{"report_id":"308c0101-4b59-485a-b617-c4b498505430","version":6,"status":"done","tags":[],"date":"2026-01-26T05:09:20Z","url":{"schema":"https","addr":"ethgasfounudation.org/","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"172.67.171.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ethgasfounudation.org/","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"title":"Governing Realtime Ethereum | ETHGas Foundation","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ethgasfounudation.org/","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"172.67.171.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-02T05:09:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"ethgasfounudation.org","ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-20","domain_rank":0,"first_seen":"2026-01-26T05:09:21.846479Z","last_seen":"2026-01-26T05:09:21.846479Z","alert_count":22,"request_count":22,"received_data":7635500,"sent_data":10633,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ethgasfoundation.org","ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-11-18","domain_rank":0,"first_seen":"2026-01-19T19:40:36.632391Z","last_seen":"2026-01-19T19:40:36.632391Z","alert_count":0,"request_count":1,"received_data":9687,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ethgasfounudation.org/","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fec5672575deb247523db8077b241bd6","sha1":"95cd1be34b6a1c5ffadfccc21c2a553d4853b1ad","sha256":"a7b55626b6477f868b5788aaccdc5a1b2575b205e257c2f1099a077ba6ff21b6","sha512":"7a88a51563f7120639daa42d7692b5a6f507f10a7a60b3f2497ad31378b120ec7af796a1caef6fc40cd881de9c632e15b2df0351b3a90f96d440754b63a005a0","ssdeep":"768:whcSLcgZx9NbLNU1NAeNCm5PkCiuVdbfMMIir2BA9+uqYU14izndzW95qi5c6QcX:ExHbLNU19NCCpdLMMIFBSkQlYBLMj0rC","tlshash":"a163e8eaa816d8e48e5a60ded873e155e8640d23cdacf163e17cccc1b85df228487977","size":67720,"data":"","first_seen":"2026-01-26T02:58:00.038335Z","last_seen":"2026-02-14T12:27:52.060658Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"108895db55a2ba7b932513741183d484","sha1":"821b7b6a2b281212ef210180b05b288ff9215020","sha256":"5c3c83544c1c50169520467080d8221b9392649b91cb6768d713bffd285aca9a","sha512":"de8bd90eaceac89f96d0f9f2f50f99cd4c291583267a3b031f219ea1767fb8fe62797bceb200fb196587355aea031baf3707a5070cf8bd4cd543978b4080e800","ssdeep":"","tlshash":"3cd023d538758c3075d8024a61bbe3d42665709077196504c1d9cc1b6e12dd344b19dc","size":217,"data":"","first_seen":"2026-01-26T05:09:25.454446Z","last_seen":"2026-01-26T05:09:25.454446Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"44e567a4fcfd952a9028f37a4ee65b44","sha1":"a8574f7923c469fcf0cc22510db43f584be45f19","sha256":"d1385fa7c87650a22b709f7ccc05f123ba051c6f4bc5ec313c92f764ea0da074","sha512":"eff0bd2d04ec7f069b2ddd732a9bccab9f26ebb29fc0b0a7a6e5038f055dec72af7d6d8f56f6ae4b93fc4541be3dbcf58f6dfeabccbfbf8f799683e1cc859cc2","ssdeep":"","tlshash":"361100b53a1a2534c9c5818b317ee7a93e3260617a06a044c26ccc289d58ec314efcbe","size":902,"data":"","first_seen":"2026-01-26T05:09:25.455949Z","last_seen":"2026-01-26T05:09:25.455949Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8c3a80d36027784348e0810a81be0cb","sha1":"df01a6f42442ee2fefc56212093afb85caa725be","sha256":"6c7305b0357d2fb944df338bf57a6c5bde494b3902f0c963570e11491876818c","sha512":"78fe6a9ea15f49197b16151084c5b54e8c801efab529e928be94e29a632d3e5e9b474ebdbe832a4392a8ada66fda47301ae55399b01d3e97ae097302ed3d896d","ssdeep":"384:KssirsJTFbjqZWHHzDvacTKtcNbquanTlXDHzBbTTcy5yIFGe:dsNKwadWYJJh7F","tlshash":"1292b68a35c9b0b493323030911b77ee6eabbcdba0694685c151e9ecb5a1304dda7f4c","size":19893,"data":"","first_seen":"2026-01-26T04:55:18.45812Z","last_seen":"2026-01-26T05:36:46.234242Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/chunk.45.z2ngrbcx.js","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e7991d1878feadb3a6e4d22d7cc389c","sha1":"0c922ae86e489646da628ea5dce1b14d6db3fb61","sha256":"11adf3bc82e883033b509227526c63347b9358c0f1dc57ef59176afe8f14432e","sha512":"dc44df61847764204a30ff345be2713b07f2aec572f949dd83083034192cfd0b548a4ea226057bfbb11147b944e7a640560aae0e093b9ca3efd97dd5cb86fcda","ssdeep":"768:N9USbcK1RdlbdUAYdUdzye7ImLUP4vO1c9OKichu5k8qYUd4izndRW95qi5LQ6wL:zRfbnYVYO1c0KphmWG11Y9LOY3R","tlshash":"2363c9eba401d8e98e1a50dec877e499e4680953cdecf053e66cccc6b85df268447a37","size":71060,"data":"","first_seen":"2026-01-26T02:57:59.988194Z","last_seen":"2026-02-14T12:27:52.045671Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-12T08:36:42.050233Z","times_seen":418484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ethgasfounudation.org/InterDisplay-Medium.ttf","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:57.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET /InterDisplay-Medium.ttf HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgasfounudation.org/0335efd2c6f86160.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:08:57 GMT\r\ncontent-type: font/ttf\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 23 Jan 2026 21:23:36 GMT\r\netag: W/\"64368-19becbdbe0a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 7886\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CDtS4Tv6SLGYEkYp151hMfiKyOBC7XBYPM0wAZ8DkIUWmHhtGPNvckos0eeZYDMuyMVq%2B5bepp9xgJprO8cAYElCOBFyq2e7%2ByBr01EgZIXLSQw%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c3d7ed4d9c3569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":410472,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter Display MediumRegular4.000;git-a52131595;RSMS;Inte","md5":"c3a19669953c82148d31ec5e8dc67858","sha1":"61953e5312b886c32b1c0b7e40da29aca58897a0","sha256":"3728a5143aefa1f75b7d271de56f76659ca726da1fc35973138b27a583d2b94c","sha512":"78cd2c3c092977bae03d83426577b510084ebd735209637b66418b7c704343ca04422a6dadfe38bec9cca222942f31bfff2ba62dd1102abaf0572b782ce61855","ssdeep":"6144:gSpAo9l7yJWPziKSQnY3l6S05wD/FegHOhS5g31s6AZ6j3k4yhM18:gGjl7NPziK43GMIum8","tlshash":"6f945a17e305eb0dd9161e708ab987c033bdfc81791bd28bb96e3b59c9871b40ad62d1","first_seen":"2024-09-18T19:40:52Z","last_seen":"2026-08-02T08:46:10.038211Z","times_seen":116,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/hero_animation.mp4","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:57.