{"report_id":"325dcb20-ab89-47ff-84a6-aa01a264e1e0","version":6,"status":"done","tags":[],"date":"2026-01-24T19:10:04Z","url":{"schema":"https","addr":"30eth.vip/","fqdn":"30eth.vip","domain":"30eth.vip","tld":"vip"},"ip":{"addr":"104.21.63.170","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ethi.top/","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"title":"REWARD Portal v2 | Latest Web3 Wallet","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T01:24:27.380512Z","times_seen":17770569,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"30eth.vip/","fqdn":"30eth.vip","domain":"30eth.vip","tld":"vip"},"ip":{"addr":"104.21.63.170","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T19:10:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"30eth.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"30eth.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"30eth.eu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"30eth.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"30eth.eu","ip":{"addr":"172.67.164.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-24T13:43:32.945365Z","last_seen":"2026-01-24T13:43:32.945365Z","alert_count":2,"request_count":1,"received_data":5304,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ethi.top","ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-13","domain_rank":0,"first_seen":"2026-01-24T13:42:02.425392Z","last_seen":"2026-01-24T13:42:02.425392Z","alert_count":15,"request_count":15,"received_data":6561036,"sent_data":7045,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"30eth.vip","ip":{"addr":"172.67.148.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-24","domain_rank":0,"first_seen":"2026-01-24T14:51:55.276243Z","last_seen":"2026-01-24T14:51:55.276243Z","alert_count":2,"request_count":1,"received_data":4968,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ethi.top/","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c53f728c0d1e7c1a7ffe2b55494b5ce4","sha1":"f9ae3b259ccff61b9da9d62d3b8d911d4cf4c2f4","sha256":"b069671d95f24a25fb1fa37c908797aebbe1efaf001d5263fe14f13f84a17113","sha512":"7494359ea5918b4069d6417a710cbb3199fa2e84bb7e0750aa03c0709667cab420f5d1ac0d199ef3543271be803d190b6f0aabf0f5a1b2d2baa8f608d241136b","ssdeep":"","tlshash":"6b11c0793f1a5534dad5418b31bee7a93e3260617a02a084c36ccc299d18e8714efdbe","size":902,"data":"","first_seen":"2026-01-24T19:10:06.150508Z","last_seen":"2026-01-24T19:10:06.150508Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a71f4c7a5c59e3cdf205bc8573c81a6e","sha1":"e6ce6a4c675a8315ff14f5a9133a6e5cd043b0cd","sha256":"4641264f656ee0929cdefcd5f094eb9a04d60115f62dc3ebf63aadb7dc64ebef","sha512":"d7ba08f02b1c22f34940584b48f1ed1135f7dbeaa507db679a0f3e622b08cb7a65ee2af14ddbf1d4b70922ca6be51db0282c7f26d6e6be713d46b035f9291d76","ssdeep":"1536:OXeIyA9XeIyAKMsJGQnCyDrfoRiHAxlU3fCt5tqFo:9tRJGQroRiHAxlUKjo2","tlshash":"e683b5d8594bd4d04e0512ded873e949e1288e63cdacf067a22eddc1b66df2286c317b","size":88575,"data":"","first_seen":"2026-01-24T13:42:08.577959Z","last_seen":"2026-01-30T07:01:39.056989Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/zoom-1.6.9.js","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41f8adb97798a901d2803ee7672f9925","sha1":"54fc7b29497a5d164c8ac270d316ddee090d9496","sha256":"a1be01ced39ae2a635ec4f31ab3c8f39b918dd19145f6678b7de9a81967efb36","sha512":"297a6404e552433aeabf2e6be1eadc8f31c8b3e87f2d817b60da3326fb359614e41fd5287b0bf3b8290a8387be7a86767f20da3b4cc89290fbbc7f97bf4e91ca","ssdeep":"1536:LXeIyA9XeIyAKMuHUqVxbVJ62c2hm0DXPvoRiHAxlUVdebV1X8D5:2JnU4TJ6wjoRiHAxlUGR1M1","tlshash":"6993a6da194ad4d44e0512dec473e948e1188e63cdecf057e62edcc2b66df26868327b","size":91959,"data":"","first_seen":"2026-01-24T13:42:08.561716Z","last_seen":"2026-01-30T07:01:39.050902Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e086e89295c18cf2abc7020043ebd2d0","sha1":"5148f3f68ad26e60e1a8a59120a75eb9cebe7bc2","sha256":"ce1ea896fd48c32c56766a9de88d2c5a3a95d22892729c1dc4757d319e3fe1a9","sha512":"31a3a4f95ebf50b0584bc091d6e6a99e25d25a56f94ced4adcbc6b7afcfcb2fc080f893c4276846bcceaefdeb16c3ec4f651b1a1b70f8ca0456d81a76f2e722d","ssdeep":"192:UvDmDM0krhHvVXKPzgHQBykVxMQ3iaO3lKm9iA2mFKs3gRRvGcbFGiVyXW:UekFvtKUHQvVxM6SMeNAx7vjvym","tlshash":"d88272863ac77169c67e107d00abb5ce63797e84208c1d958f28f8acbc7475a95a7c3c","size":18701,"data":"","first_seen":"2026-01-24T19:10:06.132761Z","last_seen":"2026-01-24T19:13:35.779489Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/1a1ccd66-eb97-496e-b7ae-241c3a2a5c7f","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-07T23:31:49.839519Z","times_seen":5106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"10bfdc8dd6353a5106581a11b076f386","sha1":"bf42bbd5574d832339edec5689c2a160abad8ad3","sha256":"75c38aeaeed90a7c223039742c770de74d1984a504b17942485d7d8413a22c78","sha512":"e150b04d6176493f98225fbf447975eee660aa622f44e71da755754c017a39ad4c274689eff1a0d5dd6d798ffe1dba86c25a31c14d163ed6ee33c944666dddcf","ssdeep":"","tlshash":"bcd023ad3d75893075a9024720f6d7d4767021517711758481c8cc2b6f11dd358b156c","size":217,"data":"","first_seen":"2026-01-24T19:10:06.154097Z","last_seen":"2026-01-24T19:10:06.154097Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ethi.top/assets/C.css","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethi.top/","date":"2026-01-24T19:09:41.