{"report_id":"538d8a3f-36dd-4a7e-b5a1-6a360994bc12","version":6,"status":"done","tags":[],"date":"2025-10-18T16:39:55Z","url":{"schema":"http","addr":"ethereumbot.app","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":0,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"ethereumbot.app/","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"title":"Ethereum ePrex Bot Official Trading App \u0026 Latest Ethereum ePrex Pro Version 24"},"submit":{"url":{"schema":"http","addr":"ethereumbot.app","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":0,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-22T16:39:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ethereumbot.app","ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-11-05","domain_rank":0,"first_seen":"2025-10-18T16:39:56.385733Z","last_seen":"2025-10-18T16:39:56.385733Z","alert_count":483,"request_count":69,"received_data":1360086,"sent_data":33890,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WPML:4.6.13","description":"WPML plugin makes it possible to build and run fully multilingual WordPress sites.","website":"https://wpml.org/","common_platform_enumeration":"","icon":"WPML.svg","categories":["WordPress plugins","Translation"]},{"name":"GeneratePress","description":"GeneratePress is a lightweight WordPress theme that focuses on speed, stability, and accessibility","website":"https://generatepress.com","common_platform_enumeration":"","icon":"generatepress.png","categories":["WordPress themes"]},{"name":"Mailcheck:2.0.16","description":"Mailcheck is a JavaScript library designed to address the issue of misspelled email addresses during user input.","website":"https://github.com/mailcheck/mailcheck","common_platform_enumeration":"","icon":"Mailcheck.png","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"GeneratePress GP Premium:2.5.0","description":"GP Premium is a premium add-on plugin for the GeneratePress WordPress theme.","website":"https://docs.generatepress.com/article/installing-gp-premium/","common_platform_enumeration":"","icon":"generatepress.png","categories":["WordPress plugins"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/fxbot-registration-form/assets/js/intlTelInput.min.js?ver=2.0.16","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d7765bae213b8cf43ba5f06960055ec","sha1":"b97311bed465062adfe3b0f20f363441be2d4881","sha256":"e889e4e37ac5bce51552e6432402bad41853158bd662f41bbc50acceaff5a1f6","sha512":"a8d97281baf2c7924da3a90de1f08bd44f2b090fd36a0930c0dac7d58b85f80463a35abfeac55205f8c7ae872c28af0a0bd04c1a6aaaf1232a4b8b446020b9df","ssdeep":"768:0sqD7GzOoS+D45YMJR3QWG6UdC8OxgtmKg3vTpzaDvCYHJ:CfHQWodCjgtmKgNzazCU","tlshash":"78d2099973551237a89aa0a1687f16472ebf30015a84cc9cb87ecdcc1feced9a1b5734","size":29500,"data":"","first_seen":"2023-05-02T01:14:21Z","last_seen":"2026-07-22T00:05:44.087474Z","times_seen":619,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"125da0749932d9ddfa3767638383abf9","sha1":"69475f56fbfaf7859ebad33ac1be371b36b200cc","sha256":"e7f3fe59be4fbb3d95650bb24f407f1f792eba6eefec0d970d5d7b2bde669b64","sha512":"b79295099f7b09d8fb8a03a8f1e8664814cc5a73c07c695a49e623b15e1bc153769cecba4b9e37f39d74b246962cf5aa16364df982a34426163e5c2c4c768f18","ssdeep":"","tlshash":"33c012281082183bee0232451504170724704d8814074d8d02d5dc00cde1c094042e06","size":177,"data":"","first_seen":"2023-03-07T12:02:32Z","last_seen":"2026-07-09T08:35:05.548161Z","times_seen":4261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"f25b4bd043a21d3c0b789db7c0dcb4ef","sha1":"41689d5a09ef28debdf3b0dad39d8ae3601d014c","sha256":"6ae447e40363a7e50cf54c15d7da56196dfe7b6d1c9f53d5498b2744410d6ab1","sha512":"09c7960815a282a0eacb94254dc8532d2cf761ff1deab9b9c658032e6d3192f33428e758e3848b3e942e304b55180ff91301d350001578331fb62e2b9da727d3","ssdeep":"","tlshash":"21b0121d06024991c0d612ba1542020001fe901d9039c76cbb3c439c3f421ae6fd18a7","size":104,"data":"","first_seen":"2023-10-22T16:22:44Z","last_seen":"2026-06-06T05:06:17.119651Z","times_seen":721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?ver=4.6.13","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6a55456af4776c733018888483aba22","sha1":"297b53f8538ba3b59d2028f16de4e14ec90337ce","sha256":"20be9b3c63a01d921697a0ef1c1596f647678498eefe6dc508e2363be25277f8","sha512":"dbaf5d9a1b0f5d4195d3b9c62650af622d66f1b68bfec20ce79e84185c558f91aeeb6718452e1196bf783bb3ca7a0574223726fc4d80076ea9ad115f1fdd1eab","ssdeep":"","tlshash":"f3d017183bdc452c0925731237fee158392535493482988e8384b47419e8a63eca8877","size":271,"data":"","first_seen":"2023-08-11T05:46:56Z","last_seen":"2026-07-25T06:05:25.995666Z","times_seen":6969,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4f135381a5bfe5f26c6edd6e5a4cdc3","sha1":"1fb86fcacb97097d90f778ff6936f67775099907","sha256":"adaaaedf845bb17a7eea7912da20005b43b6b08b15e2dba95ceb61533edc4fb7","sha512":"2d3d71e698a65d8d724805790f1c7ec5b6462e9aa49dc512423acebd5e4adfb6549bb3c5c82f5c0e40fe09899a9e23ae46bbded7715ce209a93b155a68901426","ssdeep":"","tlshash":"61f0671d05230fe1c8e356fd6bda2515417b619df839a52a721043443f9665c33a2fc7","size":656,"data":"","first_seen":"2025-10-18T16:36:59.903469Z","last_seen":"2025-10-27T22:29:22.778076Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/fxbot-registration-form/assets/js/mailcheck.min.js?ver=2.0.16","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4950423c548a646372ae58f7bbe67d1f","sha1":"f54943150a9cc3db37bba49e9abb8f1206b8b12b","sha256":"ab69f8053e420d7f3c043b55a1bfebd9981ccf92c21b4fd823031ab51967323a","sha512":"d5a096ca163c2767e6740c62681b3b6b0ac6f0e8bf2dc782beb956f81272d5ff49eb05d45231ab2e932a1c49602cca77a6be1f7c645b0f14d74111a4605e7d99","ssdeep":"","tlshash":"cf814051a2a12ca599b060dd388fb445a47aec252b8cecf8f654aca15e3471070fbced","size":4015,"data":"","first_seen":"2023-03-07T12:02:36Z","last_seen":"2026-07-22T00:05:44.065566Z","times_seen":691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/fxbot-registration-form/assets/js/utils.min.js?ver=2.0.16","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"12855fe710661551c42e95a9c9290600","sha1":"72c56f9f3584405934289059ccd5ed678ddcb00c","sha256":"df0797876b146528f534dc356f34fd6408384ca47baae6ecdfcdf0463294f142","sha512":"70cfb09e51c3e5423473cd6332be0e45ce739f57d2356da4e6abbcec6402f98385e29809d91c8294fd5fbd9662c8cd3c79e577da01d736fc1ee08341a3c3001c","ssdeep":"3072:yxJ0MDz3ojrs3OwPl0n04Xl31AfO+2x1+w+Whnz6RNC7sSUrVjHoLOTpCAtQ594F:yxJRDY9lx1+w+WwugV","tlshash":"8c34ceebda3c9736a1d97b35968eb3cd5a8cbc93c848567826c3b54f53788e0706c205","size":245226,"data":"","first_seen":"2023-03-08T11:47:53Z","last_seen":"2026-07-22T00:05:44.085859Z","times_seen":672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/fxbot-registration-form/assets/js/registration-form.js?ver=2.0.16","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d7fd4ec2c26288cf2ad585f0d4e24a0","sha1":"efc14e1f1f8b40d6058770ebe879a1538acbd295","sha256":"22a2e54ee3cc97ff26fa83366ed627ff8480ca19fa13145e0ab4180a17e9e794","sha512":"0abc0fc684326c7e2196731d0b56bfff916807d415fe16c5ff0ee3e0fc1ace4f1df8223dc1f31f83539997a4b302ab3c64ff6fecb2dbd3c49f04935c043db34d","ssdeep":"384:FWhSG/oUJKPzzUSQHr1m66gH6FTmnyOsT+uICSpHrn7n+y5pOF/hCOCgLz2nfuEO:IfJKPz6m0eT+uI7p/ItYC4KiCZoeBL","tlshash":"d4333f595d0500f25a736bfebfea5206fbb94067684082417e6ca6801fb4c8263e5fed","size":54132,"data":"","first_seen":"2025-01-08T10:56:37.377771Z","last_seen":"2026-07-01T00:07:48.400344Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/fxbot-registration-form/assets/js/optin-form.js?ver=2.0.16","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"696c51dcd9631f02d28d39fadefdd67d","sha1":"11fc826e34f795901c8a7ec0f7ef4831ad2b6022","sha256":"52937687c44d798fb8cd512609692b035f37fdbce19e7eddb747f0c0f48e32d2","sha512":"81318958054db7112264af3f1b9fe9e86e574afecb6ef6d5518f678327643bf43ad3e19c45ede7ed5f88425bb072bfebe25541fdebbb0a25e5a7ce7e7798f942","ssdeep":"384:cWhSGmTKVbNmP6nd/lRMNRHVOCgLd5pOF/hC/s2nfukVx2T+28PKqxnYClSWq1Ca:l+smy/lmqJhYCwaZoRL","tlshash":"bed24118591500e11a7377feefda6246fbb951b768408241be6ca6842fb0c4123f6fec","size":30383,"data":"","first_seen":"2025-01-08T10:56:37.379199Z","last_seen":"2026-07-01T00:07:48.417396Z","times_seen":303,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b78b28b396646badfc6017235ee4be9","sha1":"18103240bf0cb760cdf7febc628b56b8fca44319","sha256":"215f517010a20f2f4c55d34dd3c574568bd0fb83662f0b915ddb6561f97c3904","sha512":"6b82e20e99e8a57178afd50be19a2d5ecbf7062879808d851b3b5aa2b0a8a629ef06413f19dc9a6cd7a22d23e5d67e133fb70ff8030e0f6d6a494260d0085739","ssdeep":"","tlshash":"a9d0123a6b562b320997a7a266efb7413b6306b564c105135c75c8892f34dc981754ca","size":260,"data":"","first_seen":"2023-03-07T01:03:19Z","last_seen":"2026-07-25T21:15:01.902649Z","times_seen":8871,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/turn-rank-math-faq-block-to-accordion/assets/js/RMFA-JS.min.js?ver=1.1.0","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"443de93866d65f762354c9446ad8b366","sha1":"19e310996d2549b6ad99f17dc800799571472aec","sha256":"90a82d38c851758d27264c3808c81e7e52e4b04e03f5adb29e0e5df5021fa4b1","sha512":"f1dde58ab3c4773a4