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET /hero_animation.mp4 HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgasfounudation.org/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:08:57 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 2850096\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nage: 7886\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 23 Jan 2026 21:23:36 GMT\r\netag: W/\"2b7d30-19becbdbeec\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-range: bytes 0-2850095/2850096\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mzURJXWpI2BXsL2TSbeiKRrnYGjoCDB9R%2Byu8E6qfff0Wo3AFKj94TeOb6yFLhCgpXNj4crOUMnP2ySAl0kTa81vZj4A8HCfTHaBLUiMjZ1F0U0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3d7ed569c8569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":941682,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"2c7494da846e8252c09333af98af3b81","sha1":"7c03bd354642be675d8e257ee99da1480917ab0b","sha256":"6e88428b7c264f0a5c73013bc3a6dfc5753e0d55a29cb8e54ec86b918267a7e3","sha512":"d47e8a0cb57cf3e2756bc928a1342ff90873c358b3b56835b2e133e2a793ac6f94afe3c2427e45bf926c92836e56d4fd5c9ed31dc31f46d0613550ec8e65a369","ssdeep":"24576:y4jV+l5gK0AuWHUqiL8jFpc4PL8C0YlAaVN:y4jV+nZLH1iL8jFpVD8nwN","tlshash":"131523895eb84416f349c67ea2e4e810c4e701a3c8c5e11774cf88629f753e949bf6be","first_seen":"2026-01-26T05:09:25.424629Z","last_seen":"2026-01-26T05:09:25.424629Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/x_icon.svg","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:57.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET /x_icon.svg HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgasfounudation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:08:57 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 23 Jan 2026 21:23:37 GMT\r\netag: W/\"35f5-19becbdc0b8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 7886\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JQTdZjfVG8tNSWrjHXJPXxxzOYzTi0glgzvWSi2xagbI%2F75SNMWd60oRuKPPsKPOEqJO7OXPR1QKQUafoHcid%2FwObpJYptQfKoX6JaiWFbYfXBs%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c3d7ed579c9569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13813,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0f4001da1285d7ad204c6d9cce59f4c4","sha1":"08819e0de04c0c199d0996416c2017042ed040cc","sha256":"7b4d13130c19bad3243d4fc06c1df541132fa92deee6ff8e3a546bbd2c3de383","sha512":"32616d807aa13df2c4fd505275e81bdfc8a9dedacf4d19dcfd93fde7fd56c8ed15ff63afc51d5e54a9cc29616f54faaccc89db6198e06feffd5ef0bb7108d5d1","ssdeep":"384:ckQZgymr3hfWtwT8zE7Y1yJHhOWBmVFyjytiHLTXRvPY:5kObMtwTaE2yJHhOWoDntkLTX6","tlshash":"4d52bf70e70e9c09894ed62b62276852e1fb970ff3c8855ad98950796f53dcdb080837","first_seen":"2026-01-19T19:40:42.396431Z","last_seen":"2026-06-24T15:53:06.893562Z","times_seen":60,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/vision_img.svg","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:57.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET /vision_img.svg HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgasfounudation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:08:57 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 23 Jan 2026 21:23:37 GMT\r\netag: W/\"793-19becbdc0b6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 7886\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DgYOylGJ8Z4vBXvVlpx7nzCvTq%2Bgv8H9aY1iK1GnSDEn3BogpD3CVWkSJvsJewNb3ngrerY5p9K2PCidOgS%2F6R9bkHCj%2FWOkpm%2BzpW6rHNsDenY%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c3d7ed579cb569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1939,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b06b67b6231880e8db2863d47f388522","sha1":"54566bf14dee5f2ed1591397bb0fc8787691e5a8","sha256":"234d302ba0f93775dbc2d39980b47c400f527a9daa9e717d60f551be740b87a4","sha512":"18fa7b371ccd09b8edbbd117465cc9109da18929280bfdcea78a34a6274bfe748157c2ac927c3ae73ebe8a76a30a80fe85882d3b7a8af5156d2f3b529d32b514","ssdeep":"","tlshash":"7e419f6fd72894bae444c28cfaca90c8764b829764918591619cef7f8c509492cdf3b0","first_seen":"2026-01-19T19:40:42.407186Z","last_seen":"2026-06-24T15:53:06.887903Z","times_seen":45,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/css2.css","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:57.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgasfounudation.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:08:57 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 23 Jan 2026 21:23:36 GMT\r\netag: W/\"132c-19becbdbe68\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 7887\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zaUFAB2HAophYWOo%2FDBGoscgZ8XCThwreOdNYKgOkSrWVyG8%2FpFCoNsLBIZxMfI%2BqwzJo6Y3NOK8EWu5g2QPlREXKETZCYojSRiFK%2Bei9b5FLw0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3d7ed309af569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":4908,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"e6610001bfa5e6c48811d2d373e2a901","sha1":"6c9cb16953c0aae8bb6dd4fbea3e47d0a19a19b8","sha256":"531727186285ed362474c320730d9769ed7a5a1c78ba9a48358429d640ca12e0","sha512":"a5c2804fc6d13414c8b30546bf3c1a7f2d41318bc9d0b52ee2b5aac2630238a5fe541ce2fbb8a97be62f3330ca0241abc22b0f389968d75de68ff5a6130c6253","ssdeep":"96:1O4ayJc+uBO4adNDNQOEaPQOEayJc+uhQOEadNDNQOXaPQOXayJc+uhQOXadNDNd:2atLxXaiLCwaRLfpa4LY6a/c","tlshash":"3ba1ca50087aa100d7976cd127ce7f32ae9df140a095ca386ffe0449ed8bd25a3a6b1d","first_seen":"2026-01-20T14:33:48.886822Z","last_seen":"2026-04-04T20:40:30.397198Z","times_seen":22,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/0335efd2c6f86160.css","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:57.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET /0335efd2c6f86160.css HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgasfounudation.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:08:57 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 23 Jan 2026 21:23:36 GMT\r\netag: W/\"b6fc-19becbdbd4b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 7887\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ElcD5R7N5kNZPPx1XAm65lHNnJoIneYw3Z%2BBmI43dgHtdjwmluNYWriKxw0TCQddMtkvntb%2FhJSbP1WhN66ljtnswTYRODvAQLYn5j1Au1H%2Bmwo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3d7ed309b0569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46844,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (27678)","md5":"782c98c4adb4e561c704244a105527ea","sha1":"fc17236579b39ae961f2d0cd559c64cb85debac8","sha256":"fb01e7460a5259f47633346ac5f33d695cba76eaee511d1b16f9da3e481c4e12","sha512":"607f006db25b208a0b0a7eb40724c823313fcf0f690c8bb8fffeeb11e08bf94ffec92ae43db68649e710c14f94c7d8b7f183fadc2e107609506638b09e78c092","ssdeep":"768:NRTR0R8R0Ralj3SYRZAuf6y+vXGPF4LzIAz/Hd:NBiqGgAuiy+IG","tlshash":"8823a9047d1d3f387913bb2101c89a9c920b778bdebe479bbcda161d4d8d78532a8b25","first_seen":"2026-01-20T14:33:48.891897Z","last_seen":"2026-04-04T20:40:30.379636Z","times_seen":24,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/governance.webp","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:57.