{"report_id":"4a8f0148-907b-4ec9-bab7-b6c70a09facb","version":6,"status":"done","tags":[],"date":"2026-01-24T13:43:32Z","url":{"schema":"https","addr":"30ethe.com","fqdn":"30ethe.com","domain":"30ethe.com","tld":"com"},"ip":{"addr":"104.21.91.252","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ethi.top/","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"title":"REWARD Portal v2 | Latest Web3 Wallet","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T02:58:20.830441Z","times_seen":17665221,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"30ethe.com","fqdn":"30ethe.com","domain":"30ethe.com","tld":"com"},"ip":{"addr":"104.21.91.252","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:43:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"30ethe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"30eth.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"30eth.eu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ethi.top","ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-13","domain_rank":0,"first_seen":"2026-01-24T13:42:02.425392Z","last_seen":"2026-01-24T13:42:02.425392Z","alert_count":15,"request_count":15,"received_data":7307675,"sent_data":7045,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"30ethe.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-03","domain_rank":0,"first_seen":"2025-10-17T02:48:25.851892Z","last_seen":"2026-01-24T13:42:02.873497Z","alert_count":1,"request_count":1,"received_data":4970,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"30eth.eu","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-24T13:43:32.945365Z","last_seen":"2026-01-24T13:43:32.945365Z","alert_count":2,"request_count":1,"received_data":5312,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"61e2ca7d8b3f5da208ba332a5948afc6","sha1":"371d3da9891bf09cd5d2fc0546d809023503170a","sha256":"65d1841461907e4b180c22f47c4a168e8c14c821081168baff55462c7e4cd115","sha512":"7b3fbf29cb56b603c1ea9079436d37b89b75fb155dbdeb041e48ee9ed110c0e6baa683868b0d5a959bf9b28e75e09abe0c23eea772ae2ddf9846c45ed98b440f","ssdeep":"","tlshash":"07d0a796387588306298024a20f5d3e8666031d4ab1ae24092dccc2b7a11d9308b295c","size":217,"data":"","first_seen":"2026-01-24T13:43:36.861702Z","last_seen":"2026-01-24T13:43:36.861702Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6aaa12f0a369d1bf50a94401414c74a","sha1":"fca6250f244c1f0e26bf227f291dc1bc3ff14c39","sha256":"71bf11fa6d24788dd91bd92cda363806b59faee4797b451701ecf2a5b2be3d8c","sha512":"f0f00f41bfe9970632013863d91b677fcc064d191af21f66223fee3af008e86a2acf7cdecab4c5af314012ed042b58e0ac312091ea0f9c8675bd4312b3399304","ssdeep":"","tlshash":"b41100b53a2a5534c6c5418b31bee7a93e3220617e06e084c36ccc285d18e8314efcbe","size":902,"data":"","first_seen":"2026-01-24T13:43:36.862597Z","last_seen":"2026-01-24T13:43:36.862597Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1f4a5a6e982c4fbbdc14be4fc16d300","sha1":"011bf7ecb35df8d86e8d62740bf7e204a44fdab8","sha256":"e9c5d86b9428f7f06b59b05c006bcc22ec5fc5372c47d1b1b763fd7141d98b95","sha512":"266f5f637b35670328a046b5fdcb856f51f79656066a0a6fc60d5c03e9d9fc1b2a47917abc6ac8f78a23af6d83209c1e8a185106c0bfb3ad6d236968f7618e30","ssdeep":"384:bHdi8NO2/G45aEPFsNVcOvfMcMho9Po7zW1biZEw5Ci4qr:7ASzacFgO5ho9PAzK+Kba","tlshash":"1e9285ce3cc9f05e832aa83118ab78fbb76d5ea434095d04d212dce8f9617789466e5c","size":20605,"data":"","first_seen":"2026-01-24T13:38:37.895287Z","last_seen":"2026-01-24T14:02:58.295833Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/04b2256b-65ad-440c-b660-7ea8e45b05d8","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-01T08:25:22.304715Z","times_seen":5095,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/zoom-1.6.9.js","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41f8adb97798a901d2803ee7672f9925","sha1":"54fc7b29497a5d164c8ac270d316ddee090d9496","sha256":"a1be01ced39ae2a635ec4f31ab3c8f39b918dd19145f6678b7de9a81967efb36","sha512":"297a6404e552433aeabf2e6be1eadc8f31c8b3e87f2d817b60da3326fb359614e41fd5287b0bf3b8290a8387be7a86767f20da3b4cc89290fbbc7f97bf4e91ca","ssdeep":"1536:LXeIyA9XeIyAKMuHUqVxbVJ62c2hm0DXPvoRiHAxlUVdebV1X8D5:2JnU4TJ6wjoRiHAxlUGR1M1","tlshash":"6993a6da194ad4d44e0512dec473e948e1188e63cdecf057e62edcc2b66df26868327b","size":91959,"data":"","first_seen":"2026-01-24T13:42:08.561716Z","last_seen":"2026-01-30T07:01:39.050902Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a71f4c7a5c59e3cdf205bc8573c81a6e","sha1":"e6ce6a4c675a8315ff14f5a9133a6e5cd043b0cd","sha256":"4641264f656ee0929cdefcd5f094eb9a04d60115f62dc3ebf63aadb7dc64ebef","sha512":"d7ba08f02b1c22f34940584b48f1ed1135f7dbeaa507db679a0f3e622b08cb7a65ee2af14ddbf1d4b70922ca6be51db0282c7f26d6e6be713d46b035f9291d76","ssdeep":"1536:OXeIyA9XeIyAKMsJGQnCyDrfoRiHAxlU3fCt5tqFo:9tRJGQroRiHAxlUKjo2","tlshash":"e683b5d8594bd4d04e0512ded873e949e1288e63cdacf067a22eddc1b66df2286c317b","size":88575,"data":"","first_seen":"2026-01-24T13:42:08.577959Z","last_seen":"2026-01-30T07:01:39.056989Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ethi.top/assets/ionicons.woff","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethi.top/","date":"2026-01-24T13:43:06.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /assets/ionicons.woff HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/assets/ionicons.