cb2d99a75dc8baef2c5bb80ef74d8ce342e381165a56fa2605a3a3920ae37ef86d837b75fbcf1882de7360b9ab389fef22bce51fa0b9fee","ssdeep":"","tlshash":"54218fc0b44c13f9127f73cab4b3da20345b9025f7b136095f0264b92c6a5a4e73a957","size":1295,"data":"","first_seen":"2023-03-07T13:18:58Z","last_seen":"2026-07-24T18:54:20.587729Z","times_seen":771,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/gp-premium/general/js/smooth-scroll.min.js?ver=2.5.0","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca1e68e1ae2dbb2206d21481576bbb45","sha1":"eecac929830764dba8b0734241090f2403671fa8","sha256":"ce43697d26defc72fa5aa7e3d7f1296cd19ba9a67cad0e2557aacc7702454f4d","sha512":"1544aed0f5def1ef73206a17cf7f540ad8b4d58a5e9b84d0c16639d8a4500b534c940184c310ecc9d4d458edbfa933ed1d0f542c7dc2ee67446029c7e48b21cd","ssdeep":"96:99BBG3KIUhniQscmPS8qeBxJmSjfijAzpFnIFW6fI2WsnSSORdgAL:NB7p6dmiFN61WsnSSqn","tlshash":"5ae1a6ea35607473caeb42b6a22f534677301163344b2054a36ddcdc39b5aa6835bfb8","size":6883,"data":"","first_seen":"2023-11-19T10:25:22Z","last_seen":"2026-07-25T15:59:37.475271Z","times_seen":2867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-26T00:23:29.970816Z","times_seen":990819,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"c283c10cafda44e4a94ffb6bc22b6f8d","sha1":"df57487aa55410646e6e4b3ea60fd831a834611d","sha256":"5d11e2cdf5eb39e58b6fe1c53ba8f682c0c7e16ada10db3f774fee62d5447e94","sha512":"df1d84b829afc4a0be8dcf16ef6b6df7b33d0ff87d4f082303f5a7b2a7982f584bffa38c747df3d1096c6978aed85af1b2937c05b0d957e87cab07e1dca0100c","ssdeep":"","tlshash":"a4d023974c9872e097c503963134d7fe3c745559e940c9ca3e1d1944033dfde4846c44","size":218,"data":"","first_seen":"2025-10-18T16:40:00.675138Z","last_seen":"2025-10-18T16:40:00.675138Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/gp-premium/menu-plus/functions/js/offside.min.js?ver=2.5.0","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c8d926d887909904dab4316508bacc6","sha1":"455db3d80b61fefab3797bacd140f95229fa7518","sha256":"50fe1014e82dd9acea2f5b26061c8f135cb11ea0aa5d5ad5985e6b265b7f50a8","sha512":"8281e2ec7632f785570764ece44bfdb308fde7664af663669feb6c72c496ccc44ced9b5b5f7cfd1d55313aefa4ff1e19d9aad733fa75284a53523604ee9f070f","ssdeep":"192:cVABvuAZzR3rNjHOYzh2AWGVpPK5NBiNizDN:IARRnrNjuYzh2AWGVpPK5WQ/N","tlshash":"b0e187647160223500bb16db31ffd2c936f558deac16901538eace8d2db99cb12a1fe9","size":6795,"data":"","first_seen":"2023-03-29T23:12:02Z","last_seen":"2026-07-25T23:56:44.799954Z","times_seen":4258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/themes/generatepress/assets/js/back-to-top.min.js?ver=3.5.1","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fc35421139ef9851bc72d3edb90cfba","sha1":"0091cadf005c865d7c4ef093fac9d35566fd1e48","sha256":"3310986e26439bd35318188bd35b0c326bd3334e6699ca0469fd4f0b7d497098","sha512":"0fda88fda5b8a67c7b750712da3543e4572cb89565284cf1cbffb1ec0927f21626ff78d6fe9fa4ac13ce9f780ddc0c36ca46fedeb1c2e7f754573d7acddc7432","ssdeep":"","tlshash":"0401d0fd1190553514fb8695739fbf41393120a686039411812ccca0f5a8ce7f912bc7","size":737,"data":"","first_seen":"2024-09-02T00:59:07Z","last_seen":"2026-07-25T22:10:29.824868Z","times_seen":5241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"36b6264c7cef7454ab66f28e63fc0b1a","sha1":"47a2ff8432203e340aa1b1d2596bdb461007ab54","sha256":"000e580fb5f0233300ffd016893fa214ae25f735fc3655ab18a1037a6823d815","sha512":"d58defa78dea0e8ddc326c077c2d1abbd48db733a5420b13f08f8a5786d99ff94172819c3aa0ef9db557e974b0fb76016bd9e25a2e572055ac8dc205534c2f4f","ssdeep":"","tlshash":"b38000a382082c082300b00e2008000028308000a0808a8020888b283c0820cc0088c8","size":32,"data":"","first_seen":"2023-03-07T12:03:46Z","last_seen":"2026-07-05T20:59:59.041017Z","times_seen":1670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"26909cfee4ad69861654476cc84ae9a5","sha1":"71f267bfb81a8ea66aa934dd29833965d7df1c88","sha256":"84f28dd8d2ffccd5f1667989378ef32f97e118058f8306bf4cdff127698e7468","sha512":"eeab0542d3bf14f67c87671615e886afe659decd40b0fab964b6e55a21f48da57eacf9b56e31a1c8bc7502cae3eaa4e378a372607c861cf5d2a20a98bc3c0e80","ssdeep":"","tlshash":"f1b0120a901b449200ec1306c6863d577730004240216c50cae9de144488f3539ef160","size":105,"data":"","first_seen":"2023-12-29T10:54:45Z","last_seen":"2026-06-23T23:54:37.936989Z","times_seen":1589,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"e891393f0be3a6ffaa3923b307180e7e","sha1":"bc0a7332b9846a5762a71b9b9811c1a8b19df194","sha256":"2d1778345d3607ceb641cc5f21b0a2c045fa70052361ac91a17c39b2c9d96f71","sha512":"12674ec69eecfa043bcf9ee8529e5ec274a1bb55e068a2ae64a91d6362997f7e532325c77785b1bc980f42592cadbed487549bae0a5298077cb1cf9c02ff589f","ssdeep":"","tlshash":"eeb09b6c51439a33c19266445384d423e07509dc420d881ff195d0dc6945da31ccd457","size":127,"data":"","first_seen":"2023-03-07T01:03:19Z","last_seen":"2026-07-03T00:18:18.079429Z","times_seen":4520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"bec9c700df243a74235f459eeaa0d9cb","sha1":"47c8b6aff8817c560284ab7f629d1fb9903a4391","sha256":"b419ddf3962f2f32b55824f2bc29e97b342f8df820c6913c9f58e91cb1608df8","sha512":"a07708e0fa26478c89c7e1e0a70398aaf01c3df35e81c8c61bd3558190feea7f9eb5641a7c25cd695a7973fd3b49b2ded69c4666e4dedb31161cf5df4ec82805","ssdeep":"","tlshash":"cc900471d405443145d74d0035c04014f5fcd414c5cfc511fdd5d545d351c00447d140","size":46,"data":"","first_seen":"2023-03-07T01:07:33Z","last_seen":"2026-07-18T23:41:49.418193Z","times_seen":2005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-26T00:22:50.316973Z","times_seen":908609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.5.1","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"67148b2ff82038d0faf6385f182c5644","sha1":"7452d643e468caf6db8ecf07618f1cb7ff3f7651","sha256":"5af760e4297b064a2150dcd5f63d748a06dfa8b618c9e9d43a87c4ac74fa3974","sha512":"24cb8e3c4f17abc7cf1ba96407ac1eda4e6c5d7c669ac213024a9b428e19cef574cefdb06c4dd28c013f1f8d3c775fb8f98c5a15c142783ba0f25b46f0c6e7ad","ssdeep":"192:iQqHlWQZgROnqWgpkgJMhqDi92FY+alT/fnGtxTbvm:bqHngROnvgJUqDi9cNYTnGvTbvm","tlshash":"6ee112fa964412bb04ef29ca74e6e5c07b7568fdea0184302579c84d1fe8dc202e6bf5","size":7333,"data":"","first_seen":"2024-08-31T11:00:29Z","last_seen":"2026-07-25T23:56:44.800631Z","times_seen":18661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/seo-by-rank-math-pro/includes/modules/schema/assets/css/rank-math-snippet.css?ver=3.0.72","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/seo-by-rank-math-pro/includes/modules/schema/assets/css/rank-math-snippet.css?ver=3.0.72 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-187\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":391,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (389), with CRLF line terminators","md5":"61574adad1f1e073755a00c621194dc0","sha1":"b73acecc425b3211223c766d41f9b5982d72b157","sha256":"8e39198146f333a9a0322558905acc314a40aae39c05b4e2b03837a14f61bcd2","sha512":"35eec98c2d177e4f3f875ee483b50078ea143712ae3384ce0aec56e7b8f91ce14eea144891e47e351309b40756afbd2f15af0fd17158be40bdbf92490c84d9e9","ssdeep":"","tlshash":"dce0d80578346ebcdd53561808d7c1f135155d6a879f95e78c06183dca3f385e32536c","first_seen":"2025-06-14T10:11:26.055763Z","last_seen":"2026-06-10T23:39:39.31013Z","times_seen":39,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/gp-premium/menu-plus/functions/js/offside.min.js?ver=2.5.0","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/gp-premium/menu-plus/functions/js/offside.min.js?ver=2.5.0 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-1a8b\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6795,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6795), with no line terminators","md5":"2c8d926d887909904dab4316508bacc6","sha1":"455db3d80b61fefab3797bacd140f95229fa7518","sha256":"50fe1014e82dd9acea2f5b26061c8f135cb11ea0aa5d5ad5985e6b265b7f50a8","sha512":"8281e2ec7632f785570764ece44bfdb308fde7664af663669feb6c72c496ccc44ced9b5b5f7cfd1d55313aefa4ff1e19d9aad733fa75284a53523604ee9f070f","ssdeep":"192:cVABvuAZzR3rNjHOYzh2AWGVpPK5NBiNizDN:IARRnrNjuYzh2AWGVpPK5WQ/N","tlshash":"b0e187647160223500bb16db31ffd2c936f558deac16901538eace8d2db99cb12a1fe9","first_seen":"2023-03-29T23:12:02Z","last_seen":"2026-07-25T23:56:44.799954Z","times_seen":4258,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":77,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/uploads/2024/02/cropped-Favicon-32x32.png","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/uploads/2024/02/cropped-Favicon-32x32.png HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nCookie: wp-wpml_current_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 1459\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nETag: \"671e3766-5b3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1459,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"c504d2feed30ff285a04d99d20d1175c","sha1":"1043b9fb35d364da2c95576e47a19e18b0260751","sha256":"012db610f277a63470bdc75860841b8b65ad85c8a62e5bfc3e46f502c624bb7f","sha512":"b0902054c3064ed30908f497edc762f88d16756ef72d23dbd870714ef733be3492219deab1504cd48cd29b3328b004a85c6c67dea1f0ca82742da0c55233d1cd","ssdeep":"","tlshash":"ed31c75e2179782ec003e0d213a86ac9efbe30d64aa0153a718de56615c0d986b5cfae","first_seen":"2025-10-18T16:31:10.436048Z","last_seen":"2026-06-06T10:26:14.937838Z","times_seen":19,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/ja.