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET /governance.webp HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgasfounudation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:08:57 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 23 Jan 2026 21:23:36 GMT\r\netag: W/\"366d6-19becbdbed6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 7886\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XdzQcb1Hw%2BrAP6NNR8HVJg4yq0RCmZHktVAUeGHIF9O5HzneCAOQy0VyLrQtxmwRefhVmuXeSjSsVAMRLSy5ZxkMc7oz%2Bh9%2Blh0cp%2FLnZsSCevU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3d7ed4a9bf569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":222934,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1584x2160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0a2a0d6d8ffed1da7ca43bc6b7c247b4","sha1":"4d762ec9db61862f800537549eb3c3791f068f58","sha256":"7f8aa9794bf09b654bfb65d773de9f93d4d0fb62a44abe7c0353a7f74d625d38","sha512":"8ec38574aefadb41b315f7ea3fab8a44c5c6c7d680eb6df1c1994e177b75a9e93b8030575b5865b01034668ee2d6cdc2fc2b1b7813b1073e617057e3555fc6a2","ssdeep":"6144:M0Sx6piwbDOUVmW0jEVGgJLtn0kohv7XMm:0x6piwJP0uX5n0jv7X","tlshash":"3e241217736c09a9fbc905786788c7a120edf5302e16de8b5c9dad31b7ec949caf8409","first_seen":"2026-01-20T15:45:42.432089Z","last_seen":"2026-06-24T15:53:06.94147Z","times_seen":43,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/InterDisplay-ExtraLight.ttf","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:57.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET /InterDisplay-ExtraLight.ttf HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgasfounudation.org/0335efd2c6f86160.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:08:57 GMT\r\ncontent-type: font/ttf\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 23 Jan 2026 21:23:36 GMT\r\netag: W/\"620f4-19becbdbdd2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 7886\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k4cwzova2rZNxLmAl503k6UL7RwxS0Ka%2FQCqYhJftTcAamOqykq5fGXTWMCegKo%2BPyEPeHDuicGUxnJer1%2Bb%2FNOWWsZi3m2c8exJ%2BcPvC2lMmgY%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c3d7ed4b9c2569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":401652,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 39 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter Display ExtraLightRegular4.000;git-a52131595;RSMS;","md5":"a18aff5787993d079bfebfd6b552a6e8","sha1":"980e951ff3374bef6c8f7ea68f689bcafa7f8f5f","sha256":"3e4dba487880c57288fc80acc1c50ae19882f2a260e35af774d304d4c9688639","sha512":"117c16781b28e8dae099003566752ad07eb0116b891ab205f8cc679e92541b4e6e1e95f2564fc9d8d8933d58e12a79112545440049c320418b6e51a06718f064","ssdeep":"6144:F4ZfOCLXEpTCwXJWPziKSQ2U07aaBw55IIs+il2a5Qno3EDtInzVpSVJPj3k4yhv:FofMTCw8PziKd07aINKd+88","tlshash":"db845917e706e70eda1a1d788af987d433bdfc90791ec25b749e3649d9932b40a872c0","first_seen":"2026-01-19T19:40:42.349376Z","last_seen":"2026-06-24T15:53:06.910774Z","times_seen":46,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:57.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Mon, 26 Jan 2026 05:08:57 GMT\r\npriority: u=3,i=?0\r\ncf-ray: 9c3d7ed579cc569d-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lq1fV2J%2BkNMTVHfatkpE%2FoiTJm%2Bhg2ys4HIdSOtCGLUPE3wm7ampn%2FJReWmo21LXa3AphI9Wv7ShyACVhI3vMnDrG%2FTqJYYmqi%2FXW3lXFz9On%2FJjai1I2xAfs1s5XRYkJEBPgArJ%2BnM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=773\u0026min_rtt=0\u0026rtt_var=181\u0026sent=1429\u0026recv=145\u0026lost=6\u0026retrans=6\u0026sent_bytes=1607588\u0026recv_bytes=12133\u0026delivery_rate=47840752\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=26297\u0026ss_exit_bw=16417281\u0026ss_exit_reason=2\u0026cwnd=26582\u0026unsent_bytes=0\u0026cid=0419579dba25ef92\u0026ts=563\u0026inflight_dur=131\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19893,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:57.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js? HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 05:08:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pNDOAFit1hyxQvPJ2lOqb15eNlNKFMVW5bGc37Jq48NXmcqnhS3hoL5D1qT%2Bs%2FAHdEZApDkc6OI2hnJ3pVsCpFoQtahGWQSRFQv32n7kcnfnsSRbLL%2Fjwlo%2F5D6yxEK1TtaKu0BgL1g%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9c3d7ed659cf569d-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=744\u0026min_rtt=0\u0026rtt_var=245\u0026sent=2087\u0026recv=200\u0026lost=6\u0026retrans=6\u0026sent_bytes=2369385\u0026recv_bytes=15671\u0026delivery_rate=32007369\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=26297\u0026ss_exit_bw=16417281\u0026ss_exit_reason=2\u0026cwnd=27915\u0026unsent_bytes=0\u0026cid=0419579dba25ef92\u0026ts=696\u0026inflight_dur=208\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19893,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (19893), with no line terminators","md5":"e8c3a80d36027784348e0810a81be0cb","sha1":"df01a6f42442ee2fefc56212093afb85caa725be","sha256":"6c7305b0357d2fb944df338bf57a6c5bde494b3902f0c963570e11491876818c","sha512":"78fe6a9ea15f49197b16151084c5b54e8c801efab529e928be94e29a632d3e5e9b474ebdbe832a4392a8ada66fda47301ae55399b01d3e97ae097302ed3d896d","ssdeep":"384:KssirsJTFbjqZWHHzDvacTKtcNbquanTlXDHzBbTTcy5yIFGe:dsNKwadWYJJh7F","tlshash":"1292b68a35c9b0b493323030911b77ee6eabbcdba0694685c151e9ecb5a1304dda7f4c","first_seen":"2026-01-26T04:55:18.45812Z","last_seen":"2026-01-26T05:36:46.234242Z","times_seen":6,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/staking.webp","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:57.