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:43:06 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 67904\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\netag: \"6973c059-10940\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 87\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YnLNjtPazc5uAFRBkQTSUHUwsfWxvwoi0Qpw7cVdhK8P8mxV%2FZeEPvHhTkg052iYIF81TFtQC%2BgE1r5M8pZpRnRJYsigJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ff538fd43b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67904,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 67904, version 0.0","md5":"2c159d0d05473040b53ec79df8797d32","sha1":"5524e1137e3552ccc4b142e64703bf4123b4e9b1","sha256":"a75e381026eced44f4e8d6ea4dc40e28e6a64dd953e8c0b6c239d1ac844c4a2d","sha512":"0e0273be313fc5c8ad48c4b697c7ae08b946888327755298cb87a3b3f4a39a0225ad6e9d46bed78cf4f498c66c6c83b4dc1d76b0c1891883d1edac480277f9c9","ssdeep":"1536:MWDL6msnGPDV3swi74RvqWjsUbG05GJyMkYb17hn0M0Rm09Z5QOybdVo:Z3MnaDzi4qWjrS05GoMkYb17hn0Nv8dO","tlshash":"39630226a2fe48b2cd9be4382e0c9fde538fd59c657c572c3234e0bf194d241598d964","first_seen":"2023-05-07T22:30:40Z","last_seen":"2026-07-11T11:55:26.743451Z","times_seen":248,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/assets/logo.png","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethi.top/","date":"2026-01-24T13:43:06.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:43:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 160579\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\netag: \"6973c059-27343\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 87\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=upna0U6HRopTLavYMIsmMxAqAP8l86mH%2FyssvetB81gKGCioe0VjfUFhxv7oPpk8Yv%2FgVRrfcfL%2FoY0zezarXjVbHhj55g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ff537cd34b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3258 x 3258, 8-bit/color RGBA, non-interlaced","md5":"86b356aa4636232f3e200c65d2a8b6b4","sha1":"3f415cd75e8a755a032ae16a3406c41dcc2d667a","sha256":"7af0cf14f1d0a35e2446b1ad8db4fc424c6735c4ca2ded1410f8d3ad69456913","sha512":"a2e8a2b8039b0a0f3fbd8d4a89554b313f7cab24530426eafc2d9a1b63e5c126fb419b61826894a2cc5f42f2c298151cec05d0e73aae55f419da60ad02b45a38","ssdeep":"1536:oU+xMzsj5wW0nmkkIX0fJNWuimucyv/QqBqdXi532C6yeoGBtAtFpj9j8GgG8cSx:3+az2GRnb3p/532RFK7ph8GZ2qiXK+","tlshash":"59f34beb9f2bccf9856a317f7baf0c2296d1db656395928653c1c11f7f8d0200a05a8c","first_seen":"2023-05-21T17:02:57Z","last_seen":"2026-08-01T23:40:05.680565Z","times_seen":1511,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/assets/ionicons.min.css","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethi.top/","date":"2026-01-24T13:43:05.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /assets/ionicons.min.css HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:43:05 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\netag: W/\"6973c059-c7fa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 87\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oxaPi2CUecJDPdN1ZSzYa%2F5zSiww1TNXlAgrIT4%2BKEHKpAX9phKvFcQq4cPel%2Bb3s9c%2BEL97%2BbxnMai%2B1pinuwTeGQ4L3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff5339cffb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51194,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (50712)","md5":"5d44a6d5067054794749ce8fa51b4831","sha1":"e490960af9916cfbfc700a2b938132c26d4367f1","sha256":"2935156540a7039310270c0598c48982bd8c0b18d5b93f3266cb08e82ed36962","sha512":"b44a508b9df68ecb70f7429ef08f8647573a2c3834b9fb440d7ab3304dceb930046934896aba986b114620c793f4e53bc9769363b09df8a992e8a23cc32621c4","ssdeep":"384:R48VIQhhJhjRqFdtYRjJIjsjaHnNfc2C4741mf5HRzL:R48phhjQFduRjJ7uHFcu7Smf5xzL","tlshash":"1d33f8e4d20c0dd0ab35c447ab49674858b5f7fbe4584ca8e42fd4ac39cb224a3e5b6d","first_seen":"2025-08-31T15:59:17.876224Z","last_seen":"2026-07-11T11:55:26.740991Z","times_seen":123,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/assets/76662bdb665197e1dd3f2f8933d4d8b4a5dfba80.ttf","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethi.top/","date":"2026-01-24T13:43:06.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /assets/76662bdb665197e1dd3f2f8933d4d8b4a5dfba80.ttf HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/assets/C.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:43:06 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 88\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibvC%2F8D6sIhxcYA0plQAYjvqwqPfMbMwqFo25nS8Gy%2BhN9vq27NrDU%2Bi3ug1pDAieApGTyguObJPPccvrF%2FRq5AulVEFcw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff5379d30b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3523,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (365), with CRLF line terminators","md5":"5ac305cf0dc9ecdb6befafab2314e6ef","sha1":"cb4028d3ad12472ee1c99464be40a9ae5ae7a9de","sha256":"1edb7b2319d4c9cf94d14be3e056156520e65cfee33ae023dd226dd0eec57e67","sha512":"24542fc4cf860f32b8b57e839b1dec34c27767c7b04705773520cc64d14d961231125804b49dc6630bebb8cb14dc646c8aca25dee12b496824cbc06c710727db","ssdeep":"","tlshash":"71710d9044d194260073c1d599619befeea152038b8ab52431fc3beb3ffbd14982749e","first_seen":"2026-01-24T13:42:08.56504Z","last_seen":"2026-01-30T07:01:39.039024Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.0950913583162235:1769260954:6AMa-dE2Elt6RzJQX9_E2zZcJnK8UWcwoclw_vnJANY/9c2ff52f1e8b75ab","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethi.top/","date":"2026-01-24T13:43:06.