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/ja.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-165\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":357,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b072ff9b575b2c9db1f40db4a8603ea1","sha1":"56c055fa39d04fdfbf8ca59c3186b982e301bbf2","sha256":"3cff261749f98b839faf4cbd34b7748daf28ed5d9377f3cb9929d6cc506665a2","sha512":"9a42eab5c883210142df99507c2cb0d4a2b8bba9cc91d87440039f0cb340d010b5137066ae28269ceb59e23b5901528506b4f3af4b49eec1ab405f1629a76a4a","ssdeep":"","tlshash":"a0e0c060a0ecc94c4e098b640b7c70d041a670dd268b01fc748c2668e98ebc77811a7c","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-24T04:48:10.50563Z","times_seen":2596,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":199,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/turn-rank-math-faq-block-to-accordion/assets/js/RMFA-JS.min.js?ver=1.1.0","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/turn-rank-math-faq-block-to-accordion/assets/js/RMFA-JS.min.js?ver=1.1.0 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-50f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1295,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1295), with no line terminators","md5":"443de93866d65f762354c9446ad8b366","sha1":"19e310996d2549b6ad99f17dc800799571472aec","sha256":"90a82d38c851758d27264c3808c81e7e52e4b04e03f5adb29e0e5df5021fa4b1","sha512":"f1dde58ab3c4773a4cb2d99a75dc8baef2c5bb80ef74d8ce342e381165a56fa2605a3a3920ae37ef86d837b75fbcf1882de7360b9ab389fef22bce51fa0b9fee","ssdeep":"","tlshash":"54218fc0b44c13f9127f73cab4b3da20345b9025f7b136095f0264b92c6a5a4e73a957","first_seen":"2023-03-07T13:18:58Z","last_seen":"2026-07-24T18:54:20.587729Z","times_seen":771,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/uploads/2024/02/002.jpeg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/uploads/2024/02/002.jpeg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 101894\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nETag: \"671e3766-18e06\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101894,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 600x600, components 3","md5":"6995da69ae251840d8b9154116a2d02e","sha1":"7687c362a7bd67908c5b7af87b9f9ca5aa34e656","sha256":"4b647cc4259b47009feaab695a3eb81c4bf2c97657e19dd81ba08555b7f0544e","sha512":"12c9ddd321d8523068b980ca704ff7388c92aec32ccccb72c30598f8cddb1d1ef85dd8e1c1dcd0bf7460ac6a999e511d330d80eaf7f0617f7699658c112719f7","ssdeep":"3072:UUiUUGJ5o6Rfe1Fh6PGKOiZAVzo21DZ9K6e:UUiUUQ5o6RgIGiyoYDZ9te","tlshash":"f0a302e60b8a26f7a9d15278f152636823c5b2b5fdb452ed817d23ecedf81e41688108","first_seen":"2025-10-18T16:31:10.450579Z","last_seen":"2026-06-06T10:26:14.936566Z","times_seen":16,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":326,"dns":0,"connect":0,"send":0,"wait":38,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/uploads/2024/02/cropped-Favicon-192x192.png","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/uploads/2024/02/cropped-Favicon-192x192.png HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nCookie: wp-wpml_current_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 10310\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nETag: \"671e3766-2846\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10310,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"b29056f28b1b3bd69d72220fea45a9a6","sha1":"5eac148ed837b52c7f216dffbc1c33c44e86a35a","sha256":"f61c5ab76667325d931f8b6826c2e13080e64a6b2737efefe1f30d6fef04a9ce","sha512":"c0f558be354e3b3d4e964aec06893d0f48f7eebffd93b7c5beb50382359da2063a89dbde2142e1d4d6a5918e5926b40f77977f047a3e8f899db0fcb888731ae0","ssdeep":"192:vsahC1/pdCswJGno/V8Ie5z59WAy5tdDtHlj+a1U5dmmYzQ4XOuDejP2:LMxs90nOB4l9WFJdl91U59V4XOtC","tlshash":"ec22b045cbffc3733978147575e0a09a50daa202d21058d86d277fb4e4aa7b11f3a15f","first_seen":"2025-10-18T16:31:10.256585Z","last_seen":"2026-06-06T10:26:14.946285Z","times_seen":19,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/fxbot-registration-form/assets/js/utils.min.js?ver=2.0.16","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/js/utils.min.js?ver=2.0.16 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-3bdea\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":245226,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1654)","md5":"12855fe710661551c42e95a9c9290600","sha1":"72c56f9f3584405934289059ccd5ed678ddcb00c","sha256":"df0797876b146528f534dc356f34fd6408384ca47baae6ecdfcdf0463294f142","sha512":"70cfb09e51c3e5423473cd6332be0e45ce739f57d2356da4e6abbcec6402f98385e29809d91c8294fd5fbd9662c8cd3c79e577da01d736fc1ee08341a3c3001c","ssdeep":"3072:yxJ0MDz3ojrs3OwPl0n04Xl31AfO+2x1+w+Whnz6RNC7sSUrVjHoLOTpCAtQ594F:yxJRDY9lx1+w+WwugV","tlshash":"8c34ceebda3c9736a1d97b35968eb3cd5a8cbc93c848567826c3b54f53788e0706c205","first_seen":"2023-03-08T11:47:53Z","last_seen":"2026-07-22T00:05:44.085859Z","times_seen":672,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":99,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/bg.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/bg.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-14f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":335,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fbae98f9ecb2c7a0d7bbadd4cda16c54","sha1":"0799313019185c31326cca8c6af85520f0ef05db","sha256":"a5531f87b36975a82c97748b5405c1f3d6d1fa7fa3f78843aea4b67903b76e7b","sha512":"9248648b0e11d1ae8bcc0837db0cb9399a0c4f684cd99bdb44672d1dc765cb0f9ebc66e224330618bc268772f03734c64029ec76b7687bbed8af7175960dc805","ssdeep":"","tlshash":"dbe02644e0e88e0b8a2143a88efc71c680a230cd12cc04ed72842928fd0d3df6885a96","first_seen":"2023-05-09T23:58:22Z","last_seen":"2026-07-19T10:41:12.350692Z","times_seen":568,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/fxbot-registration-form/assets/images/regSuccess.png","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/images/regSuccess.png HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 4251\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nETag: \"671e3766-109b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"4cd1d4874ebef5120e63efa1c66278dc","sha1":"3648f90f2ccc2e8ded42794dc0c0a363fc945527","sha256":"caae22c3dadc5664eff10a1e3d0a5959bfea87d28f52f03ca4f3d7ebf560e5de","sha512":"783589d822d0061de8cba5d2f0ee536652658ed258c3c280e7f5c6185b27afd27341ead4b9ea332f7de2542d1199cf4c48e45a3dab23989f1bcaac947c85f691","ssdeep":"96:MV1y7p9Ua3aCNlllyBf33Pf3h03Pf3+238J+tjzrs2f4Qk5O5DN33a4t4dUNxWcE:FAOaCNlllyBn+W23W+tjXs2f4X5O5DNI","tlshash":"2291c6ac40ecd767e9430d7497fa612edf6eeab31474c123ad94b6fa8b54240d012536","first_seen":"2023-04-30T21:53:58Z","last_seen":"2026-07-22T00:05:44.078161Z","times_seen":792,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":377,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.5.1","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.5.1 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-1ca5\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7333,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7333), with no line terminators","md5":"67148b2ff82038d0faf6385f182c5644","sha1":"7452d643e468caf6db8ecf07618f1cb7ff3f7651","sha256":"5af760e4297b064a2150dcd5f63d748a06dfa8b618c9e9d43a87c4ac74fa3974","sha512":"24cb8e3c4f17abc7cf1ba96407ac1eda4e6c5d7c669ac213024a9b428e19cef574cefdb06c4dd28c013f1f8d3c775fb8f98c5a15c142783ba0f25b46f0c6e7ad","ssdeep":"192:iQqHlWQZgROnqWgpkgJMhqDi92FY+alT/fnGtxTbvm:bqHngROnvgJUqDi9cNYTnGvTbvm","tlshash":"6ee112fa964412bb04ef29ca74e6e5c07b7568fdea0184302579c84d1fe8dc202e6bf5","first_seen":"2024-08-31T11:00:29Z","last_seen":"2026-07-25T23:56:44.800631Z","times_seen":18661,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/fxbot-registration-form/assets/images/flags.png","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:34.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/images/flags.png HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/wp-content/plugins/fxbot-registration-form/assets/css/intlTelInput.min.css?ver=2.0.16\r\nCookie: wp-wpml_current_language=en; SERVERID=w01-8888\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 70857\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nETag: \"671e3766-114c9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced","md5":"416250f60d785a2e02f17e054d2e4e44","sha1":"21572c9751e5a3dc20395befa0fcb349c32c4811","sha256":"0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55","sha512":"cf1e7acf47464f00d206e9149475e22b8ea5a31727fa16344cd151384d850b83ece5e9abe4ac62861dba0dc3d3410955611d94665b60e2faa0c3d7a3d7c88404","ssdeep":"1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr","tlshash":"9763019797adf1d82a92274bef801109ae6c2b3d5d7c1da372cf1d532ae12c306c8586","first_seen":"2023-04-05T15:31:12Z","last_seen":"2026-07-26T00:07:21.59341Z","times_seen":25157,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css?ver=1.5.5","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/wpml-cms-nav/res/css/cms-navigation-base.css?ver=1.5.5 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-774\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1908,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1908), with no line terminators","md5":"4b975a8395bd0a0410b576647ba50906","sha1":"2e965a1cbe96545cfe0ea8495e8b48d5f7e0cb17","sha256":"024f1241cafafa2e444fed0beee0ec230befac822d6f95ac4a3933ba2621dfec","sha512":"2dd5a6583415941b717cb42d22049e7e75e27e5537648355bc2697240d5bf940e2a7acbbce371bb0c6376a26ce6d9d548317af63b1f2c222fd17ed07e89ea727","ssdeep":"","tlshash":"5b416df45912246c4836a0aef98df1f6bd4c6c4b716303dce476c916938c337428bd98","first_seen":"2023-05-08T20:12:30Z","last_seen":"2026-07-01T00:07:48.434243Z","times_seen":209,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/tr.