last_seen":"2026-06-24T08:07:57.298351Z","times_seen":24,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":55,"dns":0,"connect":7,"send":0,"wait":19,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/ads/EarnBit/300x250/index.html","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /ads/EarnBit/300x250/index.html HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=0\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WF49YU95T%2FWH%2Fwj9we7%2BMRDLeK81PUXT4iLytB5pmiWbi2Ew3bYaAVS3J1U%2B9frmfp5312fRCEyLEXQ3%2B9ZRk5iutEVgS4NRVZosBDtt4qMaXgQ%3D\"}]}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncf-ray: 98fc3c6b79815695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87515,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (30030)","md5":"da3d5ea22ede208d49ddd6c101282250","sha1":"6bd27fef9dac1aad97e0962d4ca6b10cdf8a516d","sha256":"b221899d0429c6c81a33bb82595c702b108ced62989e6380bc1950fc06e8fdd5","sha512":"068e5bd169fa728186f518c443b44305272a25de5199abac238c14427415054f0329bd7b04c4e675f334456ddfb875b54686ac4fc9a00a56d01e0eb34dfaa9d6","ssdeep":"768:hLO0W31GDBBbcRhZ44jilDiHrqUPSOBHFx97SvP19Xilx5z3eUezOFmaxlzfnJmg:hLo44jGDiHrHHFxhSvP19SJ3bAgh+6","tlshash":"cf83d9aa75102174827387aa83cf9d08173dc5a3e414489e71c9d8d65fb5fe813abe3b","first_seen":"2025-10-17T02:06:47.50925Z","last_seen":"2025-10-17T02:06:47.50925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/images/coins/btc.svg","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /images/coins/btc.svg HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\netag: W/\"5b9-199a6a99278\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HCgr1AVXVzUvREhzsqHVHXthWn2TMgO0Rm3BcOfmxuluXuaAxD36OCNbGCrBbFbOsCOzgsRMWxgqJCDTwpsjD9zKW5El9QE6gGr5A1ZzXf0TAQI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c6ba9945695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1465,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7030e75ed25eab6f0467ea1226ad840c","sha1":"c810405428f11f450d868d85ef1b1bcb15d71cf6","sha256":"7c39cfd07add1473307f10c9d8021feaade9211dbb7fd69c3dae8a816a658d2c","sha512":"9e3e68d25eaef9d76f8010f782aa51669dad1fc31053b71486df20ada2d716e8e4da96d3d9d4b4e764c582d100b6483ae955ef1cc4876cfcb13f620c400b5bf4","ssdeep":"","tlshash":"c83152a9cad8fbe0e045dbb0a115643835c734fbbfc5e9a497951ea9b32201d899ccc0","first_seen":"2025-06-30T16:52:49.541088Z","last_seen":"2025-10-17T02:06:47.497813Z","times_seen":4,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-17T02:06:18.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Next.js\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=niVxIm9igl2lezqUucmqDcco4T6%2B4Vv%2Ff%2BgZ6mb7ehTiSpotFzGZhQRBNCk3BcXuZjbKD1H5jtqePFryQwc4YY%2F45uGORzAlevZLaoSNM3EKJeocAw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98fc3c67f89332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3815,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1590)","md5":"b8356b0ccc3999eb606fa24f8b626a35","sha1":"2faa33e0d16d67aad6354593cd1c9e145381cb88","sha256":"f68e6e2c22deaa76308d043a04868b5ab0404dcee85835a9dc2cb85998e058d9","sha512":"bf9e2e72b4fe4844df210d6ed2535972db23ecdc010ce295d3ac3f1da1aa1a5e99f01df78a86e40c6cd75b16d5be0a30057dece06e9b7f632ff7a25462cf349c","ssdeep":"","tlshash":"31713212dc0bc99514239cde713ea71ca465e437e578e808badc926c0fe0b9e4f59cc6","first_seen":"2025-10-17T02:06:47.659842Z","last_seen":"2025-10-17T02:06:47.659842Z","times_seen":1,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":231,"dns":47,"connect":1,"send":0,"wait":39,"receive":0,"ssl":186},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/pages/_app-a626a452848e167a.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-a626a452848e167a.js HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"2b191-199ab925d05\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 305355\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5dHugNaCqIRGq2DnNx9f4YSimhadhqwMeo1aDSf3AAzkfTpLrKpwiNLf7Uzm6Qy%2F%2Fg%2FxTHyzKXgG62ZEzlyIUYa2IHHebJ2mpzKuJJu4H1hSZfQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c69a8ff5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176529,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65497), with no line terminators","md5":"d421b445833905eee1cc13e01d862250","sha1":"de4906ec6053390b98bcc91d60aec55d80e13cf6","sha256":"349c22c1b45d2ccc42fc9b449293b2f140135e4b78a654dd14d8976fa1fb7328","sha512":"03787dc0886a016d737fa7727926c34914c13aeaa361ffeaa168738c4f083a07db4a5197c06e033fa015e70df87066073c8d631f57e5be1797c4457232d53aa0","ssdeep":"1536:3Ss4T8M6UvJ5RZ/51O8ungA9EeHCmSJdHGnBBnfHjbHpmJ3nmJ3uE6un6OPBJHxE:CVT8M6C5T3kF1MvTk/L/LquJnMsEHs8j","tlshash":"30043bc0b620e2fc59d75885551f8808f21e64a89ddeccb87bbd8aa501a6dccf523fc5","first_seen":"2025-10-17T02:06:47.663721Z","last_seen":"2025-10-17T02:06:47.663721Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/3977-8d096a10cec965f4.