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /assets/C.css HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 19:09:41 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\netag: W/\"6973c059-85bf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 19683\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=29jia5YyaPYsDIITllQ3uUJcRuW%2Bk9arFfNFZfbG%2Bx6ac8WEYAm6k4aE7xDvC6KAGx79nVzSa5dVnJefBwmgq3WMurl1hw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c31d39d3da20b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34239,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (383), with CRLF line terminators","md5":"4583fd9217bf39632ef43a05ae22da4e","sha1":"1ee1bb9382cc635753d01301b371110bd0cf1553","sha256":"d59de1c4f49d3fb143d0697e8dafb5f616ea443a6634f2c69037e0155bf9b770","sha512":"38c222e824420c59f12f3ebd56e971a4dc09b9fc474aef0f79c4b35a86fb6585566cf66299c3dca5778cb3ba61aed7a657d90d2e00a27a612be370f489670452","ssdeep":"192:Vk0zi2BPkSGw1dZk/5AVpk6pVTPDt90sBq3B2tK1pe+jikFNrT+nDrl6CDwU1Xzo:Vk0zVPh1ofHEbNJVXK","tlshash":"26f2231a850211029133eea46bf60609f7e504278f4392e97ada7255cfff67846e2fcc","first_seen":"2024-07-06T23:44:54Z","last_seen":"2026-07-11T11:55:26.734558Z","times_seen":125,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/assets/f2fa90d264ae0063b0cda7fee6721b405dd4b866.ttf","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethi.top/","date":"2026-01-24T19:09:41.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /assets/f2fa90d264ae0063b0cda7fee6721b405dd4b866.ttf HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/assets/C.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 19:09:41 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 19683\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jYdYPxLOqzPjWns0rQto9NG%2BW5AQ8Dd5HXDjRJ36UXN5pf0VjbinIzK5QzH9HzYpm0FKnoKRL007kdWNyLFGEmIKm6PgvQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c31d39e7daa0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3523,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (365), with CRLF line terminators","md5":"5ac305cf0dc9ecdb6befafab2314e6ef","sha1":"cb4028d3ad12472ee1c99464be40a9ae5ae7a9de","sha256":"1edb7b2319d4c9cf94d14be3e056156520e65cfee33ae023dd226dd0eec57e67","sha512":"24542fc4cf860f32b8b57e839b1dec34c27767c7b04705773520cc64d14d961231125804b49dc6630bebb8cb14dc646c8aca25dee12b496824cbc06c710727db","ssdeep":"","tlshash":"71710d9044d194260073c1d599619befeea152038b8ab52431fc3beb3ffbd14982749e","first_seen":"2026-01-24T13:42:08.56504Z","last_seen":"2026-01-30T07:01:39.039024Z","times_seen":7,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/assets/471c09743f2ae171051f13575fa99b3a0700ca77.ttf","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethi.top/","date":"2026-01-24T19:09:41.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /assets/471c09743f2ae171051f13575fa99b3a0700ca77.ttf HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/assets/C.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 19:09:41 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 19683\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WFIDHtjX%2Fce0pyhLt5gDnZ7vKIRIXK8VLJ2ymJM4w2mMTCxvBTmmRUZjzGks3njwIkGQa7NKtUwhtPKqFX9pTmYyo0VdFA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c31d39eadb10b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3523,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (365), with CRLF line terminators","md5":"5ac305cf0dc9ecdb6befafab2314e6ef","sha1":"cb4028d3ad12472ee1c99464be40a9ae5ae7a9de","sha256":"1edb7b2319d4c9cf94d14be3e056156520e65cfee33ae023dd226dd0eec57e67","sha512":"24542fc4cf860f32b8b57e839b1dec34c27767c7b04705773520cc64d14d961231125804b49dc6630bebb8cb14dc646c8aca25dee12b496824cbc06c710727db","ssdeep":"","tlshash":"71710d9044d194260073c1d599619befeea152038b8ab52431fc3beb3ffbd14982749e","first_seen":"2026-01-24T13:42:08.56504Z","last_seen":"2026-01-30T07:01:39.039024Z","times_seen":7,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethi.top/","date":"2026-01-24T19:09:41.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js? HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 19:09:41 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=e5%2BZj73rvFd2Upt3qj%2F1vUw3YlLBjA5GvSVpxTsYvsnDX4lL5250al%2BuU8PZEecBv%2Bfr9YC%2FDmcg9o0kmJ%2BqvWzzwcdbQwgvi7zmgX0e%2FNuV5YVGm4A587SFFg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9c31d39f1db90b65-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1135\u0026min_rtt=450\u0026rtt_var=601\u0026sent=274\u0026recv=52\u0026lost=0\u0026retrans=0\u0026sent_bytes=292019\u0026recv_bytes=5914\u0026delivery_rate=52709236\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=80260\u0026ss_exit_bw=52709236\u0026ss_exit_reason=2\u0026cwnd=56687\u0026unsent_bytes=0\u0026cid=7c0f8591b013670b\u0026ts=585\u0026inflight_dur=76\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18701,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (18701), with no line terminators","md5":"e086e89295c18cf2abc7020043ebd2d0","sha1":"5148f3f68ad26e60e1a8a59120a75eb9cebe7bc2","sha256":"ce1ea896fd48c32c56766a9de88d2c5a3a95d22892729c1dc4757d319e3fe1a9","sha512":"31a3a4f95ebf50b0584bc091d6e6a99e25d25a56f94ced4adcbc6b7afcfcb2fc080f893c4276846bcceaefdeb16c3ec4f651b1a1b70f8ca0456d81a76f2e722d","ssdeep":"192:UvDmDM0krhHvVXKPzgHQBykVxMQ3iaO3lKm9iA2mFKs3gRRvGcbFGiVyXW:UekFvtKUHQvVxM6SMeNAx7vjvym","tlshash":"d88272863ac77169c67e107d00abb5ce63797e84208c1d958f28f8acbc7475a95a7c3c","first_seen":"2026-01-24T19:10:06.132761Z","last_seen":"2026-01-24T19:13:35.779489Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"30eth.vip/","fqdn":"30eth.vip","domain":"30eth.vip","tld":"vip"},"ip":{"addr":"172.67.148.