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.0950913583162235:1769260954:6AMa-dE2Elt6RzJQX9_E2zZcJnK8UWcwoclw_vnJANY/9c2ff52f1e8b75ab HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12124\r\nOrigin: https://ethi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12124,"data":"nZxrvUmiehlSmSmHdFDqBdidCdnednrmYmHExdIrNYlyd37WW1+6cYlCx9jdlrWq6dGiLrlHdEGsmo6iD5j+jdWRjVjdeq06dmUrm-d7WYmGhxEZI9v57Hxm$T7-Dtv$Zrd2aLxZ6IZ02Z7PM1ddnisEoh0ed96NmibM61BlrrN$sM2oEyDUa0Hpa6sdqh65MrhkCdmbVKthesGeAeSnBLdmK8rdLdN23gsmu5PY72NR9A+xIZ2VyPxerAdmqirdDE9F5uJCjurdwJ3C8y2ueddbVpGd0NdmJDgrXNlEadlJ9pFNGfuCa1dduiIrToEiaVD8tToZn6dETsYt8IoddgNweaN+eYEEYESY6djk4d1FaB6dxoesT-pJ526mbTNNsut8xlcPbc30DgNB2XdKxGuZ7cxV4sBufDlxWRrreebpVAawde58pvUCpkTIsJpw6OUiGC9GHEGA2v0FBM6maiErdlhE3yxPe0WWjH-Cc-OnWS+uIxg6SnTWJg+9bWPXDa9PqKxjTxdY-NU2b43qGbKRUddkGyUnS$kN2ya7N7Lcx75V$fPzlqr7jMSEXHs9$t1ZB7Nlb7Cst7rKOyte7n$wBYlf0W8ws98BhwUnhVhmstMrtpRLCalyuoE5jb0FihpERTIaumwf6cp6108SDoVVPhjuZAPweDiMIrAoyDA8ECMiDIwpuArUpbpOrHLZrndbYdbHIw0r8dwvSmjVU4pU3PH7n3AI9BcoLVBqgoBpatnU+4rE8dafSUDpaoBOW+SHvRRx6jlNg4dl+G5UkUvepv6adGnaUrtu4Ol+UzJmrlYcI9lZWRxmrqRwHWnoyxZqoPtUFOpe4Zo$gd-F7dx$dMFi9mhvajU$xYjoelYUppn6vdevsal-HNrF-nsUFih6bGIn6xIrNSYrUex70RuxDmrvaYrsVMpx7pdhGs+6ZUa15jU0gddaAgx2odrjgbjkUctBgx8rlgdOoICh6ktN58UMH6jUJc5nFnJ6iCk4W9dGexLmJgxKEXi5AbU5$X6vhNNBPDr6fGlnZ$ZWuPkuH6-lZeU$du0WjCb1eByv5$0pCh5mfm5$qaI6u1ElFETNp9UjUBns8IdPaCyces8rWEjT$r36ct$c2AsobBblRindeH-lmCdD0VDeOveDrul2Wxcd0Ja1GsZoOH4zojrGnlSDpUsLecDuveaS6jex+Y2USWMze2zF6xruFnnBMnflEh6YdstaLD7W69unbs97ENlYmbHFYoU1FOTNlvUvOfZ90XmWaeLhxe-UhagSyn3zl7hFhnvmMr0reughrmEKBXxi2pk3sYeccE1Irh6Wa0Fh8oxU4$rgT2PGCC4SWa9UaBmYYnUNsUcEa0cYm0sXS983sxrkgdPaPYX9ek-660wOsjU27XjIZrlumPOd5EziYjrrBYhk3HRxdeZNPmZdKadShxcJefrBPgNYhaggXdXJzf0+FZf3e0vD9drsxnUgWMUz$Z4wW3mLywRIL-xkILBPME4UVBcNni8arWMBX$xeBuinztA1gS6K1po7xAwvLOAjr8aIlzXXLjrNdTADdSYbmdodT1is2lbmrcr5rxmTMtRz$P3+n6klMj9d$2rRmxmtqgmd1rMmIli5jadgi6xVaRwyl$7s5YKJSVWlvuKdd83sh635GdlNEHBgraSMlBDxgs5IjIV5K6G-bChuIIlXFqrjW+gJDqBxYiLqsxrMF2dBtrlHSUOYp6Oh6i6MerFgDNm3issEg8RU9-Y1sDmV4LcSUM6zD03ciEfgxJaYWi39Diibc7$Ik53se6VxWl22F7li5EWY06fe+fscemNBpMeaDU8p5HkFNpEDV4$l9gpUrldEescW8p6m5DO96iPuemoSx-dhbUvSiRsuOY2xPb6ae3lde1DC-FNrjcseJ8E-dg3Eee1ep7+JNrIcUY2Sdfd6KNseoN+W00pFHbOtPYrUrmt7eVlF5rxIlx+F3t3bO9dGryc8mtDVl2N4bpVrh6rI02ZVvCq2fr3aXtPDCKgT7R012rg0HybN-mBplly7x1Zw$V3bxdnWUNEduxPU4E4aF80E2xu$Fd-yMS59jWi32y5HqXFZB0klUe$oTxPKrF0YS416Or54UofCw1GWHjrCYEfqohMsOW1qx28Vx9wjdFPFfVYBLxsk9U22bWprdb-SUVLnVPGHkFYNb4BPwrLKneujKGgRmCeFPDjMFvViymY1FbG5FUC-Pru82I57vE456MVywxmIBgxWMDNfo9NnWjCXT8XioemS8qRps0rEw1xypkwrGJgCWeuplDksvuYsLtVJx9YO6FzP9mgOWxFPqcWHFYChNkMPM+FJOSdtSWcUL0hS7gVOMdCuP7xm68IGR$4ktrbbnnxr04+5iCnjVnujc58xY5GvCTp73T5D4Iu+bj+4vYT7KdP25+VtVr5wWvPFx2+sZ63KYE6adDMk4t4seUNH8sFHLhEBnntCx5u00ygyCwEdPbyOxBCou4Ub0sk3fx7+FYvU$IVfX-336NCUnJ79bm5iy45EWji4cEgS75hamvg4nhy-9dXBHFdvgDCDSadtLsg9+5jIKl2lUUMPaadJBe4Z7deZ1bkY03Z6x4xsvXy2K0-bkbTp97iqJ+G8nsvV2dNEY8RDcpdC0Mxzc0Om9UTqAw8Ynp0he4Y3O$msVtVHO5amzCYY-xCNPzco39cj40SYf06Dq0e+G58O09e9TqriwydsLmXONKTmPIYr3NNUl+Z5g3p0g6mIEo-UW+yi9Vrm4x0u5NSd2XaLdUv2b48UUxWI5ign9emxDN5RqvV0cDJbnsko9KfOCckt45szqa+PPyuIETiCNmmUxJ8kKIUMWyC5eGxmtE$lYhEljHCOVnCXKaFZJgfySLDP1pblpVrunYDPfkLNT8kd+hhO6UIH5mdOyn4Pz7SHSayrTx+3mpwoIKKlenks0mScB$KYN2IdFg5VzSoswIPHHqkYEEZ1lBpLvwVUXqLRByHKuYVqNLN0eMfSkYkohht-vlFCdNgwI4rScsD18jv2RtSfOR60jxC$Em1Isj$WJpguZjaAWX6AMNqUmC+4YqrJvH52UbaG5FDNIEYidJAv+w7vXcseEZqX8KeS8xaXePE3eOktI5XCboS0HKYjieBqZGyEXnvuLC7cs0mmnw7ouodKifoxJqiVIPvdChGNnugup-OK0429j80xnuT6Kk0IOPwO+29CYmW8Rfj7WF1hZjVPII8eLL1CWUojIESVdqPFvv1vmqFyV6h4fxx5+z3Nh32d+T5mVY2+BmJts64pH4BYpsmlVuP-jUMiGm9aSRVEOPofkkwzymMuKWrYImAtnPIgZnH$RfcvW6DVNx7ZHfhj0EAyT78lh6Bcrq$JJ4$kKWypXfuB3ok$XfrJDXRBY4RNNPPgvm-YUmmuXvbarFJrg6gkeJB0LhDk4omlKxzKRwaK-WRsOx3w$ZxovKL3OYylfOJvrss3EeS6aZOOf4UR-v7eS0LPSd+sy4e3-r$qkYvjiqMVIjbkKrOqGK2mxskeEm6UpKmFv3xYbYld$8uaLd1eZKZ8ENbWnYMU6YrNH0oqX8opE3EPa0Feo6bG9xXe8auqFOrYXe1mDZnpL0gx6v6clZxI+eSmiZ03PRS34UO3OPSWEdY4pk+Z+F+Z3lNdyG0lzm6I0wMObjwPxVkdeeiGm0iNF3OKZKYgegOO6c-jBNxgkYVWoqFjwc-eKxGmj6nYg516TPqRP8EO4IJjOxppsRaWm0Csaw5Ub3i6CrajsolviePpHYfZBafRYZFVXPw0ukxROV147vSGxrOZvOIRbvFRHj9gTKIZ4cdVCc2N3GNekNxIkq5xWo0gWRIj$g1YvNC3hpqdBGieNeo5KWW58qNK-I9NzgJ3zNrlSWOokxsqpVBobgUZyNzpKr1lBqapMxzV1m3YFcAOwRHO+sMmLRJR0P1Zcxi43p+W64GdGwCqGju6srSmaYBGqqIRakkrhVfNF4ldVehZZNjKBdq8JZSp3VHj3c-m586tYYIVbsexyeDR8pWaVZIYsrHOo8HY3e7lavd3xNFRqFmRStAWiv6IJ8HqGP5lxmAN1jged7GYnF2m95m6Ipo8IjGRSatlheklZO18IjwPi6npEst5wPDvsrt55WuR3Oe23K5WKGpmrNM66gOaMRb0e7UtNeEdTs1NeZsrugplpodVivXKeeivixMa-8p7n65cVmdIUGmqC8UrqGilhe1l-WhvdVe4RIwFNNXIuVpYsqKRidRZS0oqpP62MtavpommdcsomwMkRUjpNe6w7do6UlSkTmvKmt2lXNuREd9KdIXOEObj5kixLlElw8L5o6+uE2G80togdPP7k2sqXlilBlj2f8MPUge7K4$a2qdo00cY1etYrI0RSsrOmurd5aVlfG-2KVH5FkGj22ppF2+6awV3iePwS4ldYvsrKq07KWalEZDRp0JuWV47xu5l1mjF06Dt64e8wcVYWcKxnYNRJjP2JwBKekLWAmoK43Ul-2pudCYcsUocr5xrJqgmYuEWdUNdAjaPbd4NhNN8dTPNjwr5dCBoSdKUS6-gdbDZLZBT00Xg9sTkbtrZ$uKa$2swv2CU2agdTPp3cFClh6CrwqiW7N$cCGf6GF3u6b$ZsCR5Rk8KfGHVSRRNllObBmMlgegt3kh2vOrwFFhGrtU5wOL6FjJ6pFXgVCvd$spNl0pggs$sGtN4rlprBmMa+TdgwVSdLROTdZbkGcBlG7Y2bxtj+jYsGkTZnavsHE4cX5Pt8kxUqGeYt5b8l6qtFWEc3kW7H8rKxUypMmH6jRb0xjXdLe3l7lbw+qN3+3DjmdOgXusw9FgTDFd4WqJ4ijvGTP-T+Yyxz6dczCck5lBKZlajsx8ExUlZs7Vv7ecgzNsUTaj0aVCcqkHqzCqPy20V5U2UmlimhqVm4NqVOaoqlTJ3pU3dqaZqa0lcaW5mEm4Crjv2I4gO0mFGH4HOa7UZqqd77jZdjbu6R422DGAm5daxPpNmJcqPoYjdndSeiEP6-CNPIp-8WeMTrt-efRVt0T3xOTvgdb5v-2rYqCiuMCBO4F0lx2HE$OoZ+OqEhfag36lKSy8scWuP23XN30edlYITL7tb6U8OogoUcRges$p3Fm9Kabjvn8O7I6XNbkkUumV3hb6vIsbx2$UES2zFnbNq4OLklPIFrym0jdzppdW6Lq-4+RNetjYG9b9j3b0cH$9gj2gyEkdoovXRoueuTE$apVZV8GSE2bpV0CKgCZajc8kmgd3uEflNFjdNOqBlUlFevlLb5mE0KEAECU7KD4CrEtbaFag26CHq5dqghC$54aSdGc3xtuRkHKoerKrKNdUNbtRRItoNymFcHRH4-O1lFCMWhpzsT7vCCY+PZ3huBcX5oYlxXOmqj55eq4rKTVCN4yOZZ$puZ2xEjKnK0eaTBmS8tmwj02OaZC7tLVpkos62+$+y1ePTI3JGO3AwglOPHBJWuThFNGmgEx36V7bRbZKaewq2IZWC$lDp8jg0FKzyWe9o9Ii2xtr34rxgBl0P$aL0glfOacV8lZP5g5+udgMs7BAm5c+ub4422be2J8xoHt3qaVDByZOKnYnwNPRTItdP$f4s3mXsdytCBDipkUW$2Eaj6uVlEvm6zTpUqGKkdojpnGT3AevvqFLjFatcT4nc-OXwXNZ7Es9BOc7dZPpngOBlkN-TnqGtBesyePuFe4wa42j6xwdTPZs7ruFsXdXlAdV88ObwnBNsZv6GVemnkRyjdEsUE7sUHqwV1Ckm6PLF-xtgr82IakaI8DcBreI$hFJjOHpdqGSsdPygWmtmsKcq95HhLl4rU4yBrt9WFG-tLgllltrHZy8yEW5x5yB$ItB$N$hBSB3WuBulge7mk8CTiRI7UDsxBNbboT18LjJPDVqwJ3J3jub26ReT6ZqOFaoqxZ4Z7vuqw3d$D4tN52fuuFoh7m7egTwtiwjFhls7hb5kBrcCdEbp3GEeTpFd95F$4O8OC5skdVCcj$On5u5ee8gj3VJ2jcSObwJfTPVgipgNHlus-2h5ElhcdrjVNxVepalambq6m8+H0u9t5fC8RrM6LnyYzdrwdbeNiotym6Mlggeyd4-favAwBE2CWby5Yam6PF00VDeIv5UCI8MOK5PYNDpDTnVefHFDouYBUe0BylzTsCi$NBU$36KFsE9TT3JyXyEO4-oqXgNVhbxwaIdSnK7dxHEd3$WGgtyu7thE$biL$Bs8M+hTHPEn7Bmb34Psas-n3VpknjXFgmoKHVu$BqoR8STkw-UB2qVbbydZHTC4XmoY84vWvWUeohPThpqp3P$t$hjwMaX87P6Ng7Sy5jBN3FLe1mSgUnbeMFHu8Z7uPfaWuD-dIbCR+bXy0uuc5BOhb$S$7uft-m2qu0V2MYLV-NoH-4P3Kneb6R$7BUkjcvn702OTdhNf$SMgnjfgLBbZuKoOEGLfg4f0Ue7hym9$xc2$Ue0l8wHKk7Be-RzTVZsrJ3EjXpSe8wM6BnipLmJCZqdU7fKfxr8nj+1l1vIfB7ufBSVBbHSe+eX7$+Dvll0dz0xIrBl4mlkfI+N3+c0DHEDwgmfDYHZH9GZDfOUYi4XqW2ORClvdyddybRSHN3j$hnRLg4lHVqi$WSKFUfs1u$baotH$p4UBUmWtEjw0d3W3kxm0RcoYlyeyzTBeLWuLkcpUkZmpZ274DvT$kLfndbu7UczTtRn3j-v-kYJVCebR43NepW-avlghe5hP77H2d22YiVUHKvw90aAuWt-IZqJdaKCuxrtchLyHSkcSfSZ1KsuEbvFD15+syf9DnnqCgbU4p3PDVHvv2gsJ7HCqW$y2OyZRKWkqMBWLD$EE1KExrIowkmRfJHWlh3934ajlT7fqu6gTkqr+GHoC9Iqh$lCe-9B7EWwtD0c7LRxTo8oozLsbNZ2jU+RfhJ4Ek2fuM4RCGvGv$Pj+oHBUa7VmRj71IEP6aRFDd4eL24apwbaV2OteMa6-EEq$AlWv5ymBUV0CwqkCdCmTkJd-AKl4l45n4cAe5OWdd3g0UEOhpET3-t7dehys4Zm0KF7+INRo$TO325d+hbCy0menIpzn7KUlmwf-PLj5jmfLfBx4+aw3zLlKDk4EbHy5f18vLltSNMnkIu8N$v5B98pdBD4BOPESZIS9M1Ja2MC9EAf+rL4ry+1dSW$fVmUTxoH080pXbRqyF9WdDTVdgc9897rEyDRwoUufv1Njt7mY4P0H54wcsIkq5RipxYRpp-eIKFmWxUlBWZiT-oxd+1bTZLtCqmoKXuOGkukmVtSZkRfOkUmlVdhsm0RBSiu-8iAYwiIFbbkkg1ckRP+AEm9NoVX6knknj6Vhroc-WC1mXKl7TLekKPT2-u-u34++bR-2gqu0s3u6JD0hRV0HILoW-nFalxoW33YErAbpB5ptXN2yJXXMHMrl4fleVL991wziXxEEFVa17gkI95FM03zt4N355mXxeXh-v$iB2$P7eqkMs3G1bWyiKDVmn5UguTaWky9pB5O70ePXAm5PkUoc0Gc1yNGUWlkpFgsdrf0rtN6rdsF920aeouY3UIUpdruN6g0Sod16qF-RdWR+hNpcPmNrG7S0gaGdIKivn$yNpCm3VDepg-NsUjaY97wOmrp007pYn3rvbJuUpuJ4$XPz491YHMN4lsuV4zs0bdaIV0XsWMqf1YWudnR10Gdzsx7N+yqKih7M9d1YHhddarm3Unr8Pd4vylUdL4y-nglm2ENyJYY3bHxV4xprOeMr4ODpvgpElK2FSzrS9e4ISepxXxX21dk6su3VeXrbSkZle06WtJs67EdqexewIEEodEnp2HNHFp0l5dB6VgtUdgmaea94+0x9rIeUalWsM6BT5$cIUErRYB90GHemk5R-EIa6MNIWmYgNEIBW5i4FEhgriPkMF6MoHXc8enex6G6odJg7sg9aimhgiNHFeDW-eXrwrC4gdcgNbeaSR6-wx1BtdbeJBEa9N+bt7gf2qrYr983D0ldblEgsNJm4a6y5UmJHE8qB-4FycneGID2eZ0Top5jehIRp0xK2WleC0Akj672Pp5YIojtN9scZpRlzd1eXrFNN6llyPOEI+2+EYVWX5e5RmUY+OgNYYCe5plk6exu3IXNhknE89v2nN6Pra5JlleE+DNYrp0516mrhfWXgbmWgxoh0TBvccMkpIwaadf5gYWpcgdSW3+q6UNx3gkg06skpimkHeeqNY4q264LYnBIJUbPrrgnJ2JBe1ahaP0i+xKWHNuNiqvrq75cPeh2NeiC9KOhNKGcd5Rlyh99mOnFeyUa-WswxRkHC0y6BU8Mzdf7eCpeaIeMrn4UGPp5mgNXFI2renPpeEgsaL0$rONi7tnc-mv0xYckhMvlN0oT0LpKKrMtpccuVdVsJtDxkCNH6qeYdnhCgW7gqoKx9HThJNfkcjUzYPJxSELfmdNPJs1Bpilsm35sUqrorX646eImVmzx$6o41UI-Gce9Ic6$xTTfsduJxaboF5UgNOU6XMhZsBNbBFKNRPa0ur8uh90$PSUwafdmSKHHIlzU+BiqFUkykfgFrqrvEDiCyhPdKrResOd8hExlrbjUa9slHkzE0lolX7ZF1dc7xMri6wImw1OndykN2Y7BZ4u6n6lYlD6jgF2dn+eed2rF+dEnDkPM5MpFrhZ6t8YqyoruAl$dOlYnVZgfccUq2CN7+Hed8IjbSZCavuH75mdLIadzdd6HY5Kc4MbHa29FINDhlqZhSVhk9v2orGh0srnrncx5tYut6EY3VTpW+0NdepMd92xxHWWdmc5iVaUePvWH$jXs+9qLCyhhU0mS5O7o5lumVfW8OojdRDJfHYc9ezuMdaAxMLFNvR$dby-qDqru5YuOZ0S4DesHAuzmVmjEXheyLUfMegqoh6hnGdjgXgZ5Vm8mhNd0E4pSpNplrokxpyNmbdwWjrdd5xlmH6tdPsnv$LFg4md-4+-5xrJPs55gZrd0k-Bh3Bsc20im6T2Ni0yWAm+Zitd5HHFwlK2Uxnd14novL-5aFE+r-UOYxkZ+NnrrZd9BKKZ-Xr56HPSe52lwe-xyzb6DUTMgxIqzu3EsTSgGaSdmPXNwyPHNU7Xo0IO8DlUgg+V0JA+f67rk9EXNHbk63hpxHkx0lbaBaxYJV0zBd7Cd$PuxhuHkhMO90a0vsECI-gDwEIgYIdT7HkD35FxDPmVbtUsrz2ybgCf6ZNxUmHP$o5ByLiNd5l$5bpfPWgiEqegIdJoWsF2NahIBf5so7ddEdqhFHkcRU$dMZ-wijmFjEGk6PhuNdGDFeaInxnWhRrSmeoYiLdurc4goUoGEoAm9mprHyvrjFas6drJ8kxmbNIIarp4wYWENXNHdw7$4CrNMl9dbxxEDB2wm4cFlnEaxnY7+djm9llFHreWNy15$jUkbLSo5pyinH-7ZJkYbddC8bdSUpe$79dmOgqetrH0lxa2JyC-5ClFF67xdKyp+hMdSdZVRSI75cWbxaGCdora6kYNelL-FHl2EZn7IotcYKYgi3ZbRkMp6492tN7HKEcLrqOYY7iARlcxL45O$dFdNHKtkzIlPfqRYSkvCvltnGyjAnH+EH7poD59j76mHvRkRugmXH6qF+9yDBI$G9xgCk+ijkU696MCqfkWHAIT7H0dEADJyqYgo25Gvd0SmsHRk7Okd8mAumOh1xW0VlHjaMjwHRD$PfGF+qEv96TD$Pu6rhYqkydADEloGNrl2F4lzbDt+GAjZrWNhKWYldki4lg8VcAn$RcUr5+LbCWfxrTlGZ5DjCz6TnYU4ErSl2m6nccJ2kd1OzezH6TkFuTjHjf20nlKtJteljjBeurkT$AtBv6YJeGY5ndv7Sk-iwMMtL-2VrMaoSUrJZHJr-tjMadplJypd4xWPbHjbNLXHs4akBva5bSYdus3Ts+aa5$HmS9RDIuUmt4CIHIpmy4Oxr55geMbDzTNTZe1jjUyB9GghCJOXxxMeXlr4$g8aYjFh1miZPSedkp5cU3ygfeibTdK2eiJa6N-F7hk9YxpumJZPeCrk0jZpSGDfv4EP$52DUyamtI1tz02uxp$W8ksvtodPqh4ZYvYPrbJmMuhS3Y8ZNRUmONafNJfnr3RobvldwM$rvJU2ak5I5GpjiSiU-rFOEylw8mVZ4dN5O8HaO8m4BVBT5byYTShzqPowCEav5geAdIG68EJOcxxSrrPwI8EH0d03GglkSSCEKvHuMOG+CSPJolkkeVMX9FYNVE5GOdq6gsnj5Mr5GVZPOv-DTNYTDk$ENk9z6TnmgNdUuaH99nYBUlAviVg-HI8e3eITvOSl28rcNN07JOcxMktmC55K5vX2b$B4gK6DxC$mXHusIOlhelOEsqiTHvIEjv4E6PUbMxJSCxNWbyGYpaHER+RDcUWY2zl2kll-eqELMsZgi9ODBlOIeOlP02TITMDaEHbIMKBCa9ecl2LvDPN2TZlaN+5pVzZJO2ad0BMI6U5b1stUcae0m1Mh6Ns-ICMhiopOh82VLYcRWnTld4bNSM$bcWMC3pGbAUzWYry-CEIhaWFTV6JonbhGc7IVnBq6WlemmMhskkSFZP0ZIVXrPpogIgLutpG5qIren6je4e9OobDS-$0Lxl7Fr2$-dYHFtDFE1kqrHMy+E8-ouWGB$P8uEUtv4l9mO$f0NbJalGbqVg$A29-KO3uC+a2Mj8S+9CS3u$V9$zV2y6fhKbgVyjcXNJEHogbn30$hpXn8H4pCGVIB2pMJq2eHbkVPjKinJKDhPUH33dpM3Icex+EeVubqkqzE8VvElVOYGz90d9LYlx4L50VUzb6VKEfOn$-VRjE8-1uIsI+cwazC4c17tVubz-bJK84rTfVubNe7JEy4rTGV4nSe4WKmPAkxvsneeZiiI36CL3buCeXnKrSbCyVe5qVx$CCVKC2kP5pVUI8DmZqnV8518Vo1xsLCX6jeF8oI974ZCFVobfej3tsPfkevXOssy$0xVDTMKer2USJEVP2CRE7nMU7o9aVEbEVCnVUUX1$UEYJOubyUf0CHkbEgkZSHwXUWWux$eKK0sg4G-Y4GtpKbnU8ppLC3UE+v8uygtaCm3sBzvB5IgtaTd+xBzk2no7UW8IVM$7qxnv72WFmVnbWv3nnrKW8+WAEm06-LV1205+6BuvvbjptJT2SpybmTbF8oPTDnSBqKuunwGvqFgyTRpubzCX7NqP7Eov-$yC4$Ci-gEVKKbnCO75hLFEnKp-fpUXpi4HEqYynpVo3pbVyb-v9a9OOrHS3w$Jv7xRCAqp$4+TP3B-Ks-UoYeAcwV5dAN8YT9HC$wq+0mk60JFtMahdO5Zx8slBuy$Mj0n9slieMdqgEIy$PIedH7eVmDmpuM8AOrzvysGmSkzs5wdxgDjfSJ0dVB8YTdxvfi6IzrIOv+G97P8N$Ly+NKg+emD8E0i7ae1yGjEi3BsDr0qexNrddmwFcT25KNmlXxY2cOmzy-mUrTskeJpl4U9l8xnxwYqJWYdHaDdwJIU6pH7m24jVddmkSdslsme6peWZDScMUpmjO$4hvVZp8rh6WIwZ$NeM5UcV6VP-UDimvL3gOwMdgYDY54cqBddkNxNzddeEAHOTJsc8v-bBsXr5rmIdnyHesdqkNTJBl5yYw$Jg+GTCKP4NUmyJmxJt89cbBdm+JtCKV6pzRbrd9Xtb3mrdyrSdw+fT9G4dG4aVd7Hjd545DeWRNXRHy0lhNhU3mhJBdiD934nBAuUdsM8WH7mo$SdkWzrlRYNehORbBsIrddvpBrBIN+jrhYembRr8Xvd9L6hmsmC67XrkVwn8gFTBmgdG9or5mexkFIlPodR66Vg-l44RMTLia5mcSr1od4d8JheV5oe$RwxCNFHTEE$IgoOIEXmxWJko2v2LNlEm+H7cKCYw1dR6YyNL-MR4Ixe$4TcKsca$$d4x$$6ZWYg-dfdcXsN3In8NFfawSdM9ZpDdNXByIxdCdkd$4NrIY67q9gmVNjgPcPrxEXHU8q9HP560spPjY290vUlyrTr1Exsese6n-wMdW2frmDt-mEcDbuE1dfrc-eFl$b+BJg0sDFddmUp1FrprotKFyJhbc6JsafYRTXRzGc1850oUm1N-sddvwOgrdd"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:43:06 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff53c5d6bb51d-OSL\r\ncf-chl-out-s: a2UilaL0cwuPCyGHfI4kMQ==$1buvgWjyRoCyHVV++6SiKA==\r\nset-cookie: cf_clearance=kW4f7y0r1DMULKfaK9rGy6OqOzpNj2PClyfoor1CUuQ-1769262186-1.2.1.1-2.mxDfvtzywj6ndmp2QWFMsQqu9UFgdzIQsr.VvwoXmXaEjwPH4tOWRvmzhmSzmr5PxMp1IuDpZZxlVZceZSzY3ZuJajIzxicyonH9rmYBP6tJs1xXmHavmH18CyPGeM.oniSEYisduhvvfXQePV01YDvyfJnjMRQ.9tTZVLY5Dh8x2nDCHUrVjlFugiYu.4nt01.y16z4c6HpkgDY7DPCeySus8tuTw8i4afzBAsnQ; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=ethi.top; Expires=Sun, 24 Jan 2027 13:43:06 GMT\r\ntiming-allow-origin: https://ethi.top\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QaYbR1sb0XUQNonR9C83RDpoCW8f2sAc0FkAq27moo%2FWp%2F%2Frj%2BSB1u6RV4cJJ6VzByOUB5kj8TLqbsrhktkPiHMfkybpOiurT%2BurhO%2FAHSwrCCpqEtNvqgN8XQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1324\u0026min_rtt=0\u0026rtt_var=586\u0026sent=390\u0026recv=109\u0026lost=0\u0026retrans=2\u0026sent_bytes=417624\u0026recv_bytes=21275\u0026delivery_rate=19276675\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=24166\u0026ss_exit_bw=2808600\u0026ss_exit_reason=2\u0026cwnd=22356\u0026unsent_bytes=0\u0026cid=605ffab3a33f1411\u0026ts=2109\u0026inflight_dur=261\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T02:58:20.830441Z","times_seen":17665221,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/secureproxy?e=jscdn/getFile","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ethi.top/","date":"2026-01-24T13:43:06.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ethi.top/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://ethi.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"b3waf62ps3t6nidubhco\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:43:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oios3hpvnbcbCaL9HvLr7NNEzItOzUo5x7IAxZlVlTjabsrcp%2BtEbOmSJG2DdI0lD%2BvJIjLOi9%2FCKF7elm5nKjIA5Ta81%2BzsKjgIOmpgLLhEwg%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff5390d44b51d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6666893,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"62b2cc68e97d3bbd3e790387f49f16f3","sha1":"afa7a67d3bfe530ad109a949c6a29ca3e07229bd","sha256":"8052ca23e62762d3c223bc03874650ab1181a1be7736b6bd647219e0010b8ac8","sha512":"8995c4864fa32667a1a23cc61dfa884504a27137a00e2937165deafb8d1c8db4998aae9a9ca48c0e957a29fda61267879b5ee914b4bb084cf07934c51995a218","ssdeep":"24576:RV+YEr4VBLdqk+oRTs9psK/vth0rlOou+rTpTHUYiC:RVpEr4VBoDoRorFvL0rcou+XdUYiC","tlshash":"762523e3806ad0d33364c415fad9a9547ef3684fadda86316d0ca5f0848e429c6edec7","first_seen":"2026-01-24T13:42:08.573159Z","last_seen":"2026-01-24T17:48:05.077185Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":532,"receive":877,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethi.top/","date":"2026-01-24T13:43:06.