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/tr.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-208\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":520,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7af14a6fd5253f05724502662d478fac","sha1":"df6f03167492046dd2f02e3e005e66201f80ceb9","sha256":"f101fe5cf7c2fe25bb1d2c7efcacb8acb52c90561497576f2f16be8a5d628315","sha512":"a1b4e0fca3d92adf4b6bd1473bfaceb5d1877c682378f84bd862e54927c9bea34b0781cb4e1cc5d44ce637887ac93a30465496e63b94169ac15cd1c155396802","ssdeep":"","tlshash":"c2f0c0d91a78c4ddbf4647314d3db0d92639209f399900b830c96529ea6a24b2401904","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-07-24T04:48:10.513045Z","times_seen":5438,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":327,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/uploads/2024/02/pattern-dark.jpeg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/uploads/2024/02/pattern-dark.jpeg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 79458\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nETag: \"671e3766-13662\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79458,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x627, components 3","md5":"eb453c1093e1576317d0448a3a4d7ae2","sha1":"832408a87a2b7560f4a46cc6487374bdfb7a2cdc","sha256":"460cbf09d0f0bd160506655b3dc72052519a6d302d95419413e84b6e3fc850ae","sha512":"4863b8963657e286270e9e635af31f6607a90062f5fce09fcfa277df1fd8640315cf5362a8cc444a0fc752645a7cab9af12259f0385befa286a38edd94529e98","ssdeep":"1536:/QyRkATX6H7+hBAm9Rs7pxj9NXEi74Yklnqj750vP3bpm2Xp1fg:/QyiAjmAqMSp9vcvno5errfg","tlshash":"727301b27731e7708705c778a034482b30a2177c5c5d629c63b7aaa70e75bb95fe428a","first_seen":"2024-01-28T22:10:39Z","last_seen":"2026-04-18T23:56:36.462594Z","times_seen":18,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":125,"dns":0,"connect":0,"send":0,"wait":64,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/uploads/2024/02/pattern.png","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/uploads/2024/02/pattern.png HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 76142\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nETag: \"671e3766-1296e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76142,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 800, 8-bit/color RGB, non-interlaced","md5":"e4b0f248598139c6d31cc3b5e2e27f27","sha1":"9785250fdf2e65afd9da363c73b8cb5ac167fbe6","sha256":"54356510563fab84968084ae0de35f97f6c3523074322d92d0d2f3ce4be5bc0f","sha512":"6877b0ae5fbfa8d2ce1c4ec0b1957c987762f52444589f6a6cb2d69206e4ecc3e50d42d97dd66553485eec2c3315f1fb89425bdcb240b2fbbf82942a5af7a3b3","ssdeep":"1536:ioiAWqUH8kxn7ERW/OQvUBNYPZvVgV+syZKGZbKkAZbrRTxneuX:nY84IW/hUBNQaV+9ZXZb2RzX","tlshash":"e673dfaa878c015c7e040ebbad7a74eb24c7828549ef21577c9b67708639f6c04f8736","first_seen":"2024-01-28T22:10:38Z","last_seen":"2026-06-23T09:57:15.331398Z","times_seen":18,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":147,"dns":0,"connect":0,"send":0,"wait":27,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/fxbot-registration-form/assets/vocabulary/en.json","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/vocabulary/en.json HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nCookie: wp-wpml_current_language=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-867\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2151,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"974c06c22e80fbf8fc59a64946494b43","sha1":"6f25ac4d1108e81458e684ff3cd2fdbd8ac32786","sha256":"1e4455cdccea0ee7e1e5d9e13c5b2be8b964c3012341201f22092952036489a7","sha512":"d8374ac71bcba7cca5bc8707297280283110adb04814c30e369d0e7a1c3c3a1a77487bb4b7090aa485ead581de29abdc3b94d987784caf37b580d158e2f7f814","ssdeep":"","tlshash":"0a41e115ca058d6b0a81009ab8a9365773a5509b8d9d381dbb28136e0fded6f22772bc","first_seen":"2024-01-29T05:49:51Z","last_seen":"2026-07-18T19:48:33.892895Z","times_seen":401,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/gp-premium/menu-plus/functions/css/offside.min.css?ver=2.5.0","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/gp-premium/menu-plus/functions/css/offside.min.css?ver=2.5.0 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-170d\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5901,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5901), with no line terminators","md5":"620bdc2e262641f4cee95c34de331140","sha1":"588be9ecfa8899889f324f17b4fe3f0828acd478","sha256":"ff95720758215ef9f328fda9e5b00e7c64421bcc8c0439e38201492e0fa78616","sha512":"56620f620d1dfd70b978a2368252f79149030ea50b1160d8eea2fb1be91efea00b1a04fcc4370312e4ae4ae440410ef0bd8e1f2c6eaae55295e564d1dc274ca1","ssdeep":"48:C6DWCYieBSBvVi+dhQCRl6t3i4sNoPopQWxoZob+VNnroIx2rw8nvLnYrrz4SqXm:BfdNLGSeQSXmKo0rzQeFL9CzfPvg9","tlshash":"6ec1405191e14268c867c22316ffc1e413fedd1c9f6be655bdcb83058c4aa1a139aee8","first_seen":"2023-12-29T10:54:46Z","last_seen":"2026-07-25T23:56:44.811407Z","times_seen":3764,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/fxbot-registration-form/assets/js/mailcheck.min.js?ver=2.0.16","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/js/mailcheck.min.js?ver=2.0.16 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-faf\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4015,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4014)","md5":"4950423c548a646372ae58f7bbe67d1f","sha1":"f54943150a9cc3db37bba49e9abb8f1206b8b12b","sha256":"ab69f8053e420d7f3c043b55a1bfebd9981ccf92c21b4fd823031ab51967323a","sha512":"d5a096ca163c2767e6740c62681b3b6b0ac6f0e8bf2dc782beb956f81272d5ff49eb05d45231ab2e932a1c49602cca77a6be1f7c645b0f14d74111a4605e7d99","ssdeep":"","tlshash":"cf814051a2a12ca599b060dd388fb445a47aec252b8cecf8f654aca15e3471070fbced","first_seen":"2023-03-07T12:02:36Z","last_seen":"2026-07-22T00:05:44.065566Z","times_seen":691,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/fxbot-registration-form/assets/js/registration-form.js?ver=2.0.16","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/js/registration-form.js?ver=2.0.16 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-d374\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54132,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"4d7fd4ec2c26288cf2ad585f0d4e24a0","sha1":"efc14e1f1f8b40d6058770ebe879a1538acbd295","sha256":"22a2e54ee3cc97ff26fa83366ed627ff8480ca19fa13145e0ab4180a17e9e794","sha512":"0abc0fc684326c7e2196731d0b56bfff916807d415fe16c5ff0ee3e0fc1ace4f1df8223dc1f31f83539997a4b302ab3c64ff6fecb2dbd3c49f04935c043db34d","ssdeep":"384:FWhSG/oUJKPzzUSQHr1m66gH6FTmnyOsT+uICSpHrn7n+y5pOF/hCOCgLz2nfuEO:IfJKPz6m0eT+uI7p/ItYC4KiCZoeBL","tlshash":"d4333f595d0500f25a736bfebfea5206fbb94067684082417e6ca6801fb4c8263e5fed","first_seen":"2025-01-08T10:56:37.377771Z","last_seen":"2026-07-01T00:07:48.400344Z","times_seen":303,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/is.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/is.