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T19:09:40.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"30eth.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 04 Jan 2026 21:38:52 GMT","end":"Sat, 04 Apr 2026 22:37:24 GMT"},"fingerprint":{"sha1":"53:C9:D0:61:14:52:C0:6E:0D:FC:7F:6F:0D:5B:13:EC:71:D3:A6:27","sha256":"51:5A:F0:CC:A0:FE:B8:38:36:33:26:57:00:62:2C:75:75:6E:19:C6:C1:E1:37:F0:AF:6A:61:87:83:9B:71:F7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 30eth.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 24 Jan 2026 19:09:40 GMT\r\ncontent-length: 0\r\nlocation: https://30eth.eu\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x0wD95hFmrS42KcvnwIF%2BIxFPiphwZnAGesljSSRDR5E6Zj%2FVadKr60no0XZW%2FtOzMYsG4yUdCYNtRGv2g6FC48OavUZ5FQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9c31d39a6c4c7129-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4442,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T01:24:27.380512Z","times_seen":17770569,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":58,"dns":44,"connect":1,"send":0,"wait":7,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"30eth.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"30eth.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T19:09:40.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 19:09:41 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QEQ5kkExAudxF5WC1fokyt5loKFmy8ZxC3iIF4wWQY%2BsTA6RxfYEh9WIKrpoTqUoFnZzSo1AQZopAtJPUXsoDhOmbVwAWgPm\"}]}\r\nage: 19683\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c31d39b382e23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4442,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (926), with CRLF line terminators","md5":"d53d3245486b1b0a4f8840e96dd8d09f","sha1":"4a277625663f61a95387205fa1d19fa1a7c9bd97","sha256":"4b33b8601be378c743dcbdcdc26e3bdb89474c2eae70b4e7a86e7c9204cd9fcc","sha512":"58adafa9d879bb0e46db8360af4f87b2ef9a413d2502023b9c9249b209c8d36eed4ccd264ec9f617326b0071111598d55a4ad42a85f2af8a551331caafec4ec3","ssdeep":"48:tCL8Wfm7sRFxQMSTgpFJ7SI/FUsOf6Sx121CprRTGLrGWqSTw2wptI8Id62:hURFxtSTgpP7SI/qyQ121cNnnx/IH","tlshash":"9f9150a01891543600b3c0c66971dbeefe6152038b46b45432fc6beb3ffbd50986b89e","first_seen":"2026-01-24T19:10:06.139043Z","last_seen":"2026-01-24T19:10:06.139043Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":70,"dns":55,"connect":1,"send":0,"wait":13,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/assets/76662bdb665197e1dd3f2f8933d4d8b4a5dfba80.ttf","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethi.top/","date":"2026-01-24T19:09:41.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /assets/76662bdb665197e1dd3f2f8933d4d8b4a5dfba80.ttf HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/assets/C.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 19:09:41 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 19683\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Urc7S1ea%2FUhEJefI0NlOU%2FDEC6jfqv7GV1UtTCexxVuXZznVUnJTMUdXYa%2BHTrEWBfF9Le9gwQguAX9el1H2oLnBMtgPAg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c31d39eadb00b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3523,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (365), with CRLF line terminators","md5":"5ac305cf0dc9ecdb6befafab2314e6ef","sha1":"cb4028d3ad12472ee1c99464be40a9ae5ae7a9de","sha256":"1edb7b2319d4c9cf94d14be3e056156520e65cfee33ae023dd226dd0eec57e67","sha512":"24542fc4cf860f32b8b57e839b1dec34c27767c7b04705773520cc64d14d961231125804b49dc6630bebb8cb14dc646c8aca25dee12b496824cbc06c710727db","ssdeep":"","tlshash":"71710d9044d194260073c1d599619befeea152038b8ab52431fc3beb3ffbd14982749e","first_seen":"2026-01-24T13:42:08.56504Z","last_seen":"2026-01-30T07:01:39.039024Z","times_seen":7,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/assets/logo.png","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethi.top/","date":"2026-01-24T19:09:41.