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js? HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 24 Jan 2026 13:43:06 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1tQYBH2R8non%2FJI4duE%2FUTjZUX7vVDR%2FiIHFeFA9smvSQXdqQaGOLvJLHZg8ZpyNh9RPKk%2FmtChz8GUw7ztnZYXa%2B09fj4xtDXjFLuaZHKyBG3Ee%2FCiLJ8RsPw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncf-ray: 9c2ff53a4d54b51d-OSL\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1442\u0026min_rtt=0\u0026rtt_var=704\u0026sent=370\u0026recv=97\u0026lost=0\u0026retrans=2\u0026sent_bytes=405970\u0026recv_bytes=8306\u0026delivery_rate=19276675\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=24166\u0026ss_exit_bw=2808600\u0026ss_exit_reason=2\u0026cwnd=22356\u0026unsent_bytes=0\u0026cid=605ffab3a33f1411\u0026ts=1779\u0026inflight_dur=259\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20605,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20605), with no line terminators","md5":"d1f4a5a6e982c4fbbdc14be4fc16d300","sha1":"011bf7ecb35df8d86e8d62740bf7e204a44fdab8","sha256":"e9c5d86b9428f7f06b59b05c006bcc22ec5fc5372c47d1b1b763fd7141d98b95","sha512":"266f5f637b35670328a046b5fdcb856f51f79656066a0a6fc60d5c03e9d9fc1b2a47917abc6ac8f78a23af6d83209c1e8a185106c0bfb3ad6d236968f7618e30","ssdeep":"384:bHdi8NO2/G45aEPFsNVcOvfMcMho9Po7zW1biZEw5Ci4qr:7ASzacFgO5ho9PAzK+Kba","tlshash":"1e9285ce3cc9f05e832aa83118ab78fbb76d5ea434095d04d212dce8f9617789466e5c","first_seen":"2026-01-24T13:38:37.895287Z","last_seen":"2026-01-24T14:02:58.295833Z","times_seen":7,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"30ethe.com/","fqdn":"30ethe.com","domain":"30ethe.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:43:04.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"30ethe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 15:24:55 GMT","end":"Fri, 06 Mar 2026 16:23:49 GMT"},"fingerprint":{"sha1":"E6:E0:AD:48:4D:B8:17:8A:A0:B2:8C:A7:3D:AB:CF:A4:EC:D3:C2:17","sha256":"C2:D6:20:92:DE:F6:0C:94:91:28:D9:A1:0F:32:CC:48:A9:0F:4D:ED:98:81:D8:71:06:AE:96:79:47:A9:4A:A6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 30ethe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 24 Jan 2026 13:43:04 GMT\r\ncontent-length: 0\r\nlocation: https://30eth.eu\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p0Qvt%2BXnimJEuzCE1xy3L8XTM4AlMc5u7w5e%2FeL%2FZtTxycD9O2tlxOBLTffUfyQtdPe0Z4%2BZv06akdNIiB%2FA4OxxdAzdHpTV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9c2ff52dffaf568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4442,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T02:58:20.830441Z","times_seen":17665221,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":42,"dns":5,"connect":1,"send":0,"wait":11,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"30ethe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"30eth.eu/","fqdn":"30eth.eu","domain":"30eth.eu","tld":"eu"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:43:04.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"30eth.eu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 20:13:14 GMT","end":"Thu, 23 Apr 2026 21:11:43 GMT"},"fingerprint":{"sha1":"66:E2:BF:02:C3:B3:EB:71:04:DF:67:29:1D:66:B9:6A:18:38:13:F5","sha256":"54:EE:E0:DF:8C:D5:84:5B:29:8E:F4:F4:94:D7:B1:D9:FA:3E:33:82:A6:7E:37:50:B7:80:24:0B:56:60:EE:C8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 30eth.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 24 Jan 2026 13:43:04 GMT\r\ncontent-type: text/html\r\ncontent-length: 167\r\nlocation: https://ethi.top\r\ncache-control: max-age=3600\r\nexpires: Sat, 24 Jan 2026 14:43:04 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ytg%2BKguPxQ3w6uK2lCkWNs7LyUO0EAfY0dWl14eK4ccFj30vC%2Fhu6xwDPILOz%2BWpqaPhMl2W0BZwcsUGBUUMopcl2xv%2BoTR2IuA1ExuYPlXa9ZAfcKFac%2BLpzQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9c2ff52e79028deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=503\u0026min_rtt=423\u0026rtt_var=160\u0026sent=6\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3241\u0026recv_bytes=1241\u0026delivery_rate=6672811\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=337fbcd6cd273c9c\u0026ts=57\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4442,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T02:58:20.830441Z","times_seen":17665221,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":51,"dns":1,"connect":1,"send":0,"wait":12,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"30eth.eu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"30eth.eu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/zoom-1.6.9.js","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethi.top/","date":"2026-01-24T13:43:05.