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-1c1\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":449,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0950fb9089c4f9e32fb53b8fdaaad61","sha1":"0a946bcdfa19977da80126e7e213e262344c4f29","sha256":"b34f812ef46d9c15b14560edcd00d6f5a1a77a381dcb8e1414650f18dc963402","sha512":"5c10b956eb874f5dc01bb5d844ad9ccdc77ecdbb2222836bbac8debca42e899b98ad0384bdc4652e56c5e739fd6d89aaa3585856febe43c5f97e28205c17c64b","ssdeep":"","tlshash":"aff055a8e4a485c98f180739dafcb0d90132309e129904fdb0c13f1dbe0d79b2424aac","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-16T15:35:39.689367Z","times_seen":445,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":182,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/fxbot-registration-form/assets/css/intlTelInput.min.css?ver=2.0.16","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/css/intlTelInput.min.css?ver=2.0.16 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-5ea5\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24229,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"89ce447c1755a488d17bec881196adf3","sha1":"1c0dd6b8549bf7023e9f302bc2490944aa5d998e","sha256":"5ae1a7abb598b54b3dc3529b788bbee60faf9e68296b4d04154072cb8eec56f2","sha512":"0216a585ef34e8923b1cee34f23c95de74ed69a2494852799ef7bdaf1ec6d48cab49319bfd1ffd41283724ba4f29d21c644645acf3b6a4e46290abcbded9712b","ssdeep":"384:KTg9F7FFmjTSBhPQ66n1hwzshHH7L7y9x26GC529PygQp:d9F7FFmjPJnM","tlshash":"8eb2fd778bb33c65f91bd1a129f906623b375c47b01a4a2ef2963dbc5f420e025f2981","first_seen":"2023-05-02T01:14:21Z","last_seen":"2026-07-18T22:47:13.043968Z","times_seen":532,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":36,"dns":0,"connect":19,"send":0,"wait":28,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css?ver=1","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css?ver=1 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-102\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":258,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"886011711ae972cd8472eef5eba5c298","sha1":"6e52e59dfcbe911b4ab1a69036e1e3b930030c7e","sha256":"4b9257e3e9c959214ddfab833a69a021ae6557403efe76afcbee259621175274","sha512":"5e17e37f001b253f9d78cfb212966299d30f99494a36580447d2a420a19c32f0d7c629e3081b9a7a8c5d63ac263a47fd907ad24c9642a66558c790d2f4b6b4d6","ssdeep":"","tlshash":"c2d05e50cad26638e812a055188843712bc01f28cf9297036e1b2b2fd81636bd8b34b0","first_seen":"2023-04-06T22:11:30Z","last_seen":"2026-07-25T15:56:34.577107Z","times_seen":21058,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":33,"dns":1,"connect":17,"send":0,"wait":36,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/zh-hant.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/zh-hant.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-261\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":609,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a3bce36139bdbeeb26d9847b105692d0","sha1":"b89a8460c0b7f3b038e3202038ad706ade7e73eb","sha256":"b023af9d9a9bde7e7f6136b1ba2fbcc5807af1c5f6dac17b383c29a8692f851c","sha512":"5d62a9fbe7eeb9812c535c0425233505068bf02f84ca5477c2b833b008584e0aecc1c06419d0c59a372952a90618770e8fc28fb1dfc60d3c878f9b236ca217a6","ssdeep":"","tlshash":"c6f002c96525d4444b560befde2df0c5011f70da5a6863d8308a1f1ca05a7d77004e64","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-25T08:58:24.329788Z","times_seen":909,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":249,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/es.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/es.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-2ca\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":714,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82a1bb6b96ec71df6247971da6e35155","sha1":"bb5be7dedff6612e4c8cb7c8019563c547238897","sha256":"8fc508fdb3ef11a4e38f9123f1ae903962ca14841cefd7b98ed5550d50d2f1bb","sha512":"dc54baf3110ea3a0512a272b5dac1bd1b24e50ecc32e9944436708791394a98fae1220f440ed1615c7d5e6f05d761190f3720105c9bf5f63300ff940cbb2738e","ssdeep":"","tlshash":"9b019cd4ba6c498c9e15837d0b6c70d1a20e20bc31cf40e8b98c8164b26a3ebe943d50","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-07-25T15:56:34.552773Z","times_seen":8834,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":294,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css?ver=1.5.5","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/wpml-cms-nav/res/css/cms-navigation.css?ver=1.5.5 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-625\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1573,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1573), with no line terminators","md5":"4780517929a305d994c345c693c7e008","sha1":"f259047949bc4dfff967499e5a207d0ac43e16fd","sha256":"aaef1023200ec674705f6efbf0d45a2f36ba49de83103623180b15dc1dd17694","sha512":"72d5034628d1b34cb7bb30c8e13e8004e24b4906a2475ddb10759d629fad7241b885b37e0ce47f7d857845215e569846a70b67e6755d4e344fe23654aa91656f","ssdeep":"","tlshash":"b2315bf49086446e342b547e669cf2e28d599ce9e00757bcb0bff495230c177939bb82","first_seen":"2023-05-08T20:12:30Z","last_seen":"2026-07-01T00:07:48.435201Z","times_seen":221,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/turn-rank-math-faq-block-to-accordion/assets/css/style.min.css?ver=1.1.0","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/turn-rank-math-faq-block-to-accordion/assets/css/style.min.css?ver=1.1.0 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-425\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1061,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1061), with no line terminators","md5":"340df9cb2c8a1e5d5428a81637866c40","sha1":"759e7dffd2c0427030749b61e4193046b515f6ef","sha256":"d5d086ab8dd7703a41e01c913e225fafdc942be3bbd121dbd3c615f33091875f","sha512":"6690c375a3591d2d5905e4d76cec1424ee7212d28fdb1c094da21b4fe6780a63dd8e7d9932c4d6f532d5fc660f6827d30f5b36c5f73ba98eadc3d2437cbcf3d4","ssdeep":"","tlshash":"58118e73319e1214a21b833a5dd3ffa93c25e602ae554f14ee00519ec9862b5f31470a","first_seen":"2023-05-20T14:10:10Z","last_seen":"2026-07-25T13:17:06.843661Z","times_seen":821,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":33,"dns":1,"connect":18,"send":0,"wait":30,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/et.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/et.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-14f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":335,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"97eaf9e3e1e5795116e411e3408c8ad5","sha1":"62d0a947b1ddc561aaa6b0db15a115cc38263e86","sha256":"361ceeb485933d4e9e5374bab0acf83404a5b7f634e6ee3bc61a3f125cea19af","sha512":"7964a7957eccd6b2216577e2a6d2ea461afca48b532181afc1933289e6e7f3ff6b776c141bfbbd1139825f21c5a71896709511e35f9a50514d617f0808fd55c0","ssdeep":"","tlshash":"d4e02641e0f98d0a4e1507a88efc71d290a230cd218d01fd72442928fd4e3df6885795","first_seen":"2023-05-10T09:01:08Z","last_seen":"2026-07-19T10:41:12.357527Z","times_seen":565,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":154,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/pl.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/pl.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-136\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":310,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"73699780fe17013ad360d5441cba044d","sha1":"3e37c78fdc79aada415a05c2275c0fdf9664f062","sha256":"e03d57c0f7db7d4dc8eb6a2bc359f3a40591b490130bcfa06fba08d514fbdb07","sha512":"94ef034160ec61a32cd5ce34621c993aa3a14f0fd5d60adb807f7c3c116060d45956297c0213950824c0886292669cfb2aec40c110e32e43049ba733490f6e4b","ssdeep":"","tlshash":"c2e0c2d5a4a9ce4e4e1407758ebcb1e9917270df218d04fc71c52a29fd1e38b2811e99","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-23T07:12:10.849398Z","times_seen":5827,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":207,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/themes/generatepress/assets/js/back-to-top.min.js?ver=3.5.1","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/js/back-to-top.min.js?ver=3.5.1 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-2e1\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":737,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (737), with no line terminators","md5":"5fc35421139ef9851bc72d3edb90cfba","sha1":"0091cadf005c865d7c4ef093fac9d35566fd1e48","sha256":"3310986e26439bd35318188bd35b0c326bd3334e6699ca0469fd4f0b7d497098","sha512":"0fda88fda5b8a67c7b750712da3543e4572cb89565284cf1cbffb1ec0927f21626ff78d6fe9fa4ac13ce9f780ddc0c36ca46fedeb1c2e7f754573d7acddc7432","ssdeep":"","tlshash":"0401d0fd1190553514fb8695739fbf41393120a686039411812ccca0f5a8ce7f912bc7","first_seen":"2024-09-02T00:59:07Z","last_seen":"2026-07-25T22:10:29.824868Z","times_seen":5241,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":93,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-18T16:39:32.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sat, 31 May 2025 23:17:24 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"683b8e04-23d57\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WPML:4.6.13","description":"WPML plugin makes it possible to build and run fully multilingual WordPress sites.","website":"https://wpml.org/","common_platform_enumeration":"","icon":"WPML.svg","categories":["WordPress plugins","Translation"]},{"name":"GeneratePress","description":"GeneratePress is a lightweight WordPress theme that focuses on speed, stability, and accessibility","website":"https://generatepress.com","common_platform_enumeration":"","icon":"generatepress.png","categories":["WordPress themes"]},{"name":"Mailcheck:2.0.16","description":"Mailcheck is a JavaScript library designed to address the issue of misspelled email addresses during user input.","website":"https://github.com/mailcheck/mailcheck","common_platform_enumeration":"","icon":"Mailcheck.png","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"GeneratePress GP Premium:2.5.0","description":"GP Premium is a premium add-on plugin for the GeneratePress WordPress theme.","website":"https://docs.generatepress.com/article/installing-gp-premium/","common_platform_enumeration":"","icon":"generatepress.png","categories":["WordPress