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 19:09:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 160579\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\netag: \"6973c059-27343\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 19683\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9MTJnmNpR6nkBhnD16hIl%2BeRyWsYAhUq2e%2B5O5lEOl2pATT%2FMbq1sGxkf%2BMwizoVB%2FMZs0fUYPONg1zFS%2FUFr2tGWZPZxw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c31d39ecdb40b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3258 x 3258, 8-bit/color RGBA, non-interlaced","md5":"86b356aa4636232f3e200c65d2a8b6b4","sha1":"3f415cd75e8a755a032ae16a3406c41dcc2d667a","sha256":"7af0cf14f1d0a35e2446b1ad8db4fc424c6735c4ca2ded1410f8d3ad69456913","sha512":"a2e8a2b8039b0a0f3fbd8d4a89554b313f7cab24530426eafc2d9a1b63e5c126fb419b61826894a2cc5f42f2c298151cec05d0e73aae55f419da60ad02b45a38","ssdeep":"1536:oU+xMzsj5wW0nmkkIX0fJNWuimucyv/QqBqdXi532C6yeoGBtAtFpj9j8GgG8cSx:3+az2GRnb3p/532RFK7ph8GZ2qiXK+","tlshash":"59f34beb9f2bccf9856a317f7baf0c2296d1db656395928653c1c11f7f8d0200a05a8c","first_seen":"2023-05-21T17:02:57Z","last_seen":"2026-08-07T05:08:28.175583Z","times_seen":1529,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/zoom-1.6.9.js","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethi.top/","date":"2026-01-24T19:09:41.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /zoom-1.6.9.js HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 19:09:41 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\netag: W/\"6973c059-16737\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 19683\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7O1qOCSCsXT790t0QH6xQr%2FbZ17eTAAB22TC1SjeqHPu6P937CTulV%2BUNNMTmzBW3NmPrDffK6YbE4N5IultRI5QyGbpPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c31d39d3da00b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91959,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"41f8adb97798a901d2803ee7672f9925","sha1":"54fc7b29497a5d164c8ac270d316ddee090d9496","sha256":"a1be01ced39ae2a635ec4f31ab3c8f39b918dd19145f6678b7de9a81967efb36","sha512":"297a6404e552433aeabf2e6be1eadc8f31c8b3e87f2d817b60da3326fb359614e41fd5287b0bf3b8290a8387be7a86767f20da3b4cc89290fbbc7f97bf4e91ca","ssdeep":"1536:LXeIyA9XeIyAKMuHUqVxbVJ62c2hm0DXPvoRiHAxlUVdebV1X8D5:2JnU4TJ6wjoRiHAxlUGR1M1","tlshash":"6993a6da194ad4d44e0512dec473e948e1188e63cdecf057e62edcc2b66df26868327b","first_seen":"2026-01-24T13:42:08.561716Z","last_seen":"2026-01-30T07:01:39.050902Z","times_seen":7,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethi.top/","date":"2026-01-24T19:09:41.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 24 Jan 2026 19:09:41 GMT\r\npriority: u=3,i=?0\r\ncf-ray: 9c31d39eddb60b65-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fDDSa%2FMDapsUoYMZkHL2xtGGPSBmWkqVKfB61eTC9HRT9o2xoG0F%2BxBy0LJl974%2F0yp78NXMaO7PgOrYJpzImgdZnYYK8GWt9d0WNH8ZW8Ja6r9HBfWD5b%2BkNw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1181\u0026min_rtt=450\u0026rtt_var=680\u0026sent=271\u0026recv=49\u0026lost=0\u0026retrans=0\u0026sent_bytes=291210\u0026recv_bytes=5290\u0026delivery_rate=52709236\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=0\u0026ss_exit_bw=0\u0026ss_exit_reason=0\u0026cwnd=80260\u0026unsent_bytes=0\u0026cid=7c0f8591b013670b\u0026ts=560\u0026inflight_dur=55\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18701,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T01:24:27.380512Z","times_seen":17770569,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/assets/ionicons.woff","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethi.top/","date":"2026-01-24T19:09:41.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /assets/ionicons.woff HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/assets/ionicons.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 19:09:41 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 67904\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\netag: \"6973c059-10940\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 19683\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ySzAoqwfPc9fqF%2F0Y3cbFGwtqJUVrKn6WvTkSgeuL6gQrRwM4mfQPHISkXKHgs0P%2BblArMEEHWhXmuqpNXvXM490FVmlOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c31d39eddb70b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67904,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 67904, version 0.0","md5":"2c159d0d05473040b53ec79df8797d32","sha1":"5524e1137e3552ccc4b142e64703bf4123b4e9b1","sha256":"a75e381026eced44f4e8d6ea4dc40e28e6a64dd953e8c0b6c239d1ac844c4a2d","sha512":"0e0273be313fc5c8ad48c4b697c7ae08b946888327755298cb87a3b3f4a39a0225ad6e9d46bed78cf4f498c66c6c83b4dc1d76b0c1891883d1edac480277f9c9","ssdeep":"1536:MWDL6msnGPDV3swi74RvqWjsUbG05GJyMkYb17hn0M0Rm09Z5QOybdVo:Z3MnaDzi4qWjrS05GoMkYb17hn0Nv8dO","tlshash":"39630226a2fe48b2cd9be4382e0c9fde538fd59c657c572c3234e0bf194d241598d964","first_seen":"2023-05-07T22:30:40Z","last_seen":"2026-08-07T22:10:14.410462Z","times_seen":250,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/secureproxy?e=jscdn/getFile","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ethi.top/","date":"2026-01-24T19:09:41.