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET /staking.webp HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgasfounudation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:08:57 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 23 Jan 2026 21:23:36 GMT\r\netag: W/\"14d1e-19becbdbf42\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 7886\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TOVSJ8PSPsAd89C3eUToluwDqrAT%2BDM9gFAJ%2B0Or0o6mj3lY8ukHC8E5rJLdORcAvbfzkt6%2FW1FSe%2B8xs6XBfhzsvC5NclVwNcHdVL4ZzqoKnvc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3d7ed4a9be569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85278,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1584x2160, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"854d0e85a4e748461b224e8c793dbe0a","sha1":"d35e4a44e5bc61e0393f289e36b8695adf713f44","sha256":"bac844b8a82eb4f78ba82e725c231570ae87b22f7ddc4c787eb1ae759c7c40b5","sha512":"e54a1b8e57f32f20c2b5af7169130f6c0186a48fc3b78d5da0d9ad7cd3b0ebe15872ea0039696d98dd98a1725b6f1a18d95fbffe634a3c66bd56924d294e2aa9","ssdeep":"1536:EzhU9x+o/4Aiinc/+GJAzD1lbSRQJWynGdQwYjtyGwHeqQ:EzhU9xrAAc/+ESVnGotyGw","tlshash":"8783028dec0cf181ce713cf66ad1946948296845f538112ec5339b9b0cd1cfe566eb7a","first_seen":"2026-01-20T15:45:42.452608Z","last_seen":"2026-06-24T15:53:06.937097Z","times_seen":43,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/discord_icon.svg","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:57.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET /discord_icon.svg HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgasfounudation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:08:57 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 23 Jan 2026 21:23:36 GMT\r\netag: W/\"58d-19becbdbe69\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 7886\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t1w94Ri5BzJVl1q5BeCADIgKgoUk3e9lPk2gHHDQMaZb3VD99hJxRezN9zNsaZRWk1pYcvZO7gYbxhH9wBGtcuvjw5CS2CW3QGf4pqpOwKYyX0c%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c3d7ed579ca569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1421,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f77b2934e0fec03a670309986c444f59","sha1":"91c88cb0866352f2a7f61633df1994546832d136","sha256":"7ebded967793c4d42b4b787108ff7f47adee22fd2addc772be95a6e1a84dcd7b","sha512":"d468dee67b20954d43b146c1fc49cfa0c3eda482bed20e4badcd2ca331ade85aa379d6a259104c947a17a117247630074e409633734fde76fe18dee676be8768","ssdeep":"","tlshash":"c821aeea5aedb280e702f730d31571741ed610bc3b5a015583d29f3d55251dace8f8c8","first_seen":"2026-01-19T19:40:42.379785Z","last_seen":"2026-06-24T15:53:06.874121Z","times_seen":60,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/secureproxy?e=jscdn/getFile","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:57.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ethgasfounudation.org/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://ethgasfounudation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"mp625tkc4vorinpjkm55\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:08:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ek3Te3qxcg2o81%2Bj1V8qtEUDn0CWhFx66CoY0YqyKEtMvg4sYCCFq%2FqB8x509Csfg78RNgHlbMkW4NGAqMGj6C1QDW6h2OYkgf73pXrOtYmC3Q%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-ray: 9c3d7ed609cd569d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4188934,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8ef4e68de025a0a22b0f433f97bfc720","sha1":"2ff6c837442be93882d4cd7dd85257496372f950","sha256":"909c667c25c4374d2a3c52d1ed4a36d851504c4e6fb2bf812d3ee44db75d1771","sha512":"116e5cb222e6ed193724e4ffc796b14d7432fe64268f96b2e6e434bf66404e0dcbc04c7cdc4f99d57fb5ab314372753caee097f44c62459a9e739b3a27afea65","ssdeep":"24576:GmZSXxjHb29qe3T89H0f2QIJ1aYfOJ510VtxDtmH4:RZSXxHgTD8J0f2QM1aYfE10VtxU4","tlshash":"d72512eae062f1c23629d9a17bf09fdd395d508d1fd49a719d84ee8830ca474c798bc2","first_seen":"2026-01-26T02:58:00.015897Z","last_seen":"2026-01-26T05:09:25.441814Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":862,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.7463033293726627:1769401517:ElLMPlM-PtOy53Usec5o9oC7mQLqawy0SQ8XGuXKMaw/9c3d7ed1eb4956c0","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:58.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.7463033293726627:1769401517:ElLMPlM-PtOy53Usec5o9oC7mQLqawy0SQ8XGuXKMaw/9c3d7ed1eb4956c0 HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12160\r\nOrigin: https://ethgasfounudation.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgasfounudation.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12160,"data":"TtOfw8EbekGWEWEiPwPEolP3wPTePTfEgEimOPsfxgGMPyoFF7DvhgG-O9SPGfFzvP3bIfGiPm3JE2vb5BSDSPFLSuSPezZvuqPr4egCfhkJsA8BtW-gtfh$9XUMgHd8PeArcGsehsrA8V52tPE+oenz8JvGRPfw858EKPmxPoohUxYU6b-OFY-OrPGF8PNNKEYJPqHAbzIUrn0LCEoCtPw0mPBtPU+0-PkyTwO4fhAVc6O5xBXMFpnhtPwwUPEt2YvIwqLkWPhZHuc-4UnvPeHv-geOfPw+t4wnfXoOP0yRYgu9aqMwtPxyUkeaXsoTYLxja7EuPe8KGx0vkgPPJNv-PUJlGeHGBHePhq$PGjDq8PEBnXGl8YnU8Pqntpxx4SZ7ylYylqqtfUULycFxb1hv+r$XxUMStPEk23EPxBq+mpH4PxO4t$x4NUIEfuo4Kox+UWHUb6Cpvm8LutfG8g+PoeCDMBJmF6wFVDvluZFTC4nFpmBsWS3nVA4+Vw+9wV3TzLkSPGxnn$eCx0iXydbvPE-i1sVU+PUoo5vUMt+hvHmDH5Jw5tNTCaC+MEM4SpXNvpnWR4xa1c9m4ndZMI-fPbLu88VVPaVOzVtbzU7cEwSKiCd9H8GHwrn34u8otgf+MyGGkGVDfMUf98Vn7hCZY+Vw6LA4P9SKGEphk0K4nHtt7c4CwLEgCqCC7H76PXEqJPulGJ2PVK4dgG3ZBPCBAYTTkhpecn5h7mnRT0+BCiwBlZPnVK2IFBDs20nU$lgbd3MvsRrOTvPhlowxBx-xU-s8ro02BE5$E6AlBajGPX61xa0JA1Bvb334bAyGWE6AGAdBhUUBZ6GukPX2kPZuEtjtaegd83EuPJ3rxXJxUUXf-Pxds8GXkOP2X0fxotgsw2eXfZGPZg6Exxvk21qv9GPd86rsBSxZkUE+2sbs6B8Kq3P8kEKCKkZFeEERkHRBx55nkvVhjkEChe4zPZiOqVBtbf3PjiwuoXjftW$vYaroxZ9xjkvM+jtwKyxwujNoOOFDY7Psyor06yJAqYZqbsXhJzBuEq8ARWuDB+n-wyefWgqGuewyA2esqKnrjnDOUHx3Bn0fVxEA8HniBfVPY+RIHE-f5wudOpsr3nuhMtXPxlXreWED2mixU-x7EqhOYviP8L27Ns6hUlZcr3roXhg9CBs9Pi7q-E2gsRPZk6FBgGSaBFaNP-EqoX0+t0DrngfJrs5290kYfcqXyfcknOrJxubo6hxKNUDOr-xdC16bCjeA8E9gvB0xz8T9W0daGkgogb-ltP2PBqkzPbn1DjPtOU$dfJPi-+7GPgs288jgVeZBvyPk1OAoWHvgA8HB2nef6yxFKxi+88iJe2sLgaVdfZPmkPA2Y6jax$XsP2VCf3EFTj3B6PhqGAUPq+anJ3EEJ6nZ-lMvPBfFYGJP18EggvijBIE+mkv6+UkTjEjLcD2bN6I-P8-9aEEfZyPkGSBcy6v4$-G7HV1G9Xv$G7+At+ZB$n-OXtVJbAS+LuvE+Yt0c5KKTgfMKCGkZK4d7CK3PV2ehcLL73POPIK9PgJuxErPDKzsOruGP5PzPveIS51cyAdbXfmhS4aEyFEMevGi4kePpEtGertw38PmtPv$216WhyTfRJMLzvYrdqMPPVdfgs-FohjOnTnTE2zthn9vTfwe3GmqMsNXukgwGehjo3ERAbkj93nvJS9AfZetNOE+5PrlzBUJUDUgftstrPok9OG-zsfnkV1xcqJ7f9G$-95zztscD2-it+DkvL2vYS-a9ttu5kyemwdfxsmvYhqO2kqtYn86