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /zoom-1.6.9.js HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:43:05 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\netag: W/\"6973c059-16737\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 87\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GYA7oKy%2BsEoHrbignVxNb4YJ0GKua%2FEUMhkrnN%2BS2v8BMAh233OGdTyq2Lg0HA4jzHdMyyGkMf4XjBT2ZAzURtazuURinQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff5339cfeb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91959,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"41f8adb97798a901d2803ee7672f9925","sha1":"54fc7b29497a5d164c8ac270d316ddee090d9496","sha256":"a1be01ced39ae2a635ec4f31ab3c8f39b918dd19145f6678b7de9a81967efb36","sha512":"297a6404e552433aeabf2e6be1eadc8f31c8b3e87f2d817b60da3326fb359614e41fd5287b0bf3b8290a8387be7a86767f20da3b4cc89290fbbc7f97bf4e91ca","ssdeep":"1536:LXeIyA9XeIyAKMuHUqVxbVJ62c2hm0DXPvoRiHAxlUVdebV1X8D5:2JnU4TJ6wjoRiHAxlUGR1M1","tlshash":"6993a6da194ad4d44e0512dec473e948e1188e63cdecf057e62edcc2b66df26868327b","first_seen":"2026-01-24T13:42:08.561716Z","last_seen":"2026-01-30T07:01:39.050902Z","times_seen":7,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/assets/C.css","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethi.top/","date":"2026-01-24T13:43:05.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /assets/C.css HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:43:05 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\netag: W/\"6973c059-85bf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 87\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rru2i%2FT78mC28hhS0gIC3mhM%2FhJ8sUfllvTCMKFI3wdPr7iYUImnsWMzsufRboOQJCbn0IvWKXQdEbj540vtCISJ1yjcfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff533ad00b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34239,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (383), with CRLF line terminators","md5":"4583fd9217bf39632ef43a05ae22da4e","sha1":"1ee1bb9382cc635753d01301b371110bd0cf1553","sha256":"d59de1c4f49d3fb143d0697e8dafb5f616ea443a6634f2c69037e0155bf9b770","sha512":"38c222e824420c59f12f3ebd56e971a4dc09b9fc474aef0f79c4b35a86fb6585566cf66299c3dca5778cb3ba61aed7a657d90d2e00a27a612be370f489670452","ssdeep":"192:Vk0zi2BPkSGw1dZk/5AVpk6pVTPDt90sBq3B2tK1pe+jikFNrT+nDrl6CDwU1Xzo:Vk0zVPh1ofHEbNJVXK","tlshash":"26f2231a850211029133eea46bf60609f7e504278f4392e97ada7255cfff67846e2fcc","first_seen":"2024-07-06T23:44:54Z","last_seen":"2026-07-11T11:55:26.734558Z","times_seen":125,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/assets/ionicons.ttf","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethi.top/","date":"2026-01-24T13:43:06.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /assets/ionicons.ttf HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/assets/ionicons.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:43:06 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 88\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iwY3XoXMr4cFi%2F5BTjjQVwVc5%2BljYmVAuWedwVPHBWe8dKfiKmKYAFAFDWe4Ff%2BtBaU0lsUbXCYW9%2BK6JQltYhxxxXDv1w%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff5376d2bb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3523,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (365), with CRLF line terminators","md5":"5ac305cf0dc9ecdb6befafab2314e6ef","sha1":"cb4028d3ad12472ee1c99464be40a9ae5ae7a9de","sha256":"1edb7b2319d4c9cf94d14be3e056156520e65cfee33ae023dd226dd0eec57e67","sha512":"24542fc4cf860f32b8b57e839b1dec34c27767c7b04705773520cc64d14d961231125804b49dc6630bebb8cb14dc646c8aca25dee12b496824cbc06c710727db","ssdeep":"","tlshash":"71710d9044d194260073c1d599619befeea152038b8ab52431fc3beb3ffbd14982749e","first_seen":"2026-01-24T13:42:08.56504Z","last_seen":"2026-01-30T07:01:39.039024Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/assets/471c09743f2ae171051f13575fa99b3a0700ca77.ttf","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethi.top/","date":"2026-01-24T13:43:06.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /assets/471c09743f2ae171051f13575fa99b3a0700ca77.ttf HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/assets/C.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:43:06 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 88\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uTDP9FPbpXBpTkflinEMTJf0OCUQ%2B9NNezEK5LMWZ5hIYuakzUBVbaGCN4n0VKRJQk0a5OQXnWBQs4FI7BYiQOfUmmBDlA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff537ad31b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3523,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (365), with CRLF line terminators","md5":"5ac305cf0dc9ecdb6befafab2314e6ef","sha1":"cb4028d3ad12472ee1c99464be40a9ae5ae7a9de","sha256":"1edb7b2319d4c9cf94d14be3e056156520e65cfee33ae023dd226dd0eec57e67","sha512":"24542fc4cf860f32b8b57e839b1dec34c27767c7b04705773520cc64d14d961231125804b49dc6630bebb8cb14dc646c8aca25dee12b496824cbc06c710727db","ssdeep":"","tlshash":"71710d9044d194260073c1d599619befeea152038b8ab52431fc3beb3ffbd14982749e","first_seen":"2026-01-24T13:42:08.56504Z","last_seen":"2026-01-30T07:01:39.039024Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/assets/favicon.ico","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethi.top/","date":"2026-01-24T13:43:06.