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ethi.top/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://ethi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"b3waf62ps3t6nidubhco\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 19:09:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dQu4XFW78WRKegWyZPBHR8vrc%2F8k1iYSvVgc9WwmMJXgl4EQ6QCzG1z7IutAXU1LENrv5TJxfys2stksKDxljacMWGCpWTHQeXJNANVmNJpuCQ%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9c31d39f0db80b65-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5924057,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"188b1501e7b09ed7fe04ea229012be3a","sha1":"2960386413764d525a7c9e982213669b83663ced","sha256":"80bb1c84cd8d435ef5e74ffb9b4918b8ae5216329e86fabe875e47aedf132148","sha512":"4a938bc12a25028bb5464a39a89023433f86f926086d2939cbfeda2d6d5495b55dd163bb70316b54625bc3c5bb9723e288c9de1a607fc546b8e14a16807aac06","ssdeep":"24576:P7yHuGHC++Azy6nQrV4iFPVlRJxlF7DCI5LJmnnTNoACMZZ:DeuGHC+9zy6QysPVljbVDnLynTpCMf","tlshash":"df2512d6e036e0c32e58d9267bc00dc87d6a14bd7e9f4b762a44e81064e947dcad8dd3","first_seen":"2026-01-24T19:10:06.147242Z","last_seen":"2026-01-24T19:10:06.147242Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":643,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/assets/favicon.ico","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethi.top/","date":"2026-01-24T19:09:41.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /assets/favicon.ico HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 19:09:41 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 19682\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6973c059-27343\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8WoYJ0v6qlCRuCczxMDDhB%2FK7zSYTNyhxInIdqZQ%2B7qj0Fa8slKInjiMDzNcuTwe4106qC5PAGZhlSKqjAx%2FMXNRTRYmJA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9c31d39f9dbc0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160579,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 3258 x 3258, 8-bit/color RGBA, non-interlaced","md5":"86b356aa4636232f3e200c65d2a8b6b4","sha1":"3f415cd75e8a755a032ae16a3406c41dcc2d667a","sha256":"7af0cf14f1d0a35e2446b1ad8db4fc424c6735c4ca2ded1410f8d3ad69456913","sha512":"a2e8a2b8039b0a0f3fbd8d4a89554b313f7cab24530426eafc2d9a1b63e5c126fb419b61826894a2cc5f42f2c298151cec05d0e73aae55f419da60ad02b45a38","ssdeep":"1536:oU+xMzsj5wW0nmkkIX0fJNWuimucyv/QqBqdXi532C6yeoGBtAtFpj9j8GgG8cSx:3+az2GRnb3p/532RFK7ph8GZ2qiXK+","tlshash":"59f34beb9f2bccf9856a317f7baf0c2296d1db656395928653c1c11f7f8d0200a05a8c","first_seen":"2023-05-21T17:02:57Z","last_seen":"2026-08-07T05:08:28.175583Z","times_seen":1529,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"30eth.eu/","fqdn":"30eth.eu","domain":"30eth.eu","tld":"eu"},"ip":{"addr":"172.67.164.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T19:09:40.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"30eth.eu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 20:13:14 GMT","end":"Thu, 23 Apr 2026 21:11:43 GMT"},"fingerprint":{"sha1":"66:E2:BF:02:C3:B3:EB:71:04:DF:67:29:1D:66:B9:6A:18:38:13:F5","sha256":"54:EE:E0:DF:8C:D5:84:5B:29:8E:F4:F4:94:D7:B1:D9:FA:3E:33:82:A6:7E:37:50:B7:80:24:0B:56:60:EE:C8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 30eth.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 24 Jan 2026 19:09:40 GMT\r\ncontent-type: text/html\r\ncontent-length: 167\r\nlocation: https://ethi.top\r\ncache-control: max-age=3600\r\nexpires: Sat, 24 Jan 2026 20:09:40 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=T6fQHIFH5m%2FQqP0q3CquzOPVIqngJILerJf18dVStQsAMgGICwdShJ0yfTqHVJjfWjj2drQX2lZ83qahCUfl9rKkuQBTo4zcvYEZ6K9hOMEs2RYwEb0g99bLNw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c31d39aab5832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=553\u0026min_rtt=493\u0026rtt_var=149\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3189\u0026recv_bytes=1120\u0026delivery_rate=6435555\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=d410b93286a9a1a9\u0026ts=32\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4442,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T01:24:27.380512Z","times_seen":17770569,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":28,"dns":10,"connect":1,"send":0,"wait":18,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"30eth.eu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"30eth.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/assets/ionicons.min.css","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethi.top/","date":"2026-01-24T19:09:41.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /assets/ionicons.min.css HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 19:09:41 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\netag: W/\"6973c059-c7fa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 19683\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xEudfyU3j7pc6xokz5%2FRmCQUl0MIuHAUIoUbmvIL9Q1SdSOSad2l9a19tzakFhv12F4xA1h1Qlv3A87Wy8elO9Tv0Z5z0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c31d39d3da10b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51194,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (50712)","md5":"5d44a6d5067054794749ce8fa51b4831","sha1":"e490960af9916cfbfc700a2b938132c26d4367f1","sha256":"2935156540a7039310270c0598c48982bd8c0b18d5b93f3266cb08e82ed36962","sha512":"b44a508b9df68ecb70f7429ef08f8647573a2c3834b9fb440d7ab3304dceb930046934896aba986b114620c793f4e53bc9769363b09df8a992e8a23cc32621c4","ssdeep":"384:R48VIQhhJhjRqFdtYRjJIjsjaHnNfc2C4741mf5HRzL:R48phhjQFduRjJ7uHFcu7Smf5xzL","tlshash":"1d33f8e4d20c0dd0ab35c447ab49674858b5f7fbe4584ca8e42fd4ac39cb224a3e5b6d","first_seen":"2025-08-31T15:59:17.876224Z","last_seen":"2026-08-06T18:22:43.079477Z","times_seen":124,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/assets/ionicons.ttf","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethi.top/","date":"2026-01-24T19:09:41.