plugins"]}],"data":{"size":146775,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16190)","md5":"32083550265f7d027c4657d165a4b849","sha1":"50af433188889f7a1663593632f361ed5d8fb548","sha256":"7596693cd9c7e477de65fe17c154901c99b72ceabd7c622a4bc4f9d081611aa2","sha512":"7c10814522d3235e07d62eaaeb0ac17386d8f8d4d564789f63bae1ca9257c3f9b4f517dde04e2ed0f6681d64943e1d3c32c4a6d160d5638c281100c2e8c5e40a","ssdeep":"3072:mhbJCGvAKCOqoe+xEc5gbPMULemUlYgu1o0GXNLzMTsLBC:mh1B4a5APMULemUlYgu1o1E","tlshash":"02e3f8b28a41207ea76712ec725e772873818085ce1947d9f7fd831ec3cbfa5a672905","first_seen":"2025-10-18T16:40:00.526316Z","last_seen":"2025-10-18T16:40:00.526316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":75,"dns":27,"connect":17,"send":0,"wait":54,"receive":1,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/uploads/2024/02/Logo-1.png","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/uploads/2024/02/Logo-1.png HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 1057\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nETag: \"671e3766-421\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1057,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 41 x 40, 8-bit/color RGBA, non-interlaced","md5":"7fc3397352449112151f3a4f1019de06","sha1":"c619ab8ee3a0de0866abec9fb29ddebc76850d70","sha256":"0ba7d92a08b19bb01f89d27397bb8f21684371954baeff41f74c58a0e6bcaeaf","sha512":"92600f3e00f12a61850c69125673e2130cc82d4ed0848568fbab8d4fde86e85df2a3ccd70d1d4c34c52d21d941a8af7a6c329a180d1d4743af14df8bfbf6f135","ssdeep":"","tlshash":"b111d8739ac23e5f0160d3b31e024a75496606f459509f013c1f505027f3b6cd1488bd","first_seen":"2025-10-18T16:31:10.265415Z","last_seen":"2026-06-06T10:26:14.939415Z","times_seen":16,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":245,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/da.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/da.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-16a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":362,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4d7abcf4c21c729ea9aab45faa1912a","sha1":"6ecbf40cb392204b8c7af284352108b500111969","sha256":"33815e73a3d07b3ae77cec1fdc77a285646e4e730136632f0ff5de6f8697c98c","sha512":"6d928963ac9562306e34f006030ddb4430cf81f3e37d8a5d805f90d5cc89659457e9f98257a2ec971205cf044387b7c3e87847c85bf7760ecfa2b667bdab3230","ssdeep":"","tlshash":"f6e0c09260ae8a0d4e1543205a3c70e2526770cf218e04fcf0c13e28fd667ab3800f5c","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-23T01:05:59.265689Z","times_seen":5462,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":288,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/nl.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/nl.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-163\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1932756ac7767c2f33986237417d8731","sha1":"84a604da4f8df24af728a73685c4cc2cad9de962","sha256":"8ca8a2dc879e29edd00a08bffc8d825f67d0988e55538d52e43861bb3af22f83","sha512":"9138b8b056aa4c5a5e0179ba58175ec8b98b2aa66b2a9f0bf17e2defed3b441f9f0d5d91a463bb45ed6f002c6e81d85730338890c3990a604677ded0bfdff8e9","ssdeep":"","tlshash":"d4e0d886a4e989095a1947694eec71d6406270ce218d01fd70853529fe4d3db2451aa8","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-25T06:05:26.053878Z","times_seen":6523,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":293,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/pt-br.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/pt-br.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-c17\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3095,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0c3ab5184e7b7429a458164488ad3704","sha1":"6d5780433cbbd4b3a6f25c791a8ba59bc726f862","sha256":"414878d5f95d09d4b5e65cdcdda185c7be3c775ba366add3b36d31479707b926","sha512":"1e2faead2b533933f5f266bcd4dd70c35e4a6e1f856d06679898a592cf860c7b26a514ea3366d41f12e78581b7ce8a40543725fbe1dcdc8b69d172a813316c56","ssdeep":"","tlshash":"655176997458238ca48eb76dc7fffdd1034e34a6308086a5dbef63e8584a291fd6a114","first_seen":"2023-05-10T09:01:08Z","last_seen":"2026-07-24T21:22:37.590228Z","times_seen":845,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":283,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/th.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/th.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-16f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"756f64249f1f943e61bff54780b49cd8","sha1":"e4beba68e98c966f57a6cca0e40915ba60500e23","sha256":"cf1c5911962ac51db0ff4e36a6a91f5ff42c1ba40246ada4067b3b5a846f21b4","sha512":"d8d34a3b82cba3a38c9f4025440e7177ca7ad6347bdff81f1691e88ff0f7e8a58fe3491e2d53e9d433cf685af00af37193c07afd2799fa12aefb54d53ff30498","ssdeep":"","tlshash":"c2e0d8c6a869890e1e140f754dbc75ed5136b0cf214d41fcb1c12629aa4a39f2541a68","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-07-24T08:14:42.840832Z","times_seen":4430,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":327,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/fxbot-registration-form/assets/css/widget.css?ver=2.0.16","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/css/widget.css?ver=2.0.16 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-1eea\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7914,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7914), with no line terminators","md5":"c0526b907bd105ac9d2606c1f6d5225c","sha1":"38c1efab7570951029c569ea67875e1c0a52f5e2","sha256":"995420b5354d83b5f15d0a86ff2ac19bc33516e5ec7d0465a9398011a512c336","sha512":"cbf32a9123eb0957287b6ca34fcdee8c0e88c3201c2fec8970d9d23a8205021f070a59f13918edd8f6c89ad20c2bf80ed54c52c07b04367a226705e11714d220","ssdeep":"192:p8Ufo5Zw+VQsV3MAKP5xc8MgYs2ao4EEbmM1x/OvUc/:zgiz4gYs2ao4EEbmM1kcc/","tlshash":"62f13311d5b40856f187456db2c507ea512ed58ae016ceffbb08b1ea83cd4ce23bbb09","first_seen":"2024-10-04T11:14:14.089562Z","last_seen":"2026-07-01T00:07:48.46313Z","times_seen":202,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":34,"dns":1,"connect":18,"send":0,"wait":29,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/cs.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/cs.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-176\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":374,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0fe0a2e4225eee5dd8a3c73a5ab5a312","sha1":"c930c1341640bee697cf50053721ddfd750dae2e","sha256":"2a3a7fa3da584643cbac6234aa452705982f50454ed0a259d8c8cd6a9c2fa8c8","sha512":"92390117a5b345c7f9123d5d06839d95959664b32e621961e0d28a353ee515df51a446563354cf9f3911acbd0032a0fb61b1ca356250262157aae05dc907fe8e","ssdeep":"","tlshash":"80e06889a0e88e094e1803b60efcb0d5612330ee208d02ecb0c06619e9197cb2808ee8","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-24T13:20:15.276892Z","times_seen":5356,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":261,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/sk.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/sk.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-665\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1637,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ed3cf547a2f8579e45330fde3095537","sha1":"dfc6023844bb5a110c3d9219c82dd326940ae055","sha256":"c1b338efd99956c2ae0c62fcf559b2d956fa11f71751985d62c9942b061dad6a","sha512":"4ed0e6912bfa55a7bee5b4f6318c3878bff3bf23d5a220225b5e19d207d7f55bd816f06dfb8daf8a5eb4c2e266d0fcce8f40d0f797c81d97a2517e5eba2a3be4","ssdeep":"","tlshash":"193176c55178aa4849c7a76fde7cb8959015a0fd21f940fd7a4a470c956caceaf00cb4","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-21T00:03:54.238395Z","times_seen":5245,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":287,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/seo-by-rank-math/assets/front/css/rank-math-snippet.css?ver=1.0.229","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/seo-by-rank-math/assets/front/css/rank-math-snippet.css?ver=1.0.229 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-9fa\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2554,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2475)","md5":"446b18326b6a7efc47be011ea468def5","sha1":"dbc8692f8dbcc01efaa22454cb8f19992ead7462","sha256":"5423a9a2ead65199cfe8f812727ca497fa9333824ebfaead1427ae2a9e25ba8e","sha512":"1fe5bccf90bd6d3e4746f4f534e43415224b27626c169bb3937e6471f0a41267b24d6e020db2422f9f33499b5c128154685bd08e19eeca2b7cd1a44a8a466603","ssdeep":"","tlshash":"58512b85ba3e2a966152837eddc7de991e2a24771b138758dcc4d09c836f070f71eb08","first_seen":"2024-02-01T11:56:21Z","last_seen":"2026-06-18T17:52:32.183948Z","times_seen":183,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-includes/css/dist/block-library/style.min.css?ver=6.6.2","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.6.2 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-1b735\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":112437,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57765), with CRLF line