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/chunks/3977-8d096a10cec965f4.js HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"265c-199ab925d49\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FT0stKsmlsQNkb013x5O3IlAEEvYbwps%2Bqa7qkEn%2BKqR2gHKKEaVb2phZ6QEsQilVAP1C6RPNugPBV46qhEngRGWUug8dcnitwm6K3iO305czHk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c69b9035695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9820,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9820), with no line terminators","md5":"64a5c51bda9753da4fcec7f20332cd28","sha1":"63087d860c6e8f2e80033275a8300d2129435902","sha256":"dba417054d29b9d422ce5384d2a3efe6225d9185613862a23ae0cda08f511d3d","sha512":"2bd4c78c8d41f4e1a279f61fe6836c574d8215048076539cd8f6d4d44d786d6de0cb8b64a6eafd1d1969a7c994ca8b45c9015bad3723ffefbcf33c17807ee926","ssdeep":"192:fBnmGFYugZ3+z9GHgXWlGzoqNytA4QcUIkcGoWxmhsX:fkGFHgZ3+bXWY6A4QcycbWxFX","tlshash":"3912a714a156f6eea9b545cc802fc45d722b3950d90d8cb0faf09c6a15a8cdcb257fce","first_seen":"2025-10-17T02:06:47.667656Z","last_seen":"2025-10-17T02:06:47.667656Z","times_seen":1,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/meta/eth/apple-touch-icon.png","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:20.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /meta/eth/apple-touch-icon.png HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 8852\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 02 Oct 2025 20:42:35 GMT\r\netag: W/\"2294-199a6a99278\"\r\ncf-cache-status: EXPIRED\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FJMXTtDGRrV1HAl79WMj%2BzpJVuUWw0JZzoRa6ie2ll2Nph3OuZPLGIJw%2F4QFPzHV%2FQV%2FCX06HaNu1c4bBxspjSSa%2BE%2FnHQbun3OPDcwVctBH174%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c71ab005695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8852,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"792bcce113ea5670533eadcc93809154","sha1":"5d60058f95bc18ac244b26ba06fb73d725e1581c","sha256":"d695d42227412534e0a1720494ad0f0a2a5dd17ca2855aeb6e7e20029d2bb872","sha512":"4d9d102331e6a98b71b72992913a7eb36ea4767497d1a7f0d4fc65113181b1e8c83ea8775dfc374b8abf45f1d3303564572a03071d223c5b0070acc98f2c2a7c","ssdeep":"96:XFTj1zhVUh528oVV3eP3FuIuRPCNQzSLj/pEzN91Pp+Ku5kD5u/lwFm3kChWXdpH:XljFXOITVI090N9LLa+Fh/8m3xOT8Qh","tlshash":"ca02bf8ff3f72e24011e9ab77a4c85f2cd44bb1d0d27726b31a26d8ba2c26085456b15","first_seen":"2025-10-17T02:06:47.672488Z","last_seen":"2025-10-17T02:06:47.672488Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/_next/static/chunks/pages/affiliate-9cf0046eeb978abd.js","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:20.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /_next/static/chunks/pages/affiliate-9cf0046eeb978abd.js HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Oct 2025 02:06:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 03 Oct 2025 19:35:20 GMT\r\netag: W/\"1e99-199ab925d09\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MX6MzNtZTU91nTOwp%2BxhXRwrgmCtc%2FZzrPur4FlfBqwmL2Sx%2BZrps%2Bw0eycxG%2Fk38QRgC%2BeXrn1pxuYGII89OE5hX%2BxAQepCZtHUDfDE%2BQnXV5w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98fc3c73bb9b5695-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7833,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7827), with no line terminators","md5":"7b9e90c9609d7d57936b4437a3289204","sha1":"a886129b7992fb28e291a5143c63a0c3b9dba471","sha256":"a6359aaab2522b11bf30c4d38f61393659de6150962509caa40f3f6a6bc95275","sha512":"a40104924b561485e99f694f851d33964360e19f18b7aaabc9c3a03026f9593cdaac56579b05cbb1173a49e62dbab6d75fed6085f15b9f86c838443afddb82c7","ssdeep":"96:9AwnMsj80LlPxIO29wsyTfFWmg9zATbeED1exoWZasBtsPgPVXjJM2f5aQAmPo6:dlyvWsyTtWtzAdexoWZaGtsaFM2wpl6","tlshash":"c9f14114a489ad9dfa7e098c412fc00cb31f3b49c54a0c79f9f99c259a948c4b767bde","first_seen":"2025-10-17T02:06:47.627009Z","last_seen":"2025-10-17T02:06:47.627009Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/images/coins/ada.svg","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /images/coins/ada.svg HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T23:57:26.633165Z","times_seen":17845826,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freeethereumclick.com/images/coins/trx.svg","fqdn":"freeethereumclick.com","domain":"freeethereumclick.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://freeethereumclick.com/","date":"2025-10-17T02:06:19.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freeethereumclick.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Sep 2025 00:48:04 GMT","end":"Mon, 22 Dec 2025 01:45:24 GMT"},"fingerprint":{"sha1":"D1:65:4E:1C:D4:28:75:EA:29:16:1A:0B:3E:18:94:26:D6:B9:AD:D3","sha256":"8D:E1:3D:DA:D9:CF:F2:05:36:35:1A:99:56:C8:57:45:BF:79:F4:6E:4A:43:B6:73:A5:F9:89:95:8D:00:14:06"}}},"request":{"raw":"GET /images/coins/trx.svg HTTP/1.1\r\nHost: freeethereumclick.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://freeethereumclick.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T23:57:26.633165Z","times_seen":17845826,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"freeethereumclick.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}