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /assets/ionicons.ttf HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/assets/ionicons.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 19:09:41 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 19683\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n1Ui4ox2IMp1ds3topz9IDzIV1zX6t%2F5wWMrYKAZFTEA9m4R%2FsF26L19TSaW6Zkc%2Fw9TaJDLcoFOZxg2GyEvjKEjsaijcQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c31d39e8dab0b65-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3523,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (365), with CRLF line terminators","md5":"5ac305cf0dc9ecdb6befafab2314e6ef","sha1":"cb4028d3ad12472ee1c99464be40a9ae5ae7a9de","sha256":"1edb7b2319d4c9cf94d14be3e056156520e65cfee33ae023dd226dd0eec57e67","sha512":"24542fc4cf860f32b8b57e839b1dec34c27767c7b04705773520cc64d14d961231125804b49dc6630bebb8cb14dc646c8aca25dee12b496824cbc06c710727db","ssdeep":"","tlshash":"71710d9044d194260073c1d599619befeea152038b8ab52431fc3beb3ffbd14982749e","first_seen":"2026-01-24T13:42:08.56504Z","last_seen":"2026-01-30T07:01:39.039024Z","times_seen":7,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.4000569158105022:1769279130:6XB1yORU-ZFv2q1tQNdcHSv8CPFWoFZwi3nefBmDJyM/9c31d39b382e23eb","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethi.top/","date":"2026-01-24T19:09:41.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.4000569158105022:1769279130:6XB1yORU-ZFv2q1tQNdcHSv8CPFWoFZwi3nefBmDJyM/9c31d39b382e23eb HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12119\r\nOrigin: https://ethi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12119,"data":"acjA5pdIr$PsdsdRKfKPnuAPKG8KG7KsKq-gKH7r$dZKExgA+xjPsd+gy$Ad7gseKx$qAPRK6v7dnK65GcWJKlYcuJKrJDH9-KGvmeYAt$7dPpdZa9eeAt6wucS1R3pKrEgmPdr59gkpELP7KPEaYKvgAAtBV1nNbgN2CHjda65l7YRnU4yng4y4KGENVy52mYAKE-pYfLL4Hqx52Ea7K3MeK57dlrMsKJkh9dTd0ZFSpKolMBekCK57K3fjKP0tgVoyB9wUKRBoEuTelKAKN-q$7UDKKyEQetDdE6HKXtABDgYYB4f7Klfj7P7u-JEPFnn7m-eK-lc6kF1DAKPrFGUmEd6j-6j36jKI86KLecMjKgk8jl0Q$ppjKuFpm1pfTgVB4-BvjnnmIkWqvgwMIEPgD6eIkh+8zK2HHddreEyYOKdrv-N8llJa7e$Ta5Td$JxaJZjJb7N7uSRjKcu-HKd9r6ZjEdKBg493AKsFsDQRBzbQ1HNVeYf+En7TEaTWlvflJhjYKPNjA6rTN+-o5hIHKd33X8Bql1NG9aHe4cQNHByRFL75acqaBsBT0r0zSC-BHb+$mXc4v23y67yD0W3vPWMj5h6P268+y889DCXcXBcMEOM0j3X$-8Lre-5ppI9osL47R3SdokrSP38sIEJjq6FtFLHwYqcLZsIQXSksvnV2XIyL4Ng864+2nVjPHl3CSfAwgJSb0rYKoo7+cb-uDTBo1ZqBdUSSBGdTOKslMUFu7gGq4FSjB4$JOjp+TPsVW7gGHDruKKZzQenjs7gA4gH6QIHeQSU$Ah+L+HUd3Gct8w$worq+eUB35U2A9G9RjLdjM8p56UPE-UCd6aQEMcj7LG9a6Vp9gjEnQdjEP$L7Ldg-4efV-4yPQN7DKy-gEPrGKrMp$j7nT5WznIGKLGpNrx7jzJjdf5rJdpaNs39RgUd2PmeAkjrOBTfzMlWyHeput4Ud--Nj7KsIK3uP7Jr9R4$EEjvEKQ1-K9cN$7Amd4eAFEvA32ojt3vt$ADn6zwKPh$60nhASygs6JK4tAkl6gEc9BwEs-f1$t6NRUAEZUgt6qrNI62yvEkIwlu-9PHyruKrtgh1sxrutNPz1kradWh6RkCgatk65FA4Kjc4jNUdO-es-jzjwK6GHgnsGNygC5PmRjmnuR9N$zLHY-xKmLsWy$PGDdzLrTAkr7ZQc$fT$KzrNa6xfAvINHDdANrbtISUNKSHvqKSDHKaAd6TRpGlFRl6H6b7+5LAYP4cBg$mH8MSjfNuvU9Fc-U8aH7shxVGKkEeMKJHbE4Vx8L-LdALsaHVGKDdtdN6MujpMp3tTRftlJunHnNu-tyYV83LnIlFENUOAdtOXDVuLPrLjUPtrB20cL-EKdP+xr9$k509Pp146rqjdBEY8p9gPd8Hss+sAtxCAz5AwFg$7H8F75WrkAUd8fKU5v2QX+IGVL2IsRg4VcgPCd3LeZxx2yrpepso2hnWoC6q-oVk+QpnMnH$DE0+udtvfq6AakNQym1F2uVdvV--U2VeuCfV9G+SNbZ1fVUdCcCv7PGJHKjHgXv$RKBHUdcKWAKDCdVbFuUZB6gAXRtAvUj$7kKD0dAAGcaK1AZdRIHKqtm$s3VvAOosr3rXf-mHkc37KGemNgrQ671HNrFGejhyKFrMrsrUoUk8G44SEDnRUjHb63J0Hh9qO0arSG54I$jtgJKv-cPfFjz9cz48gPg5KAg8pQduv$jNR9Rctu3Nma7kufQhlLtXB4kQygaMpNIkrh-qnyGNkYTUI8-mCNMAryJdgTAyKEK3K6N7xsmK7n8lgXK4fUqgpfzzVgYPo+vfy9zAe1DYP$rMkzzKdfIBzN-wHbe+rxD2dUzZ5RslsqQK-D66HM77dtQvF6Vj3Hmdt6BPHRuEKK97qlFqwjHDUqQ5KN7jG8$ClDlpH6UznBseSkjKeLTTA-860U$j1kfzocS0I+AgcE838TQSqJR-J6-T2KjLzDRkpEqTlc$myJufEzQ9Yu4hYjdgDF9DPHEgCHOupNV-FkuBkKPkeANdQH-1-l-663BB-rROU7fOL-dEW6yrYE8nqbywlgrAUAaJE7-kcj4G5MG4jeGoKeFvR9m7fuUl9Ja3Jfa$jph0rlSepNW9HjSg2oqvlMjr+eQlYfzeKNoh5-Fxku$xrB3rNIarw7-0MHuwkmVWAEKBoDVhgmSZaKyZXE6QUcY+uJQ6TKDlpB-VEXjFupLeFKpPbdQlcZ8OkW6b30+yK7C+SqWX$KUlRZMvBruejXwBmHlEKQMerQ365JZtHtp$egbuq88br6gM3dMnB3dnGrq-L5g0I+KRZ$De+6k5-8ssXKJTuoptz-e6VFomucGEEfIjUoxAyGnooFJRDD6pgdUMYBzT-4QDSLTfBRouP3GYu7rJwh-eS+VopISgxQ-s-g$0SNU$HrCKudS$Kj82zstfFxlaOfT0prJH6E8vBRzKjEJssaJeJh796Urp2pl5B3gcTUkFbhuc4rNbPhJZBAHyRuGE$wt-V4dTl9f6Hr7urfR+hAtOOz7KQ8vBZ6HDSmKqT8oUo7JKUTLjI6H5O150lAPRPvI9UowNmjrjrXOQG6oEHBD4+TZGqos4nUrMTKdN-G0xD4AGzhrt8zIK3e90hVu9O6gkKeG$mvH$-lZPbd6HyBSGxHNp-h87Sq8whcJGl4UP96AusM3eztAZB3JZ$Fq4P7LIdtExuH3K-Dd78hsd3uczdzCTB5h1rfFZt-TCerKJwDxKQRIO7LrQN-Gj+rKU3yRntAKf2Md30IScDf0EDIgeZ9FmNAMuSGIt9$h-hFuUDNZNdKAhrN3z97UXrFz8f$MKDvED3rNPwEBzu2EL6mywPDB2x5fZqXNy6peDk3rSwMnQl0rAxpPjzKeO8KH4snU-hTnPx$FTY75p7UWjc9XHxP6sUH+dO$34ddj1c88uW+5IGekf29pqYGRP7vgxMw+jF3OVva29JyMzDPQUHXahPGKevPdZr76vArd9ekjxKmrX4W6YGY+aIs4tW6NBE1qUO0wkf6WTRRswMh65CRGeABTugG1ZIxdJ7zI1DHxVjNGZdZOM2WQpbHmdN$Gh3u7xGrabf-D-AsmTUH13B1hjfS003KWGo$vByfpch0T9mUHKfWeeSUXSZaeMZyqjeIkCY2aDrJkTH+69zoQGW6z6PDEzGkBe1-osnThz9Pp6WvVlpgXfL0Uu1eGAxZy4phjSUJ5MAShz7MxMC