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /assets/favicon.ico HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:43:06 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 87\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"6973c059-27343\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wo0DmlTVbtTADUadr2izd49mBuU8lyrm7z%2BW8Fmuqm4%2BWjyFns5uH%2Fa3H3cYVXhg4bfTdcQosWF1ExxKDjDv%2Bbow4fstEg%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9c2ff539dd4fb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160579,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 3258 x 3258, 8-bit/color RGBA, non-interlaced","md5":"86b356aa4636232f3e200c65d2a8b6b4","sha1":"3f415cd75e8a755a032ae16a3406c41dcc2d667a","sha256":"7af0cf14f1d0a35e2446b1ad8db4fc424c6735c4ca2ded1410f8d3ad69456913","sha512":"a2e8a2b8039b0a0f3fbd8d4a89554b313f7cab24530426eafc2d9a1b63e5c126fb419b61826894a2cc5f42f2c298151cec05d0e73aae55f419da60ad02b45a38","ssdeep":"1536:oU+xMzsj5wW0nmkkIX0fJNWuimucyv/QqBqdXi532C6yeoGBtAtFpj9j8GgG8cSx:3+az2GRnb3p/532RFK7ph8GZ2qiXK+","tlshash":"59f34beb9f2bccf9856a317f7baf0c2296d1db656395928653c1c11f7f8d0200a05a8c","first_seen":"2023-05-21T17:02:57Z","last_seen":"2026-08-01T23:40:05.680565Z","times_seen":1511,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:43:04.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:43:04 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fj4apNkVkAn8QtKsWA6pnJws3NiivETCpRjPYLZtEWcHWBejGIssAbjGTLu88a3f8pu0nOLPvnZfN%2FsRP%2BLzAsbEFjdRKyDE\"}]}\r\nage: 87\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c2ff52f1e8b75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4442,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (926), with CRLF line terminators","md5":"3272167789cc9859c1b39e5a546e9724","sha1":"97e317f1f00f76ca2b5729adc0ec655bc0b70eba","sha256":"e211bb8567459febac1c22e4c4f2eb2d800f9ecfeb1ae261a98450e3a3719c4c","sha512":"d2db1b87658f524335477ecf80ed9d1ef7280b6300c47b74cd8d651f125a8c6f6fe9e12a96adee2188ccf1720fc6971e9a1a8b774cb143f29ffa44388fdbe123","ssdeep":"48:tCL8Wfm7sRFxQMSTgpFJ7SI/FUsOf6Sx121CprRTGLrGWgUSTw2wptI8Id62:hURFxtSTgpP7SI/qyQ121cNcnx/IH","tlshash":"d89161a01891543601b3c1c66971dbeefe6152038b46b05432fc6beb3ffbd50986b89e","first_seen":"2026-01-24T13:43:36.860723Z","last_seen":"2026-01-24T13:43:36.860723Z","times_seen":1,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":46,"dns":2,"connect":4,"send":0,"wait":15,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/assets/f2fa90d264ae0063b0cda7fee6721b405dd4b866.ttf","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethi.top/","date":"2026-01-24T13:43:06.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /assets/f2fa90d264ae0063b0cda7fee6721b405dd4b866.ttf HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethi.top/assets/C.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:43:06 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 18:39:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 88\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RrMObahgTCjhBcAcQc1bjyTybFlKSHOVphXfZHku7M2CKpgwXSRtPiKupc21ObL3n79iP95KgIQXFxZNKOF4fnroWvXLdw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff5376d2ab51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3523,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (365), with CRLF line terminators","md5":"5ac305cf0dc9ecdb6befafab2314e6ef","sha1":"cb4028d3ad12472ee1c99464be40a9ae5ae7a9de","sha256":"1edb7b2319d4c9cf94d14be3e056156520e65cfee33ae023dd226dd0eec57e67","sha512":"24542fc4cf860f32b8b57e839b1dec34c27767c7b04705773520cc64d14d961231125804b49dc6630bebb8cb14dc646c8aca25dee12b496824cbc06c710727db","ssdeep":"","tlshash":"71710d9044d194260073c1d599619befeea152038b8ab52431fc3beb3ffbd14982749e","first_seen":"2026-01-24T13:42:08.56504Z","last_seen":"2026-01-30T07:01:39.039024Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethi.top/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ethi.top","domain":"ethi.top","tld":"top"},"ip":{"addr":"172.67.149.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethi.top/","date":"2026-01-24T13:43:06.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethi.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Dec 2025 18:53:19 GMT","end":"Fri, 13 Mar 2026 19:50:57 GMT"},"fingerprint":{"sha1":"7D:A7:DD:8C:55:EB:EF:6E:9A:F4:48:58:62:E0:84:2C:BC:FA:D2:9D","sha256":"30:23:19:23:73:B6:21:6D:D5:40:06:B2:A4:E5:AA:5C:23:B1:46:AE:C8:50:B5:05:5F:6E:FA:54:D2:C8:48:A5"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ethi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sat, 24 Jan 2026 13:43:06 GMT\r\npriority: u=3,i=?0\r\ncf-ray: 9c2ff538cd42b51d-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Lx02eW4uygC3G8QIlke2uS3vKru4WWC6MMcFSc7eaYzjz6uBuLQjgm%2BVD8Ve1HFryklHuEtk3lyHrXP1daB7tf%2F8cJWC%2FkGdS4TZuvAmffcc0tgRE%2F8Nrz1lqg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri, cfL4;desc=\"?proto=QUIC\u0026rtt=1288\u0026min_rtt=0\u0026rtt_var=1145\u0026sent=208\u0026recv=70\u0026lost=0\u0026retrans=1\u0026sent_bytes=221665\u0026recv_bytes=6054\u0026delivery_rate=10352056\u0026ipace=0\u0026icwnd=12000\u0026ss_exit_cwnd=24166\u0026ss_exit_bw=2808600\u0026ss_exit_reason=2\u0026cwnd=31138\u0026unsent_bytes=0\u0026cid=605ffab3a33f1411\u0026ts=1538\u0026inflight_dur=174\u0026x=55\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20605,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T02:58:20.830441Z","times_seen":17665221,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"ethi.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}