e8DBlIf-xaFnCtB87xUUqbmUOUn7$ZurakoBhjPnBfiY4Ufeq7UafSAqhchgZX7nyxdgS3swUsOZAqs8E-rPxK9HXUFrR5fxj4+XPT-nxxDxCTbtFre5x6FgEDPfMFfBrFbAefUobyC5Y6EBPGwkFmrowPZerZbNd5-yUaeNrWr4Gi7mhOFvuC$7nsPe2F6m-W3FIPd2L5Y9WokIkM8pFPx8TWqFXEnfrhHkv76Vy$-uvPXAxOnEqZABv+Z8o48+JZwnoE0HSgqcRYSdiWqb3jhJn8mhxByrDZAdPo86zvKsCPwYBhDH4poYb3PWJ+D3rzzfUYK4ZOVmvcVRPNYNIm6+DZfdlEFOuYCPPy0zB$90$AobmjJOyZ+AVE-MXBwR1oTMeWxNY73todmSWeJKoyoONxH0AEq$Fewk-+vqsS$W4AcGnkvGtDFIraOXARHjDVjjrxGg43MBsGP+4KZWU$VEojknYBqUr9$fdq6s75mjva6NPNcbaeTUYvNYRiYbjJkgO$SASboLCgE5gY5B-8zzkT$CtPHwAkvefVGN1yv$5PuuXgZP29bYtW03m0TRiq4vJwo-WDCT-DqIZGwby3lvrJIkMEAOwl$5$Pq4YdYoZFlsJs-MJns8P5tCv5ZfBxObVfol9g+nX0iWvwwe2WTWH4nEYyHUZnHhwExu2f$duZTbjJdxyG$IL0d-fOHxXLka8eqSTvqnARSvinTzkqz8x-TvXzHXaELnboPrk9W7z8E57fkcbq3PMhOhBBSA28PLnBZ6kPSJKumJ2dJfZfZfdLHOM2XumuDUcktRLlo40fd$OPOnJVM9iUPW8tZai2UeHxD3p44JXn8gBf6dCuGs$5mlUw8GaWJ6XPWFAa5hYa53v2nJD8f9R8Bloq4U8axaD3PSVHK89GLUOMDGYe6E-OExhlJqTmU8kfGe+hXxAlWtc$PGfv2qqFgEFL29ExdOyvVBxvAeqtkbaOev9OqMRdv8i9juyf$ra1InWi$1Z3sa32lAAHwenDtWOeGxvj4mVGBtAWWqBovGiDurJOnhRbHCmXHj18hJjTIHz97YKUuro$EqXJ7AD$9OD4mibgzUsBebkeECW0ZAcTglz2HPDZl-eCVheMMrx0Cf8Gg5+uMvFFPP8kw$czLsVGYbbRmfnFJKBnC9dV$Bj371+Wb1q6mYF9O8BSNgxJ$rgz5b-roWPOTVEZEg5f9KVRdF15zICMf2RvHunepGs3uYjUTw632KAjsptO3xeHlvJ3Pj-gwFxy2oqobFenpgPLKdlVkAj5fx+J3j1-Bg4Z2jBY+mBU$hewjWyhg8bM6RtBn36NW+jXdw9HT1f8ee0VThwrPMSIrvjRS$GY-PWzoO0qTqC0UM2ZOcR48v0qDfMm2GCAVClOaWJeYV1I3kYoKz63$YGe4B79KWABr3e+zmP3Yo--K-eRNHmfzZIfvwlc-OzdOEbDqGm6FTnej5fsvUlZJJBfeh$wA03ztSoec2z1m+CAhDm$VSWGSqMAP6eGpi0AeTJXly1Di-Yf7UOZTJlDzR8+pWIk4rgsn5P3ujLZumMAWCLIwudr$yLIPj7L1n6ZMOFAYk-GX6xeGwj-u2PoLPiqmmxjn29g9ZZeerMZa11V81XA1sUZdVy1sr-17dUMWhIUjdEss-nBgs26CCIZB1XAkBg27AgElsHvBA0EuRmJdRt3S$GRum1EU3o1OeZfmxnxsxUMeod-vJu1jEuVwC9h9BJ1J4nOuYXMSxf6POb2r3jVrU+-+A8UoBrfyoa-jxV2qRNCPMjPKe7JXC98kvf-fih1sBbBgeSJ2dA1zAZBCdCAgYnP6vU$l6bNlM-rOEH88Gaxse2VSUy3VYZmmPxxSoe8tONdU1JMJkxTCUf503nOvkm6mArRN34wXxM-oGRfXJkqKfIY31Y4+sZeL3UvUCs18Ye8Hs2Jwxy-tfHE2Vsrr-tBYUb6I6+2IM6JN$LA42qmZ1CmpZkdz8ZECJdCGMu-NMlRakD1G6viEmW5OFdoOxm5semRqd2r8kA1G3ukKJ-OH-gfRE+otxOBrqMYYq4RO30eaFakLdaFPhgACrmZfRCZ+ruTB6WFaU1h9hn38CtZcvKG-Jo5pCVMlClstG7MLM2YpJivSZ-CbYs-oEN4W3N3qosEgG86+oR3G18m$Pz$DONdjEmxz6JFR1nPR4L6gCdml3-wXeq4siJ6Gmyfx-Wx7M4UA2$6eMsPlCr4bM-Ekh8-E-vONMRoG1z5KYtYsej4b3NmqhBGKOp4kxEToJXNOeaqeseCrVG3N1zCirgxmh6UKVG3VYtfXU+siwVY9AsEiqqAw1dUBF-MqY1oUGPFtffTC2SMu8BTBiOxnPIfKOBMsEqkUrCrEmtdjMxxt-tZS2X4CkXfq5mxEGBoeRW6BP3otrgPKhXYg-EmBZ1G4oOiLGwmU6fR1MtE16g2rRCYsFS58-CeeePwsrGVt$1BRUOxs6kErsxhgvDe-MG5OhjFwMnPaREGLU+UyRqmt-9rnh4V9wrslq+Fo425rkEAAk$FfVjrthnh3FDVSAxkBk1Zy2O4Er88i19BiMEe21zsEUGwPPw2mhIN0O1mbqo$N3FOUUNFbs2V$-tBAVzdjPJAsPMR2kM$8r+J7MU8LqA$ZkZkqeKGRo8f7isvxV45mJYiMvXJFML3AOLVnMx$9$KGr1Zdxh0OCqPWJwsBr5PkZPj4ke6qnmExOEp32muEvOgOO4PIYF3VPqP++hgP1BgsXkPu7676nD82jkcfDmy5E6yq12yFs4dOHBFUkPIYC-i8WrgfHE4RtAkFuiHNDsoNdqfyy6fHMwMm41Iol$z1M5jhUynGtekxT5-mzOdCE4oozNE5xwVC9fNRjfUNjTmn-EyfUOr8UkTsysNiFZPrCEnGS2bDPTV$gE71UDEJu$o5nhNk6OuZ53lR6somIJ08dfb+v5jwAi4vZx3ox6iqu4rf3ioYn5-mAkbVPRZBWCtebs3Mu8ZVjr9E-GkryVbRFdl-74eEUTLws4aokD9oEvYRLvSRdoIAXIb6WZafP5aWivqhn1Jh23fv4Isxh6sTmAkxiTaisxI2R22mWiRmb3aW3AHO2vwEFPerteg3mGvO3$C2rRrDL-CE-P32J388r58mqenGvHERdFGvTf8eNolvlC2TBJRRETT3JERyqs1ZFO72KxqE8ZYUOeji3ArMRhuEgxt+YsXWFAeCXJYBtIEwXBI1$i8I-ZUD-kPuqd0FPJRWSwtH+Cv88rZOb+yCh6lURnzI8T-fr1zWVfiAwAFdjF-8xPr6eI7TiWsxVCrThx5RkBsuCYoea18yR-XVCTesjOum$EqG$-gufdGfuZFyx+zFaoXuO3ZC9mhAeNEWeCREaUUPYs930ZlMOB5R6oauc3-u8iluaT3OTWnvEhrdL1hqBqD+y8C$6mVNg+OuCm8WMkH62Ri4mxkEdq+DrONRPFU3nhxeoP-h9Wqen8M+KnHBkM7vHP+iy8N8TOfWb4qPRkgHuwZ2gEo5-Z5wMmb3rBP1PMOExOy511G5riWeoilMlZ0fKroHtYgCcfIk-WW6lA6-zwn5jwrJrZLUe3Rkqx3ZPMImWFZHC66uCw6Ov+RMXR8B8InGg6iGVR2FC2JHT57mU$hfsFlylnKBYIG-LNCdpJkhCYlnjAqDgoFoeknZ-s$kyMyJ18B43FGJY+ur9UVRk8o1cnYPceceSOZ5EAZPvTnr2Ay29UkhIC85m4h6YqkwlqPTSsTDKeq5lqyZZFOuBOjJZrl5-32m7+H6UMXJ04FAMIGiEAyIZo-GLfEHiHn9tU$xAyO+2Rswmrn-esaDCx3oMvEhRU0oIAKx--RN7RN2iiIvX50CLVjF6k+fc+UwkE6YUXTCnrmFXDX3N5nBsWBAqoBZV2ZFRfZ4PIA6sTEqNojrjGKEm4VUy40nFsJ-sNmxeX$1HRPDsx+Fsxb3VmKWmesA9NXZiTP6FG8Z2e495+PBGugoL3UbUP3NzfEAWOYBiGfMiRaqb99GZEBZH+EiaYNN059Orrh5Pl6WVWnYqvwH+yG5+uFuz+z+-AwDqekEkem4WDS1GTx7fZnOuyrDKV7RLY7m34L-Ld3qyOsMxDsJ3UN2rRZ6Z6kdq3V-Eu7ZiOwFIwqNr9kBkxkIViSVRoghskguqZ+PiWPnuCdonxDfoPaqNyZUVUWwfmEmW53yUXwkqxx4T3dmLFR5zUy4LDIAmktUk5Whws0OgqnrgqEE3mOZmxC8h8euRfeVbb2qciwDWV1Ets90WMaEE4Pux5zh5WestrkkBWEZ0I8dpVn+OWYyWq68esYo82mXBe-wxHeVSUMwYJO9U9D0mBDbo7hq6+xx2DWhaIfWSuF+By-fMNfnaDI-LHLW+CZ0r3jkFmguZ62eEgX3kPvbnEduAoT5HwTig+uuS7y+fVSbgDlYn0TneydZAs2sX0dmUm03j8kGrMl$wyn3hMVgD$V0B+O3muyWEJbDH-jGrJVv-Y-AxBrzYDgURCdAy5uz3VS2jVTYfOTTzWw3nF-29PKGgTxbuBtolqV6TwAI8Aq0XEeuH1byLW2wqiw+UgyyzyTwIwXGO3q2$Ft67$XFrl0ZA-MXxus1yF+x$Ri-0k2FUDPgFIyztk03DT7ny6q1hU+N7DTZD2xBk9Wecuv5FyxP8rV4bM$TnB01aI$MsPL-+3jCgxVVtsnXts9ejHJ4EBTD1uZP403gKrKdGI+TwI+z$nulgEbBLTyb9Yre8EaUZGEnhdar$IGbFdbi89bn7JkGD9JlJbcNJ7ICxJSZjRAFCRWe-rWPEWy1gbFd3ug019TvrlmRSuAgMNBIfpwuy2hiluCZB+xeAi+348E-A-mve2M5rJhWBHaInB9Aw9miCx$JeC6FTv9-Iu$7DXPywTx5aI5M0d3XdXmJLvWxy1Z-OxUA0U-rkgxqzATklOEFOJS$xbMd4a22pqAw0GJ4jE8MHkZEiiz7Wlgm5zIzJK1sqnu-o9KwlsHDa9XXRWkyBvCdY7mb-dOTfLkbWRAyHFCH6MMYm3SnA97unnKMn-EGh4mG1DjgYrz-cdZCRrITD3qfkDm3ElolrnceR9ueWBXc+knAVi985T7MvIrVhhc7fuF6F3Bl1DgLvn$FIwSZMHododyA3lrz+B2TmG13kpe+Ys2Mo9EvB7FZ8C4y2$FsiBS8sXnn3HKrY-wWG+Bm8H4RmWPWeDmjE0KMhvhvq0vwKxwfYPE-k2x+UgUnId0wkPxzHsZJe8MNTleF1huICdOqEbguHn8ex0eCa0k1xrGVI0A7RTRGI7InZZl2Vdc9rM9$vnulWwDK4A9h5gFtX$Gq4Fu-wna4UEn7Z+CY+96GgctKL2FtWa+pIlE0ZEHgKEgAyImGxuZrb848CjyM3WotYP9ImPkia4cTP+W71VhBwD-KF35ke6ZY8bwZ4wsemRwMtUv6MUCbBeMoemZxhnAJty0hBEbKuI67inRGr1LwCo$qmG$5zJ$1IU$PehmPzfe21+gSwX4SK64SeouummkKi$1AlKneaFh$jfmXm0Rsm9Er5XYnKGjMhkI9xm1YIF0w0wdZlby10Ok3q2sdqfj98z1m8lG7rAXXN8rZrAd-J+EKuCnqC5jFFWLLLtlSPhZurB$9aapVaSjvnnN$8pkk$eaqNt2dc5vF-kqGjvBjzXduS+FyAkxR$SsdoKuAWtM7meXwxTqI8Y$WaCnwCO8BAcKewY$Bri2oipWFNxYrmUoVfEED2EiwEEKfocO28Bhq6dBGxUEEqOfk2XrE9fRN0MPA1bgOU5YeFENTg8TsoEeMt-0yWOfWGdm9xUTXFsB38JcTVUGPU82kUJzdP-uLwxCqLZyLAcva9JTtFvhsw$vcf8uE2Gm2LfAt3D9JAqP0MKsoPcfZkFlWRMtzTtaP9JkgPE2PGdByPVYEv0WhxE7ZHXXkrGOnFWjJ6-ubZ$vvCEUrSEZU9U-kUnr1ONzcEgaBZTgxUZjZLOKPmsswdmrLPygCJrx8fAiSfsknPRxvBVenurPnXBObOboU8rqEnsmTdx54G8B8cZb8vcEeBB8rAstsnDwu5GP+EM6na2okxemw1X+G8stFeYeJkO+GnYqSvongTPSY$tosSrljr4xXhfsosrPjTTfkc8tegkgObox9AXrLEVPTvkPikOuB2zMs04vp+iPuxLn+8aFby5kTIwAP6PaV-9WrPurnTfOjGZ8sWwxejbn43+0vNWiXBNe7OBJ8IrUwRxzGMU8v1ObrxW2K$RsTFeUq6Gh3iFlf5JCMwaPKrLPoOOfrhHAf+GlFbn6mAjqxTMGx6lUkOJJWxqUxmfxZwdGjOgmXn4adOXOsAE8qjrrx+b9O6PU8qK2cPzDAjkueYkZrg8In-i5tmCGV28EDq4JeUrkEgAdbRstOZ-kmk8sfmUtemkxxRO6v3OsZDJ0+eLxyZEPkXLOynxp8z2Y8SbvMYbFqOtJdP3kq5YxzOOxtWa1UgO1oiPwMhWgaaGUXoBHB2XAs4ZMmbW2Ws+xVSaEIkxWUB2erSP0ZBNeUqekFjNGFPx0eUxnTs292yEUOSTiXwXe-2fJimzt-rO2rD29UM1ESiUi5wmP$fLi9vmWObfRxJPXgWkAkk3rMvabDgjFDm53Ba6YjZg+7oePFYLfpnUthfG-wshAEhEjsvfFeGmGaZushvpBG0oixceisuvDIIfEqjZ8yrowgkFCxsLtz6snOynoMF1A88wPVqga2yAzBV2DPGgMb$ehcBlntRNx$W$DkNGAP-n9tHWZYP1EMBsUP4gnvhPy3B2lfrb$af8hrhLTJoKP5kZSPtsVeG4pUXEWmFO6T+6ZqfXfrJr9sRkNOP0kxxEFPNbPnX9$GtwtUNPzJsi4J3HhEwKhuEUrJ0BJTDi5x3OWFTbkxPVGRyzJH8dqTkeeE7G8EaPPfkJqM5Ztul2OaNeO-gr3JzzmgmadFhEogssEyPXivwi6wifn6dmDUAb8OPxCtPcOfvbYYPeiqS$2xBY-Yly3Lsba39HWgzO8GgwCTrqhqG$DYVChREM9LDkJraBcwtE2KZS9oOd3uPyHXR93Eqq6wCJ2zv9SflpGaGmGR+jgBH7BNtxk3rgfg0oERTjTJwme4enOP8+vCgUOUhErmvCWOxuE4Y3PPPqdjPbsiE2fXdy9oTveE0ZlXqZPLAfqqT6PP8$0nzd+f5O8tef1OOt2WAKGlJSiPqbbN4r1OxvXPpv0rd7Xw8o+lE0BUJv$6bO0EKJPcnM16zLERflAOxwOh4BXZHauf7xItOZe3cw-+f1gTN2gPGAjFVHYbFBTLr2GU49hgkTlm8LplDsTPma+jObnms-gxvbm7ery2+2fJLm2cnEOWEyYqvzqbmzSUa282NfnHGXk7J+ek6ePIkbm7-qov7YGmy5BsEcFWukHDsvOExelAyrw+H9gOPqhuquCIYYktn8xBePLrAfNOF8zG+DwshkPPnPRgobm51BuES604SReNR+UmsYzROEo-oE2eXvXYz19geBrJj9PwP1vThBho+hKeaeCPlWdERNsffEPj4mveuiGE2PCZmJenFj5WEVTyvHPZtqaPuvvn7+F4GvrorX+8vX6TbERkarrUlPxYFWKwy3xmy7zrqCWtXl0TJjmJuPPW4uEzxUBykaPGUkRB5Pb8rZ2OLWHXeWrooskvP1WCbZtEgE6$1zGkqiYuZ2oWEhE8fxJPxh7XobhOFJ0TGhiiJMJkSdJyM$tUsvcFiFkbon57P3UJ6kSpMriZ7vwCuPoPOb1i$cehAD3M6gm-W-hi0NH3KXlbnlkCr9qcRkfebdM$1kkGjbfRNbcW7+GyoavkW$bSR$xfastW3DmYlpeIkb8P+K9LW8JThOwU-P2gcflM$TUmP4GpqGUgKvY2mrl32S34lM7yAIoNbRn-afD7yAqsPgJR$WEK9nhhUFPhOhvhau75lNp36P8OgMYJrPmSvrkVm5K0yM5BPwl9uWADZPDhNJq7RHafDX6Bv+EghOefXiiLOmPpCaBabfDmNqIRl3IO8Xr1iLixh33nBwPmIyp5n-fJjBrJqXPdTg$XSVSS570F$ES2hzBP0JbLE053S8PUrLWUEvvAYulRuF7jlsZ8$nd8qygJEws-Isl28wubGgcM7GwxG5vHeleUGHZfZPqqkBtu7aDOIJxp33BHncokgWLCjvZtBjhEZukV86RogKeS6lgxPmUq5BdWTDxtWDP1OxtL8fFXNkgmaJvCqeL6YxHPm23JCzo7Ddv+AuwO7BH8G5ep5a2FqvCuY4$fdwrEYRzZvJ-6APWjGSqzz-JCJF1xGUF2DOLD0Ed1rumrEVSyP-LBF8mwewoCRSgSB0PNU+Wh44G$6vPOwU4l2U4GZ+$nDqyWJIgza3Ah4W+8-qkBKEGof4nLUivZzEEAVe4nb8P2dokr$zgWnM-lwSCNbHzYLrrmmB$SjajJFmnwNUEYfVf0RwSPwN$6AUdX9DOJD9$unOmcafDXekOEBw8baaX6sxhK-SmTXle4B-BeDdCghOVP-OO2kLUiZt$ieWqqMqdLOyy+vkMf9v+uGjlwsGUXgxhU+fRtDbde+RdvnsAxutvLgWvOYyHoJC8b+1lM95xY6FahOmrhXxR+7SsJktcU5nhCeBUhY2OIeIt78nbyGt1nH8WxihF9-7YFO5Jh8FbqC$cJLCF8P2+Sesxqups5x58O8epLnfFs0eHtgSrCUgVF$DJ5MYXurEvuFzSuuiAtH-CoypBaY6EHXn+ez8YoImfLrXuzo5TGm0nRfbrPeGtzfm$gN6Y26G-LEYCrTeT7wiCoqRGPxXsRBvxcCru7z0u29vhkNEFyXPJbNi9onKdAPlSHbnV0hqAN+yYVq+BidveaGCyD8OuL8hou3mTypOcX1CdqHl2FSRVzbaHzdwymcyc$FWsDgMuT$HR5jOjnlrku0-2ugCjX4lvUHN$G+OCtj2Oxbu$$ARMtXjM9zAxl$-PCSdeixZbnB$quRm3anVm-nh$U6Naa8Pc9JrZZ9q2$BausmM+IU0y0$1RnVXpwGsGb5V2aHvipT5$qycXujMVZPII$quOBkj+HZPIN$v0gBvYMGAKmvdfXxBJtSG-fH7-yqWBjX1EguHHmxq3mZuWHmMHO$YqC$Be49GJR0m4qKV$rKZs9HjsRxoVhecTZJWN$ryDB3d5sADmxdLCssHu8Zm9It4BEFBgj+$AOHM+k0SBTrc2mnu+mW0$BBjpyxnJLCqyHBD8Wbmunk$6glVLxYAqZuxMM2fTZNX6ZNiUMu0x4UC9Hdx+b-VwWT58WGds+adnweT58DEbZ+a$O0hTxYVG$SykRvXdTOYoGmXuYd-0yPMYVbAKne8s07mpO8wbs+q--yRCijIFgCnueDuoVhYD90znR1wq0Vo-RoTWIMCqyaHLkO3Ak+rd0yWHZuWSXk+mMMuXHCkqz9onXMC0DCBjUSvbnR6WXC$h-Uy$WyX-c8cCCPlzdVujdkZMHKRCyZbIAd+X1s0BXJBK5VmqEKO4JDabHy43b8emf8jN5S8gEUqJv$fh+wHySR80lfrtztPRO+GHyAexPTkFmx9eCwtVpCEadHooGgmcfw4Pvk73Igj8E$n4JDPvdDtsGcEGUdlocTY4Fy7HbOMTmxe94n8ST8xpHNRnS$+sIP8RxvFPPPG4oi1OOvhhfNFmvgRGwiXIeR5EyzhLX4qqE7PnFVOi8ZtTnf4s+sC4BfPLOarzMrFEOXgrY2onPPxqJvb5PPFEOFhf9J7RFOhNw-fJDysFuP6Pohy8mv3J-O9+euoMOcJWDKWmyyJG+slfuPhNvPP+ffAtPPFv8jSl1PlnDVAAEMP-Prxm1gtwPEU+FldvXdz2DVMjjclVDofYOES1tf9l+thdvPrt9lVD+Exh+-esj9l-WrPFfrvPjj2l5ifGi2rnegL6vuPmarNyA4aLzx4JvReWx6VgEgceUxPhWEpwxEst4YTkONygPmYcPhMfOxzCM++fGPPP-s+E+Gzl3POJxey1ETj-Py9pnGfeWflLP$$4X4koInekEichPqexvmNehArEMfsmTXhZZ1tI9S8qe5zPprEvP4XgBmGrr014vWOobDn+yeThCe+javYj$hOdF9OrnGbTkiMW619PMf6WG70S3ZevByvDiphgzPsZxLqgFiaTBErDnhPwPVnXtrpDPCbFyvX9C57PEA1eZtP5iVPioxfenEEJUPlkO7DGEkRakGmFRTYwAPvn-lx4RalYqf2fCAR6Oa80xGHG5PKnsfBfhfzLVtPAFIPe7hXGgi9yqnVEIPhXxohuylnjk2f-oPPGxaKNPCEhiMNWjguifLs2D617jmnIKMxCndz8Phklln$riOBav1PPPINnXPP"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 26 Jan 2026 05:08:58 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9c3d7ed729d3569d-OSL\r\ncf-chl-out-s: MdKVR346jR8DSlpd9nfANA==$TV5UhY/QG51QV1YjkBPzjg==\r\nset-cookie: cf_clearance=.7X3hdmfl1_w0WWJTmkpbSZoPcCrESDS30VYDouYqkw-1769404138-1.2.1.1-QFGnBckfjv6gHUIY1I_GivsmpP0dwvy0NafxmkVfUIsoUSZJ7.xt3GG9fxstx4JtN5yiIMm7oxgTGjjrIWxu2mY0nWrMd1Q9RsQpP2x0hUR5FF3xgaJ1XnxwC_AK.Fpq9rTEylDIiG1CXqZpltLcscGrmjAy_q9tx6uK0ASb7ri8lw0.KM13CKiAHnmsnOa.8iFU5eDi4k8rdTDlj.xEQkLoZ98E27r0w8R8t6LhVcM; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=ethgasfounudation.org; Expires=Tue, 26 Jan 2027 05:08:58 GMT\r\ntiming-allow-origin: https://ethgasfounudation.org\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aud1Rp%2B9JZrMyaX2MS9wTLRkKEfr%2BWPdfU3b8VjNCslN%2Fl99UO9PUhav%2BVqnlaQWDORGnJuwJXlUHs0zRjB3wtrWirv6LR2BZZyVl7%2Byzxsl4Zbb9Kwy7Xoq9B7OU7gPSCaOqAWabNM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=918\u0026min_rtt=0\u0026rtt_var=359\u0026sent=2104\u0026recv=214\u0026lost=6\u0026retrans=7\u0026sent_bytes=2381408\u0026recv_bytes=29051\u0026delivery_rate=32007369\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=26297\u0026ss_exit_bw=16417281\u0026ss_exit_reason=2\u0026cwnd=27915\u0026unsent_bytes=0\u0026cid=0419579dba25ef92\u0026ts=830\u0026inflight_dur=252\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/chunk.45.z2ngrbcx.js","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:57.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET /chunk.45.z2ngrbcx.js HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgasfounudation.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:08:57 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 23 Jan 2026 21:23:36 GMT\r\netag: W/\"11594-19becbdbe64\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 7887\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BV%2BQBA%2F4w1uaHU2A9YM2bIfmU7L17MYaTpZPdXXRbKBViYYCJft3HNR90MMgit4YzofdaC2DcS3zwzpsCoZ8P0Dt6g4FfZsK5kMXzxiDamZevbA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3d7ed309b1569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71060,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7e7991d1878feadb3a6e4d22d7cc389c","sha1":"0c922ae86e489646da628ea5dce1b14d6db3fb61","sha256":"11adf3bc82e883033b509227526c63347b9358c0f1dc57ef59176afe8f14432e","sha512":"dc44df61847764204a30ff345be2713b07f2aec572f949dd83083034192cfd0b548a4ea226057bfbb11147b944e7a640560aae0e093b9ca3efd97dd5cb86fcda","ssdeep":"768:N9USbcK1RdlbdUAYdUdzye7ImLUP4vO1c9OKichu5k8qYUd4izndRW95qi5LQ6wL:zRfbnYVYO1c0KphmWG11Y9LOY3R","tlshash":"2363c9eba401d8e98e1a50dec877e499e4680953cdecf053e66cccc6b85df268447a37","first_seen":"2026-01-26T02:57:59.988194Z","last_seen":"2026-02-14T12:27:52.045671Z","times_seen":4,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:57.