terminators","md5":"e4038793bd9dba450fbde333ebb2c7ad","sha1":"5a97376465e75ea223102550aaaef51d878890f8","sha256":"73e546a25c697a9fc474c8e6e2feda5a769bee52ca2062d87adf6b96b06a6e92","sha512":"d1d6493cd4e20c0f5f9bf57154dc4e81c7707d64bac3b5e5ea0962be6e169a91cb25ad118cc5feee2c37cd14b2c0e7443a6b75925bde17be7ecbb41feb24910b","ssdeep":"1536:pZeJWfZglYQg5MoF+qehN2pUkxWLZQql3Pq:pZeJwkYQg5MoF+qehN2pUk4LaU3Pq","tlshash":"89b3625417b4dcf935ffa73a5e4ee258a103aa41c68a67e7e066d190618ca490cf3f0f","first_seen":"2024-12-05T22:57:37.231104Z","last_seen":"2026-07-01T00:07:48.456411Z","times_seen":129,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?ver=4.6.13","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?ver=4.6.13 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-10f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":271,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"c6a55456af4776c733018888483aba22","sha1":"297b53f8538ba3b59d2028f16de4e14ec90337ce","sha256":"20be9b3c63a01d921697a0ef1c1596f647678498eefe6dc508e2363be25277f8","sha512":"dbaf5d9a1b0f5d4195d3b9c62650af622d66f1b68bfec20ce79e84185c558f91aeeb6718452e1196bf783bb3ca7a0574223726fc4d80076ea9ad115f1fdd1eab","ssdeep":"","tlshash":"f3d017183bdc452c0925731237fee158392535493482988e8384b47419e8a63eca8877","first_seen":"2023-08-11T05:46:56Z","last_seen":"2026-07-25T06:05:25.995666Z","times_seen":6969,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/fxbot-registration-form/assets/js/intlTelInput.min.js?ver=2.0.16","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/js/intlTelInput.min.js?ver=2.0.16 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-7362\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29538,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26958)","md5":"0d7765bae213b8cf43ba5f06960055ec","sha1":"b97311bed465062adfe3b0f20f363441be2d4881","sha256":"e889e4e37ac5bce51552e6432402bad41853158bd662f41bbc50acceaff5a1f6","sha512":"a8d97281baf2c7924da3a90de1f08bd44f2b090fd36a0930c0dac7d58b85f80463a35abfeac55205f8c7ae872c28af0a0bd04c1a6aaaf1232a4b8b446020b9df","ssdeep":"768:0sqD7GzOoS+D45YMJR3QWG6UdC8OxgtmKg3vTpzaDvCYHJ:CfHQWodCjgtmKgNzazCU","tlshash":"78d2099973551237a89aa0a1687f16472ebf30015a84cc9cb87ecdcc1feced9a1b5734","first_seen":"2023-05-02T01:14:21Z","last_seen":"2026-07-22T00:05:44.087474Z","times_seen":619,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-15601\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-26T00:23:29.970816Z","times_seen":990819,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":76,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/en.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/en.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-50a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1290,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf165af749d574a25a1a29f31b0ed692","sha1":"fd1663941236e3105b46f020e0e23913452b2585","sha256":"4c5edc0c143fffe3bfed4126d2b3527e6e21c57499af43f9577b45c6eb93e598","sha512":"4475c426f875becb9e1e5453c165ed5d60f78f6f33d0ebc646a8e9deaccd4b2e7d5a7f56b7648a30db234451909763ee04c2b46a2a5bf79c3259c621ae0d863e","ssdeep":"","tlshash":"0621ddd2495459c08d8a037c9f1f6bdb72335cce3a584af832d53a165d90bb7341ad85","first_seen":"2023-05-07T18:02:32Z","last_seen":"2026-07-25T13:23:25.520379Z","times_seen":9275,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":244,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/ko.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/ko.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-67c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1660,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7deaaa44e02b9aea9fc1a7f8a70cfe34","sha1":"d2f42c97768727cf6f006ebc8671eb14d7f0edc3","sha256":"a920bc55182702e5ceb09b5750c765d2e0f4aee817a969f221e900e930fcb0de","sha512":"01a5e05b5dc523b0bf761debd10f716ad5f08421b429f9d30f82c838a6d56b49784ada89bad0fb3272b80e66186b987e84c7cbdae6458935407920bd53d986bd","ssdeep":"","tlshash":"4a31dec7333a55ba4c8bcfacd77835c0161d24f8152ae2fce588021a36f399e9905e50","first_seen":"2023-05-10T09:01:08Z","last_seen":"2026-07-24T04:48:10.523821Z","times_seen":632,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":198,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/no.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/no.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-1a8\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":424,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ebe2b7f4aefa3c8869fa9f0a402210bb","sha1":"dc0ceab0f048a8c8ac97e3277f2ed237b974f005","sha256":"7021694edfe47096e0aa9a5ea85a6851181f723ae3a8806779a8e01702325804","sha512":"f176bd1aa2416960b0eec285da0b91e983a162a1d475bac76786b33ab0aede45783d422ce4d909b62ee6e6ba1fa55bf5b6b6ffcdf2463e305941e2d804073da5","ssdeep":"","tlshash":"d6e0e5809b9d1a6da91283a41ddcb885022b70e6328c0ced658dae987f412eaf466264","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-20T19:26:18.643974Z","times_seen":4770,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":204,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-includes/blocks/navigation/view.min.js?ver=6.6.2","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-includes/blocks/navigation/view.min.js?ver=6.6.2 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-ce4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3300,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3300), with no line terminators","md5":"1dd354b759c9108102c93d8bae0573a1","sha1":"b27ba805d3b9118edfd523f01fd6e84229d52ffd","sha256":"cef72ad53596109595c152da16e28c2799d53b4c151274c7b28c0324e7230f24","sha512":"e991ea5ac4eb00dfaf2db40d608ec4face0a75df2199372e4ea03c8d0392d0402257b27fcbe334c17db86ed32da0b6b57f55a1c13f84edbd5dd56fb56e72e798","ssdeep":"","tlshash":"83610234306575b1aafe5be8f3148528a3148581240b78717e1cb9ee58eef53d1f0bea","first_seen":"2024-04-11T09:16:20Z","last_seen":"2026-07-25T06:40:58.114201Z","times_seen":2556,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/uploads/2020/09/pattern.png","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/uploads/2020/09/pattern.png HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 76142\r\nConnection: keep-alive\r\nLast-Modified: Wed, 19 Mar 2025 14:02:25 GMT\r\nETag: \"67dace71-1296e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76142,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 800, 8-bit/color RGB, non-interlaced","md5":"e4b0f248598139c6d31cc3b5e2e27f27","sha1":"9785250fdf2e65afd9da363c73b8cb5ac167fbe6","sha256":"54356510563fab84968084ae0de35f97f6c3523074322d92d0d2f3ce4be5bc0f","sha512":"6877b0ae5fbfa8d2ce1c4ec0b1957c987762f52444589f6a6cb2d69206e4ecc3e50d42d97dd66553485eec2c3315f1fb89425bdcb240b2fbbf82942a5af7a3b3","ssdeep":"1536:ioiAWqUH8kxn7ERW/OQvUBNYPZvVgV+syZKGZbKkAZbrRTxneuX:nY84IW/hUBNQaV+9ZXZb2RzX","tlshash":"e673dfaa878c015c7e040ebbad7a74eb24c7828549ef21577c9b67708639f6c04f8736","first_seen":"2024-01-28T22:10:38Z","last_seen":"2026-06-23T09:57:15.331398Z","times_seen":18,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":141,"dns":0,"connect":0,"send":0,"wait":33,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/fxbot-registration-form/assets/vocabulary/en.json","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/vocabulary/en.json HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nCookie: wp-wpml_current_language=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-867\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2151,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"974c06c22e80fbf8fc59a64946494b43","sha1":"6f25ac4d1108e81458e684ff3cd2fdbd8ac32786","sha256":"1e4455cdccea0ee7e1e5d9e13c5b2be8b964c3012341201f22092952036489a7","sha512":"d8374ac71bcba7cca5bc8707297280283110adb04814c30e369d0e7a1c3c3a1a77487bb4b7090aa485ead581de29abdc3b94d987784caf37b580d158e2f7f814","ssdeep":"","tlshash":"0a41e115ca058d6b0a81009ab8a9365773a5509b8d9d381dbb28136e0fded6f22772bc","first_seen":"2024-01-29T05:49:51Z","last_seen":"2026-07-18T19:48:33.892895Z","times_seen":401,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/hu.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/hu.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-167\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":359,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3621c5eb449691cbe1d3bc8757c831a1","sha1":"e7e3674fe42359cc9a376e543d7548418071aea0","sha256":"2c1380bd6fb1a88cabcae439eaf960d4dffa929a74cfe3d44f7552084fc1150b","sha512":"7c66bd80019b994685400d020e37d38ba3c45ee3cec449b83bf8a2e8d08d346e03d6245e81f9b868eab42325782107cbf837f3c057efb2c83a5151b22b1104c7","ssdeep":"","tlshash":"61e0d8caa9e9c90e9a1947694eed71da416270cd21cc01fd71843528fd4d3ef2411764","first_seen":"2023-05-29T23:05:28Z","last_seen":"2026-07-20T19:26:18.621415Z","times_seen":5240,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":151,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/lt.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/lt.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-163\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86458cbb859c05bf3fc54af01e50856b","sha1":"9b0769e31e63686d55f311f9b0064ac1dd7f3f67","sha256":"acd3a6a8487a79e9c9a0cdf7cd61f9f066e6c4aaa71050f93885562db997521e","sha512":"e1616165f9259593c62b921c9ba70d2db47aa5f1d8924855408084fb43b31356f52ee68128cc8df8d54dfc4f0baec8b928fa836a8b2250af31847a140db817e3","ssdeep":"","tlshash":"8be026c4a86a8a4f8e1107758ebc70e99172b0ce218c08fc71c11529fc0f39f3801f99","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-19T10:41:12.370342Z","times_seen":554,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":199,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/ru.