9g2-B2ja4rRhX+Dr-YKaB8H-qQ-FPqwmj-Un-$Gt$tAMT-hWJLN$Xqzh3SNa-hO4p9bvAbj34U-j1bTxuJ8sPEF328MkE2c8gl9Pvx0EBa28YSAfNvrcgOfykar9kIzFOVOrcpFbwcNfZwvGkLDK-UDs7f37AAU1HvUUjXUdzKpntJgfxOxzkdrhlwoZZDoFjZQkl5ZEY7p5obuMJ3rXxF-AQHT6KsDDYkxyTrSF-9KsHbusdRQ3TmTF8EU-JxcIUm+dcEjh8kUxJzKjxMK6KHnpodk5ujJBJ2dEhN7bdbPUochzNBjaJInAJKN0HnU2hPfzu6eQHfPPDBMwlOPu7BUfxKJOPbKLYvfLHGlA-HGPY7AWKsKIY8uTSsuenkuMes-6deTp5RYRkWY5dgd3MDrVKHADZIxBcSeje-PmPsMdHINnuMocoUtmtkxAGFc4N7tMJ-jnUfcSGFP+lfKYDvJSg1DqeJSThzxjAOcM5pfHSQjdH3QDcNnBTID98Dc7pPlIPlf0JyY67XSUYn+OeSHB57SM+bTG-sMj8kYxxdSE-fSRcwtqo8YjGK+9GzN5QgPMN7A-UN5QpDtQS8cvtbJxN9T$fTd6QIKgPPghjlgoUgJFAwNwtFuVgArsjMp-lHUk+6pEtrY3NwHh8br4UQfIlw+bK+JnGCxoSRxRxIKbSOSDe1YZlsT5fRjHTfdfZ9UxcBDHn$KQJ6MJU8SQ5M84+yNnT2P-P4YUNJJ4dThFZ$f5+0c+GFKNhA9UJd+BQml3PXSofQ7uYdJH80xPh0J5PGrQ-KujNnSJkdSs9CjI-HAOh0UxeNPjKCNbcGPCtfJvDzKwgdDdfPhdcxSs7qd$K-rcxbhdcSuIDvfzQtgSeL-78tgNjBS+xmB5oNjhQkKAtIDAtk7mSEHrqrBgK6dqQbNmYH8NgkrkpK+s-2JrPs-IlI7FhpqvDYNuKKApMdU3hr8TQId$PbrFj$-K+m+hASkgtOAB+pJHUhYIdhZ$HnUkeHBI9Q-kpdKKG7pdZIjZnJHgPAZGdPfrrs5qK5odBzr2NNY6dWoKA2xzxBcN5slLd6rShLgnDRz6Bfh89ntCjTqMBHU2dId4rYByhIeptmq+TE7zUKpDHtJbPtJKADSsQKxVBAdYMurXMFB++0gf5fczqpfnBRDDZ-TIPlZ$T2de-78+UDq+jQr6YXYkHOzl+jq7zNr1KYkDDX9HTmhoGuJQGhlvJcSOcTBFZ6or5LjCKnoeTprFBpzKyeG7nPGAgj8FUGKUz6jKAgd1cQeEdjN4NchC9TNJZKgKy68sP+AsDatCzLYLY63DH2tWQq5B9AYEzh7vBHZxB9ng7Gdqekutk3d$D98oUIj9NEG3MXDfk+zH6vYHyhgZ5uoXMR+$SZN2rM34rmrGPS9+54BxxKZnk$MA9pgSxLDncOfpk2t-yxdEQpN2HktSQEQf9geArkn6Km7W3KtoesdLSM3KYB5fN4rxqeBBltcWcUQf5qYv75Q0EjG2gT9o57nTMrJtgEh2DT9fj6G+5Qq0hKojn3HmKRDJSEHjc2dLP5r9rEZRUguWuLcddktOz7ZWkG3LkKTQUOTsc5MyeF3WJ3lwDCSVyZ5Yr4JcrQc7luE7n2YHq--9PZtwNHnq7YHQ+9GJ50UVyTe0B8eNngnVdIK$ouKeNT+k7nUP3Oukn5dT7cUQHPGQjNr6KeyKc5BdTSx8KfMRT0xDqrYTUKqGScdJ6BDhTgBXMCKNdDllHgKOGJenJJdvP$PsElDayce8fahQPI3A9FPySu9D3+lk35tCzN-FBKJTyszmy67ekDrjB0EExPYRxTE40Qt5D2osXuQZjBezu2N5krd2Jd3bqt6HnuxPgnnZSGPH4kufKwoQ6Y-ahkqdDONB5MnNKuu$6H-8QBlg4pE$Bwka6gUexL52e8kAXVHYdwHkdQDLUFTRYgPtcUMw6wc+6DGR4wtJBSXz5Crn-2SnzrzyEE7k+U+uMsEg6k+8y+t9YDctU-KGd5z60PNncKNko4dprfPxrb6Nr6HhE1E9nGoLT98z9E7f7GBAy0UNdTt4yEgeMsdfG+ltzZ50onPKoAJgdrNB9ZS89nN3KfGRSRTaxbrfyI-$fwQqqxy9JRecu$z4G2gnJ2lOxVUYgNPTTKoy+9NjXkYU4kzcB7EJoaoDPDE4KshtKScDBk7cyG9b+p5PQABR4WXbPl38uOMMuCZSrMeRvFjBE$kgMdtzl5D-qBSEY+7rZTBdYQyErLfucGHfoVXQKw8wAIB79Aue87g4rDev7bHGrXxDGuh2YlgGgWzKtIQGv1KNGWzETjBg6rBFh7pR9+UQ+Xv3YkoaJvZceZ389Kev0eQ5K2QCyty6aIfMnQ4zEDcH9ur6-dDw3knTMh5CrYfvMyuCPx-Jkbcf7qGyTvGFxOZONUqzQWvkG9dUek$G74r-Na3aUxB4PHXmeBkrTo7eBJD7ZC9TYHqKzfQOdOrCd-huxBZvvcQU-HQuPV$-S0cKEHnzqHn0US+b6-KHebkFlttKhgAQjQAoRt4APd0$kOcM$kdTMsQCj0tQKqK7otUwgRaLre8rT3vK9wjfMF9bt2rP9ALUXuXzjNlYX648944g4$v$v5jBvNrGPGK-h93IS8qrR7l6NB6n31hLcOeL+TZFuOuYzEBASr3HYTxn7nUjYjYG-BUSuK4LTtNYByzBknaGK9PS3S9IZJD$r7q46N568ZyCBBf5Q6PqfndWgf4exux9g75C59GY4M$NzNPmhSc++FBJGsxBZF0yeugIfSN0rBQaB4G6r$GK8J+c5-Pp7P7d6JDVhRL8zw9N03UZnIDL$0JwdKZCzrNspqXVfIrGtmXCla0Q-CZ6EgyQ60gU7dDlkDHuRrA5gpydhIx+gTJcRkRyRuPyLnRnzUXrP8v3rV37ys4gvr4+D+k7EW3yuOXOXzxjsnU2tc+46jcQAKFvo9d7$6d54lMG90z99$EE6IWvvHhIb43Re6$9vV6+TlQDQa$++p5vc2kGKnoR+N44UnSoFq5ospvgUu6EXCJ033TOKnJuTxj5-pPPalE$fTf5ev9vaJZI72hGeHNSq$XYc4N5kbPbKstr$EKmkRzoYGzT0QjBRFdd63SW62X8zBGNvkaB4s49zX9FKzUBHuBIJL+aNPLaTluh$r6HSvq6nMct-aq8Bk3Kac0vFItvcXtLvBYNonxzMb0GTykpPGa3Kw4jGz0pP8roZ0o-z4PaSV3uYH8Fu6c2HsPucmD6RIfLKOyUUKnG0h0j8u$Ybbr1-804qN04F-vB$sPRPOqEbX-PrDdwHjAAv2TVr-08bcuWGDRREXZSKXRULULWMcRXxrJsTOUlBkS3r5d3dCyBSsLcuY4$$ZWGT2L-UI4lF+kp07wB4E7n9R4kTrXrKl96cSHKulu-lVHZGnJ2XmXwE4PLjBW-GknMYVfUBGTX-y4-WX$K6BqrGV3qSauYs5s-JF+9PBSeTgPpjF75rGamg$e9q0BCNgJs+rL+-S187CzlBFAcUOdDo3zj8tG$W0L$5ZFyFUwhQNEB-fR1gWQ30wRa$JyS6pTpuTRuLx-ztHI9L9Ul40BkXUShj-UmvQWL46Ebo6lKAnc-KZ0OLQr$uwue7YryqyUBDS3-UAbfLP6wAJaEr3Pa16qzjS9LHtqLSj3nUnpVW76gYgcpbh0$IeEMByzmThyf-x-veYbPL6nDzuKZc9w8ElDDSfRKTmWzTDfo6Q+gxtPI7Hs6ET4Crl-NXVvr+8yoU-yCqV3-IKsCoPT2TY$eGCPYxQdC-GHpEkapEquF99dma3QjYVHhk9bdthpv3MuzgKb463X8Kr$8fw$9JprdZysTWYgYKXWXv7TR7SuVWPoL5jEBL3gXwo-brqFc2v5dzoNE-NvWUkd6Revke6FUAs1IwO7z291zVXbKWe83bbd$jvvuKp3jpRHoHkmESJXn1QdXEudSGwhWqKE3RZcnnN05wgcqqVJjeDLYToG7A-UNYIf7JhfpsrAhkdjjn2vQYsEFnjdRwE3cWqyTKno2zMM-9-Ku9sYMSXxMnVdud4QVHZv$ONsoO1JoOdkE6-5Swt5heW26KwNP+ODM$-$YD-aKptslybK2oPqqWr5+eyBazFz+TRbBSFBSUBH7uBDFRDah+8LdWnjF$f7PlPj+uUEKVEf6gk92NgXFm220mAre0PP-Ww1bZwOOlzEn+Dw9tMAwgf28uV9eN5gNK2lmm$s54Ivg4TqmU-2HuxwEj0O+auKagptN3Qj-XWf6gMq8PlmCKN+Bt4OZ$aCHf-jq4el$+KIPEGgIkrd2dvSdtj--EAW5Sl7rI6wKwG7$K2dNRqsLtucx8lWzckORkQKhN$PYFHsqyHDRUgWTIl7ozf$5nNpSo+jSdDN-JRA4WdaE33D-J0By4qZdYOA+7rA5r6upZdY6OG-TPXPt7qOOAS6LyT2N$rZKrUrZDBT77hMcdOAe7L2GKgWl3d-zIAqUGjKVpo46U6GwHEJ08na6UpMAW-NjlMPPjOj4JDHlWkRMSrDckp-7Rj84p0HmKQP$3uel0K375A6llKpOvdPTHVz7APudDH$KHvMHeHQaRgj6rDrjoRjLePglNZrYc8urj-agjqrQP8It63GRkdFpDYZ$ejjefW0kGNPHkczlA18HtDgEk8EHCuGMq57aPk$+4EeL65drar4dzofKwZG7NHJHHT$Kmp4l0duduAUK6U36lGMFryeVCrIG6-XHfNUkT33UOwk9rpdJu42U$G6RHJKD6G2NaUojG4cDTtk98tUU4lRNwHx8JwNjfz5kGFlc80Hc$RJNmuBrukYjNprLzIHZKb8fstcGml0r$D8K6LkqRkgSfJDreZ4UjfsglnhjeDV8HjDjLld7p9Wh41HbEkTYRH6DI9agD4L4jkcIDmddgD2PSdfIt4l6jz1rLDg1H$IL78-P+PgrI6TAYj6Ug7zWcBr7HmsHewNdKel7ceejdz3pp9HrpOAqkl0R3zrdev3DqHdCKxgBgMcdsgcI63QqRK9UzwcjmHyQMJcbjHDX$6KfsaU7YcZjB$PoaG7qren$eTJ5JNk-+McPWUDJK5rglMd3pxRYjUg1n0RgkK70YjdHOPg2G3P7Dpo64o4tatdAsen7z$3GROtOlaWOMEjUwkeP5d3IsA