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgasfounudation.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Mon, 26 Jan 2026 05:56:57 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dssfAmeeCqJ6nlENaLV1LqN5O0gMgEGZZ5C3gZqP2nPunUChFdwkXk9hqF076S2OUHrwdyaXD5GXN5%2FVTG61O2TZ3GAhRPSRKK9DaeG8U%2BWFQ88%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:08:57 GMT\r\ncf-ray: 9c3d7ed309b2569d-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-12T08:36:42.050233Z","times_seen":418484,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/Inter-Medium.ttf","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:57.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET /Inter-Medium.ttf HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgasfounudation.org/0335efd2c6f86160.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:08:57 GMT\r\ncontent-type: font/ttf\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 23 Jan 2026 21:23:36 GMT\r\netag: W/\"4cd58-19becbdbd76\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 7886\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=063UN5kOiW2MiBr%2FRnyWV1rX%2BSFcUAt4hTXB8nvlmIZ5YtRA8Iu7vSibUDRi6vvbxj8pVW7eFDN32pAdh%2BOAGqP%2FzTO1rmdyPW60EsRfzpxrQRU%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c3d7ed529c6569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":314712,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 36 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)Inter MediumRegular3.019","md5":"ed533866b5c83114c7dddbcbc2288b19","sha1":"a418a8ba73bbcfa8c131c426ab836d78457afa9b","sha256":"10d48331f5b3c7362ca357b00c17ac4863ad35199b13b0eceb0962c8c1ad7dc9","sha512":"f0653d74393bf0b78685cbbdacd1e8180034d51bdefc6af8e0a3a7a4b913a63b20a2c72093f82daf9d99c40efd65ab28d916d3e439087552be4dd7f8a79c6f4f","ssdeep":"3072:2d9CwXSBu/5QJJCz0zF4stCr5x3s5DU+FFlUOUK6EfJyq41tIW+mGMaf/coPHUGB:2d9BX0CUnDU+FFeDER11IzaUX4P","tlshash":"28646c03f363835dd9272d3a87a7c7a063a3bc913a12d20bf7283669ca8b5b44d574d5","first_seen":"2023-05-09T01:02:40Z","last_seen":"2026-08-10T14:28:40.325671Z","times_seen":1487,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfoundation.org/assets/favicon/apple-touch-icon.png","fqdn":"ethgasfoundation.org","domain":"ethgasfoundation.org","tld":"org"},"ip":{"addr":"52.84.50.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:58.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfoundation.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Wed, 06 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"39:88:80:B8:E7:2D:DD:34:B3:68:2A:6A:B5:88:27:06:CC:EA:9C:D3","sha256":"11:0F:40:51:AA:B0:E1:80:CA:6C:7C:96:8A:B0:9F:63:2F:0D:98:CF:A2:23:1D:B9:A9:2F:B8:E3:0A:4E:75:C1"}}},"request":{"raw":"GET /assets/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: ethgasfoundation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgasfounudation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 8973\r\ndate: Sun, 25 Jan 2026 09:51:16 GMT\r\nlast-modified: Fri, 23 Jan 2026 09:44:33 GMT\r\nserver: AmazonS3\r\netag: \"c71f962ec1df58bfc97c4449f7f1d134\"\r\nvia: 1.1 e21c7dce7b26c6a388cc82dd5423f574.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 69461\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nset-cookie: user-country=NO; Path=/; SameSite=Lax; Secure\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: hSPVPTB2CZRea_0qGybpp0Vep6PCdms9Oej2WIB7ZGfXJtetFGIIXw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":8973,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"c71f962ec1df58bfc97c4449f7f1d134","sha1":"46ad99759edbaa73fa8bec1d934ca98548bdc7c5","sha256":"a525825364bd986c40a963067ac23715d84ed72a3bb4179a8a75ac9086bf42cb","sha512":"b89370936621e1de7e55fc95a3e2dc3df34160cd10f775a0e21bcd32b5d505fa366e8bd320d71cdd175c639b1dc05577dd2829278ce50e04660085bc169b75d9","ssdeep":"192:vDa06tI0N6jU4YottgdgYoi57EkE6tM8dhNeLRDGJZhAzBxA+Hypqot:vDa0agjUcX2gYoi5/y8hORKQTACu","tlshash":"1202a020032c80a75ab1837ad2aed7c589068ed6b5a01e8e0f1d54f13f6735f6834d9f","first_seen":"2026-01-19T19:40:42.361476Z","last_seen":"2026-06-24T15:53:06.942461Z","times_seen":62,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":35,"connect":1,"send":0,"wait":11,"receive":24,"ssl":250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/favicon-16x16.png","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:58.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgasfounudation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:08:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 389\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 23 Jan 2026 21:23:36 GMT\r\netag: W/\"185-19becbdbe92\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 7886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YWcBE7HmuhJq3WNOHhYjV5stIBEsr7snUXj3CzLOXgoT63IILavq71UrcGTWl2VDPctt52vEvwBw0WpbcKWqri58FsvhkBg86iUHtM93wK6CU28%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c3d7ed6b9d0569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":389,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"69f9f39f921375908f7ce7edff37e84d","sha1":"f0e5f77105161ed478a1dfd530b9464eb2c6324d","sha256":"372ebeb97c54ef3dfa35ee53b5b637327852d3ac4e47b66eae6cca8a351536af","sha512":"47301d07500115da571a60e1c239f55bb704448f053a0f597d94103af2ce7bd57af5655371a3242a79d98b94ae23fa9e988b45e9354767f784cbc1c952752110","ssdeep":"","tlshash":"8ce0f1837e663d69ebb311726316456c789a150c859119ca508644550f422e50070991","first_seen":"2026-01-19T19:40:42.408958Z","last_seen":"2026-06-24T15:53:06.919673Z","times_seen":62,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-26T05:08:57.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 26 Jan 2026 05:08:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 23 Jan 2026 21:23:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I3a55%2FvgOrs3wGDuMYqu9dTDZj%2BGgFVqqGwRm%2FEJW%2FRzosMMz8Veper3LV6e3m4MtNaJYsMIja9ua2Z2A2IrE344RTZmckGOR%2B2SKC5FO0SNh08%3D\"}]}\r\nage: 146677\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c3d7ed1eb4956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151185,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"7058996e712bd39749f66cd8677b4095","sha1":"66eb5a8eadcbd0e2eedd513859d3de5db82605ed","sha256":"bd210d144012a45901df5a488c1395536e8e4b4432c8dde64c57983bcf64315f","sha512":"428b975dfb890742a8012b422361db65b44c9bce535f36607a19ae77cadafa5ef26868eab1e3628fce4153af94596ed39fff577408fe21f86737b865dc36f1cd","ssdeep":"768:tHgFSv+N1V9NEWhlWqny7f55IhcY7iA+YOlTsgR6sfRqx/k:WCu9NEWCqtcY7iAhOlkx/k","tlshash":"f6e38356a5f304661953a0a417fb470da630e043990ece987eed1288cf8bfd69da374e","first_seen":"2026-01-26T05:09:25.448992Z","last_seen":"2026-01-26T05:09:25.448992Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":36,"dns":22,"connect":1,"send":0,"wait":17,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/ethgasfoundation_logo_big.webp","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:57.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET /ethgasfoundation_logo_big.webp HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgasfounudation.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:08:57 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 23 Jan 2026 21:23:36 GMT\r\netag: W/\"884-19becbdbe8e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 7886\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwSnQvX5ksB3Hai0ZEFiunDmSFcX1T1owqKZClqeu0lhjwSHiAspQVt5AKqZmYxdjX0TF1yzhpSDHSc5FmzOM%2B9i4Ng6YUtMtJCQWWimGTEbpXY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c3d7ed4a9bd569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2180,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"53083eecb953b081615969c80dea80ec","sha1":"2df8fa59de276539c3fbff7045393114d02cfa9a","sha256":"5388e317839ab8e23bc966704e66219bf12f191b9a0a9e34e675f4e360377b58","sha512":"99f5ae94c7a6e12e1c91a8f497ece4f9057685ba74fd170dc0f6578bac5ea057a16f96ad96fcf5bd19b7efd44ed60bf746f65cf05676f18a25424798b4c5d438","ssdeep":"","tlshash":"3f411ad378c2f1019af83c26fbb648aa65a2756d7ac304651573853a906f901597cf1c","first_seen":"2026-01-20T14:33:48.884336Z","last_seen":"2026-06-24T15:53:06.917118Z","times_seen":51,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/Inter-Regular.ttf","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:57.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET /Inter-Regular.ttf HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgasfounudation.org/0335efd2c6f86160.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:08:57 GMT\r\ncontent-type: font/ttf\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 23 Jan 2026 21:23:36 GMT\r\netag: W/\"4ba44-19becbdbd7d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 7886\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NaTrssWLNXV4R9%2BCjFNYJC5XuTSRGsfmte%2FsHKXfIEH%2B2C9JhvX8jdK1hdxC6bielaaS25rALCJnOUL8dqO8A%2B2kjsLfMhqquxRWwI0ktl0QSnc%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c3d7ed4a9c0569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":309828,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 33 names, Microsoft, language 0x409, Copyright 2020 The Inter Project Authors (https://github.com/rsms/inter)InterRegular3.019;RSMS;I","md5":"079af0e2936ccb99b391ddc0bbb73dcb","sha1":"7237d9cf55f177702066a28a4dde1e4c7e8ab576","sha256":"41ab0f707a2bfab8133ccdfcdab52282f5f79e5751f43a264805451c7bb95fb8","sha512":"0dc66e3ea9fe00ebdba8636f563842e4170f21fe3dadd57ba59cab416ca3326dc887332644b0ec47cf0911d7396557beb420908d3e90a5ea7830efc4f0a482fa","ssdeep":"6144:AyKMOMxMmABlNGowmBNn6m4zHkA4atw21za0dkh6w/yOjs:AyKfMxMmABlNGwBNn6m4DkJak0fw/w","tlshash":"88645b23f363c35dc5172d3687e2c7a0b367bc512a12e10af7283a55daab1b41d9b4d4","first_seen":"2023-05-09T01:02:40Z","last_seen":"2026-08-11T19:22:37.462716Z","times_seen":4424,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethgasfounudation.org/InterDisplay-Regular.ttf","fqdn":"ethgasfounudation.org","domain":"ethgasfounudation.org","tld":"org"},"ip":{"addr":"104.21.88.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethgasfounudation.org/","date":"2026-01-26T05:08:57.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethgasfounudation.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 20:59:19 GMT","end":"Mon, 20 Apr 2026 21:57:42 GMT"},"fingerprint":{"sha1":"6F:1B:F0:CF:2B:B1:E7:D9:30:51:5B:E4:1C:8B:7E:A5:3C:9C:92:E5","sha256":"A6:67:89:19:C7:DB:3D:A2:E1:F1:77:60:D6:F5:75:39:D0:26:37:88:7B:2A:8D:4C:0B:13:0A:C3:4F:3D:81:88"}}},"request":{"raw":"GET /InterDisplay-Regular.ttf HTTP/1.1\r\nHost: ethgasfounudation.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethgasfounudation.org/0335efd2c6f86160.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 26 Jan 2026 05:08:57 GMT\r\ncontent-type: font/ttf\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 23 Jan 2026 21:23:36 GMT\r\netag: W/\"627c4-19becbdbe22\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 7886\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rfpbyvEls1tR3w%2BPawlHeDcKHX6ThAm20nj4NlJwQ%2Fz2pKxLp5e91%2BALahpy3b8vbtZiR9GFnWYAGRCOnvimGoWmo08ofLCYZsdHOlGll6JnccM%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c3d7ed4a9c1569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":403396,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 37 names, Microsoft, language 0x409, Copyright 2016 The Inter Project AuthorsInter DisplayRegular4.000;git-a52131595;RSMS;InterDispla","md5":"6087baf32494adfe1bb91a9cad6aa7cf","sha1":"d95ca7cbad5a031ad278e9d333fcab0f067bfdc0","sha256":"1cb7b997bd7a39ee151752946809bbef50648aa05ff50a855ef642886a57e1db","sha512":"2a9e6b2fff790c3885cd23c4d8b0c439601652326f57cd638639d3eeaeffeafbee9749a4afd724c2103f614fe280b9f68498f133f53fc09cac7b8ffe85e0d30b","ssdeep":"6144:3jWwXSpB22yJWPziKSQLmXGTd5kcAmGTRYZyNAyg5a3ga0wZsTArj3k4yhE18:3jwB22NPziKqe0aMCg8","tlshash":"05846b1beb05eb0ade1a1c3486f693d133a9fc953d1ac28bb05e3a59c9931b40ed71d1","first_seen":"2025-03-13T11:19:58.162328Z","last_seen":"2026-08-07T17:08:39.696777Z","times_seen":227,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-26","alert":"Sinkholed","trigger":"ethgasfounudation.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}