8UyJrzlAK6QjUuUw9RsAcYsQzf6eh9lYnN4rQrC6gtp8XKCHl7XK-sfr-9P0PErdKrg-ePcpEr08W--XjI-SNFPz8a1LKgEXPg3a437UO-RPv7MnPADtDNsEWBNt9d-68Y53pMl+NIKSQ4cMg5SjZHQzRjxUnIDRr9daHOQ5UmzRWds-PjVe8Hb0Gyz5gZK4cxYwg-$a0o8$mKRUFMRQduNZT1jzPHe6DAhkpnBKEKEAj2dzURHC3ejKr6d-cKH4IuZ7hQdRPfArOl8ZoGrfm56rjaK0xAfIUw-9HUkucejRuPB6xAhgR6oUUg$VPgdcdVKTAJsonM6SGDJRUH47lqnkxj7lc0kGPgQNrd3K6IC9EpkOrDnRTFjSYUHtQa7KSHKAezzKKI3MuGjMz4zxynXKYc92+UAMdgr7E-h4606o+6BF-5zrs2yITAEcaSf7rtmPMF$1L+6ryhEzO9I6Jpf5pGxKmxK+Vhc-eNBk47xoW5y7LTz$7K7y$Ozf4OA6egegHHwNI8$Q58l0r4eV5jHd6de99KKK6q4tJPsrtKzbo2joqcP3po4gpR0nKyzJpKVgMX1k+fPWHN7YdRHwQPUBmgZ8kI1z7Y5eRWf7A6dWAS$uVXqgakor95dAq5AcD3r2AwZwF+pv0dBKo9AjGH5ej4phcEKWly71rGqZ9FndR7fL-7PS94f5ogcI-O0RGGleIR7UkSWNvVSOPuKQYO4yJylP$Q7AeeWglyNftd83ThZ1mwUd3qzAk6ee2xRYNNNLd8oo4HCWktTAgdWUee0sD$nwBST9wfraSEJyToOPKHmjjSn3Lqko2HH1zt6DElwBgJDDcjkgG0jqKRHngptOIfr-UdVHVz8$7ehWa6rxpyTnzlL8fLlPgMzHO$F$PGt686zfWI7j-l87mP9KWA-RrLlkamgcg-K+U9P8LNdPmdEejAl6IGNGK-nlAYHO4yUduo3AoKP7NcG6ndD1kneSAa$jvEg8EpucOzlcjaLod7znJsyh9Ll6Vx4ExJA4M0O8Xlp6KVJQ6$MRjl3ocKZjlzrwtJt4pGDyJ-4JUlaRrUAdLJkc27$7dpuWMSUgIT6BtlUP0rNKQA17-V0$Y0DnA9o-RUOpF8TML8tsnQRrpSfskeYvH3VGq-8nTx1s6IsVqqa6r$KAY0InSKRBO9FpHevUzRUXah9m4oYKSD-jm3ZqTKccXsnWHUN4cdB0Y+UXkPylc8TU-YnzplGYdQUqIjz+Vlw1JtVkm2yJYAkRyqL$KG7ZK+sphKereGV6Zj8mbNreLh9txte+sX3n1RRcBHaYwIX3pEKK78z5UOmFH-LLpd0D0AyYUVoZaCBpKgH8sYAjKuM84J-eLmZyewjKyo2BUZIsdULaAE1B+YwIBp$8HrQ0DYKzIE01jrC-c5UYwI8RD1qh9wDc4EWE0Ujaq9H59KQ1hVhHWdA45vAg4LRI7evM+xkwW0IuNxgR7-dyAT0$0hqvgKjayJHrbKpByhz6k14+rFgFHFg63QKrtrB1gZNg36cSQ+s0GojgwAogoNHtknLrPzEe5D6bY6DhA-C995+D+$HQwXl48P7x43rF6w+Gnz$QINnpu7LC-jEW-LU5IdQDIrWDQQyN1pYR1HuY8d-zNqpelIKut98-f$bI986qy9Dw5+gowlVhYgkEd5zB7+LRo$KBBkndAvpudD4NMEkMa8xAOWLZ5nNIDyI9rqWl6b4r+M3Kv0rfKe6g3a5NM8Mr0GL-fJXTjGxpbCqq-eStljG2knDUEEJAw7fYS9tTwft$Ee5IrhaRT3X5s8rMmrZulTyJtVtL$e$MMVJ3sbo3x50Y-MT0j$+j55xEYEAITyq5jKBK+KqzhMtq$+ntjR4FIw8UmTEDAThYwIcgHHK-3gYJcBnIj5mWMTu4oN7-z-dIF-Q0HuK$HwGwX5sp7usNj6JsHb4D3ykKJvK48O6N4ZqrZj67KLRfrB7IcRNPz983rzl3783QeA1NfhR8-gYnW+s4wLNAfY0Hj$34dB6CQP8TQhjbHt-K550zGDWNL7XNyJ6t7bD+Nej6R6mbwqpDbAXgIcD-TZAX-ngwtOMdr5B6CPWjbgdgdCxDdnr3N57VMl55D+puOALsevU$K8EpxfEgI+QIFla3V5UBmPkvwktfNNaWTw0gvHxLWhSeyDYKc$LcN7MKe-QypTtzGT0PN-4oUo03J5LBqSK7vOzkARZjaEwMyEomb0DRKf64dKY3Iva3mu9dhxuYduSRHqafyNuBkkI0AlcN53Og8EygtaD9++3VDovX-9EIZgfMBukYTomWf3uZ3SunJOIVFHoThBb48vKSgJH0WtED56v7SWlORetf85DvSHKYHueqzF7Ev4mm9LossK5MRg$jsYyMeE6zTtYduAFy0TlpLYJgwSFAjpAm6GuxYNr8FE15yy3+LBduYVktKGYb+ZYuAEVIweE3SvBvvusdhweEEA-TvPosdhReAXH-KB4G+mbKFKv75dQpGBdIVW36U56v0rVEOo+769ePElo8FIHez6-uMN7m58A0ue62u-asn$2Ovdzjau0NuoF8wRea3I5GWLr+Ib7FX-PP+EUpA2hQbMPp-DvruuDOFHU0M-ua+G8DDkuUX--xvb3dD9XjE3o5FNjc8EyeTpQhu0jc9UnHlWFGKoPRBpFRJlW6XQTQ-Fo9l6cWu3UobNjGqPEcFHycobN$r7nEceHX0o7BMGnxkJqKvRoAB6GAvHzssv3d$BMc+2yYGrXwTwDU3QP66ba3B-FvRkV5w6GO6au0B$mSx3Bs3Ey+4FY$fJhFjE3Yh3Ud9uJ6$sX3JoPElMcJ6TWFEEhMUgMvayEW-0O-xvDMbJ3B8U4-u0FD3nJk4WZgZ--KuMq+D4uUpFhOBf3sYo9Fk4br3-EAPmhubzdmDl8acQhfTzYNcTVNBRyxj7dj3A85Kykhhfx9g4Zdv7f7RzwkNhyGgjKoUreKmG-3Q+1-OcqhN$g7uZKqeCKHCnwMvNm+8TVILK+OMrGSrZj0ZNSIB+ny1oUD4o7jK2uDgMhclbhtB3M+fdwdYz7AkKKKtT4ORHJsyca4ppHbjhZk4r-G1djlEj3pdclen68T8N4YALhKmdTXSjdjoU-kB9eKKgM7EKLKtQKjjtAW7yMdjNq-3AHWx8duLDPGG+nzHf7ojoTKuq3lO7UW0sO5F7PTAOA9KEqHKKeAAncKKlkmZQOyKEeuvffr0d9KSgLy1U5KKze8OqHgywnTEvuZvOlWuAIjNJvc83OlcEyHKGY3OlW8daZW3dVZ3OGsGKNodOruZFO+Rb2-nrePeZzK9KgmLtbn0sZTg671k$stDXHdH2uWbyEVkjrPQjzoU-Lo7Pj9SKXFCAKxaFffPSKKKFakdkNpS9K8AKNhWr+X$do21HhKdJKhXC-5eBeDayHKUraZ0KzgKA8Rt0q4PadIek4-p8b7w2fgzg3MGVLm8Ve47keG$ay+epUD4YaDO3Koa-gf4cAY4pRyRHmDvHScoUEFwnumrFdPUrVZxuptK-38sOLKytf6gApyE2AYAk4NIPb0KkRgBewLhtTOrQS8jmKOXUAgArUKjP5elml8KJzcUSePzkz39Pdk4SQTYcMzJdNd5tBrDTg9j5orwK2HPKxKdKMXF7dGkwKUV34dH1OyBDIPWK34R$aEyhD6JhKF$KKGlQ23dkr-OWLU4QzOwXatJnW10bZ4OFeJGGjGmfyKKKbFjoKK"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 19:09:41 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9c31d39ffdbd0b65-OSL\r\ncf-chl-out-s: AMVBpFvDpKGDixjg85+A+w==$2zc+dDTlx7FEF23PtbpFWA==\r\nset-cookie: cf_clearance=8asY7h3sONT1MwIM9lY32XzfYPd_5sa85bNI86N.HZk-1769281781-1.2.1.1-Cg2zIr7PD1V2GyxLixazB.VL_A8q8FjB.blKiEFd4YWAxyQhL279R08rirQJg0SrAyyDjX8kUN9caPvMaWCVsnNrAvLroWjrHLjm99tOgVQnC8NtNIgsXeem4EpLdIk2EdtBsdm4Pq0RU1VAGK.M5kLJZdsVZHfgtQDht5oxjapUwChJYn0SJi3Ydey7OtI0P8OLxQuaLs2A2_Lz6QUoH8Sd.7Dk3__y.KnecFf3hOM; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=ethi.top; Expires=Sun, 24 Jan 2027 19:09:41 GMT\r\ntiming-allow-origin: https://ethi.top\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=G9F0uIdSRa4lSeETA%2Fjo2CkHR%2FWxlz2amFVSmZrxxTFJ5py4aGLzd2KAu2AEar2Kjamq7myGwL7jlNnXOX70%2B0ikk2WX4LAT11ZUae4Tlr1yd%2BQ%2BIcgdLwQyOA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1244\u0026min_rtt=450\u0026rtt_var=566\u0026sent=390\u0026recv=66\u0026lost=0\u0026retrans=0\u0026sent_bytes=413924\u0026recv_bytes=19203\u0026delivery_rate=52709236\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=80260\u0026ss_exit_bw=52709236\u0026ss_exit_reason=2\u0026cwnd=56687\u0026unsent_bytes=0\u0026cid=7c0f8591b013670b\u0026ts=729\u0026inflight_dur=86\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T01:24:27.380512Z","times_seen":17770569,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}