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/ru.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-163\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42103243a1d4c3f2e823e99f3c00aaa4","sha1":"1d95a227efb867c8b3dfa2902ea8a803f3fd3519","sha256":"0a720bc83f72d17849bd213570ed808ae6b430fa5f3d50dc7fdb32413f7ade01","sha512":"752fcf59700e20bed16831a684eef542a1fd525d73078c97894a6e7b3e2009296af1f4b31f2da100aa8403b3aebf3fff464cd8c1c6330a3b6da36796e2b70cd7","ssdeep":"","tlshash":"39e0d886a4e989095a1947694eec71d6406270ce218d01fd70853529fe4d3db2451aa8","first_seen":"2023-05-24T00:34:39Z","last_seen":"2026-07-24T04:48:10.507465Z","times_seen":5576,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":285,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/sv.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/sv.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-178\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":376,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d7b2e74f61e873c0fb690155956025e","sha1":"b515a34c1884d45ef9a2b7f3ebdf731a0613e1c8","sha256":"4a271da0e5fbcda6d2d15092d8a564e8ef3d36ad507215563ac2faa0e8833001","sha512":"e2ccfb1f70a37129ea1a51b5e143e103904df03d6dfd5966f169d13222bd87a2d54b1ec21ac28ef3ce09c1d853f07c16eae7190c263c0e250506ecb8abdff54b","ssdeep":"","tlshash":"97e068d0902ec60a9e1507b95fbc70ca4232b08e298e00fc70c12528f49e7cf2810bb9","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-07-25T06:05:26.039659Z","times_seen":5593,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":326,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/fxbot-registration-form/api.php/1/api/user/auth/geo-data","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/api.php/1/api/user/auth/geo-data HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nCookie: wp-wpml_current_language=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:34 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.33\r\nVary: Accept-Encoding, Accept\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Set-Token, X-Pagination-Total-Count, Date, X-History-Filter-Hash, Fxbot-Referer\r\nx-request-id: fdd83e1b8d8fd8a38ba400a1665caa644d8c4fdfb1979093742711ca45758e4c\r\ncache-control: private\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XTscCgZWSS5B5JtiS71fW7aKKAbMeEPivAXVNpotziFr4q%2F6EJAQdJFUHsJlAzrmCVFVZnRrL%2FcG%2FGyBkgw9kG7M1JVNGzmCDaFegw%3D%3D\"}]}\r\nset-cookie: SERVERID=w01-8888; Path=/\r\ncf-ray: 990978f52c15fb7f-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ba6605f8ce4a76fdd292485f5db4c1a2","sha1":"246227e28c0a14aaabf929c7e98c665d793e9e74","sha256":"2c669cf713927c358adc95b5cec9769ea622db31736068a1d1f56428dc6ae530","sha512":"f19721df8dea725299aefd4e4eeeae390e75227b60eab6860c6e4cb8e237a0086da0d7afc316339aee2b7cb9c6cd70db0071559d873ffed11a4ebfb5fc186182","ssdeep":"","tlshash":"eac02b2813fccc045d8bc08a888e331b23af8013c309ec89c8cc8b9ed4ca1e6602104b","first_seen":"2024-01-09T11:21:34Z","last_seen":"2026-06-07T01:05:18.953238Z","times_seen":682,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.13","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/dist/css/blocks/styles.css?ver=4.6.13 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-e549\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58697,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (58697), with no line terminators","md5":"82a65dc43ead999e4c89efe2c1bbeb40","sha1":"075bfb9ec99cfce789e3f3ac0ef2ff104dc1d50b","sha256":"af770f5afec3e9f10196ea60476a44dde4d80010e680500685b578fee468c8c7","sha512":"059efbf42781d4cc95ec585aef3eb9bc4601bf4b7c2a821481d6ff57d3ef1bd5dcce51b528c487d7011e836a3fe12b71a7057464c5e46288df56de174fea3f39","ssdeep":"768:KiCDXbwqffcFca12YjJVsD3szqMiCDXbwqffcFD:KxVa12YjJVsD3szqMxA","tlshash":"7343402197605ebcd4bf87331ef079349423d961c90b67c9e9e2f354a6cb54606b3b0a","first_seen":"2023-08-02T07:54:49Z","last_seen":"2026-07-01T00:07:48.396795Z","times_seen":451,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":36,"dns":1,"connect":17,"send":0,"wait":31,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/lv.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/lv.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-12b\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":299,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bebccff3aeba51647f0dce95d6551d53","sha1":"b257a531d6b251909e3174a7820c24d19b54559f","sha256":"5e92000c8341f0ea10f5677f62c071202b412f252a361d79a0d4a7fa09910aca","sha512":"9599f34e6940dda7e11bfa46b8a095081c7706264686e31a4e72528b37d9a55d21997aa72ff26f3e8c1143fb9b889697a92fd0947a399b515c40b9facfb45822","ssdeep":"","tlshash":"36e0c291a8a9c70e5e5843648f7cb5d9413670cf618d05fcb5c4396da88a78b6890a78","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-19T10:41:12.296693Z","times_seen":541,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/ro.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/ro.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-160\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3459066e38308492a7ac98271d7b034","sha1":"bdc08d8b6b3a4ab7eef55fb2b73028001f045581","sha256":"3244688e345eb37de4069b23d32d91b59ecb2c28a14e38aaa4e02678f5d0bb7c","sha512":"5e68e1f9adf42375f8432dfc1a5b8a5f91849b2e3fdaa7ac1de0fb111cce8d61daf0330cca3137ae1ee66e20ba12c7e135114bb565b5f711cc730f8db4e20f81","ssdeep":"","tlshash":"00e0d88595a9c9094a1603795abc70d65123708e158905fc74c42514bd4e79b3c51aac","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-21T18:33:47.252482Z","times_seen":5249,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":285,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/gp-premium/general/js/smooth-scroll.min.js?ver=2.5.0","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/gp-premium/general/js/smooth-scroll.min.js?ver=2.5.0 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-1ae3\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6883,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6883), with no line terminators","md5":"ca1e68e1ae2dbb2206d21481576bbb45","sha1":"eecac929830764dba8b0734241090f2403671fa8","sha256":"ce43697d26defc72fa5aa7e3d7f1296cd19ba9a67cad0e2557aacc7702454f4d","sha512":"1544aed0f5def1ef73206a17cf7f540ad8b4d58a5e9b84d0c16639d8a4500b534c940184c310ecc9d4d458edbfa933ed1d0f542c7dc2ee67446029c7e48b21cd","ssdeep":"96:99BBG3KIUhniQscmPS8qeBxJmSjfijAzpFnIFW6fI2WsnSSORdgAL:NB7p6dmiFN61WsnSSqn","tlshash":"5ae1a6ea35607473caeb42b6a22f534677301163344b2054a36ddcdc39b5aa6835bfb8","first_seen":"2023-11-19T10:25:22Z","last_seen":"2026-07-25T15:59:37.475271Z","times_seen":2867,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/themes/generatepress/assets/css/main.min.css?ver=3.5.1","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/css/main.min.css?ver=3.5.1 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-4c38\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19512,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19512), with no line terminators","md5":"b7e067012db6249774c29e4c56b4f2c0","sha1":"7523574074e98d492a8da515f0daf7446cc504e0","sha256":"c839222ec3a5037179749a843610820436bf575a591a3e0b45404f1970a2cc56","sha512":"c77b609b39ddf4ab8b6a89aba1b8daa2e8824312b1032eed8270c82167794dd438ec9878dc5e5e19853565f3f95c24315e3f164b5919cbed8c772e84f7078bba","ssdeep":"384:sk1JAWvwWZ34igipTh3dGr5PL3NatuylxQp9svaQW4M+ght5NsKa4TqSD6CE:hAWvwWZ34igipTh3dGr5PL3NatuylxQo","tlshash":"3f9209a2aaf1242cb177831ffbd0e16c3565d522d30b95dab897d700c9cab67026379c","first_seen":"2024-08-28T15:41:57Z","last_seen":"2026-07-25T23:56:44.833868Z","times_seen":16897,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/hr.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/hr.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-97c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2428,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23ea3f2c9b976eb82c1556881543ec7a","sha1":"df83b819176d4e3e12e59345ed1bf94c59f01d37","sha256":"888b95081206a0c3488cb21d3e8b0b4fb98491f80931f39587dced1b04700e96","sha512":"0aef763a990c73e9cdfe0882de104968403bd25274fcea85ccb46c8003e6414dfdcd7b43ad6f315c3a7207380c0a4f6a6d95334cc1a8517fb29180af06fd5042","ssdeep":"","tlshash":"c741f0cb7ad0b468cc9fe7acdf0b70e1231750ee7b7704e45559672a2302a8e5a14fa0","first_seen":"2023-05-10T09:01:08Z","last_seen":"2026-07-19T09:38:24.171124Z","times_seen":554,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":254,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/fr.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/fr.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-160\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e9efcfc75d8fdee9370032dc72e78bcf","sha1":"77d974568d91216054eee046c19c99f71cccb9be","sha256":"a7d195ab974d9555702eede5af18287b5767efcea5fc6dadf529e114dc6fb568","sha512":"12e0fd3eafb13d648d46f86cb8eeeea05e4acccceb2510abb4c888e07284de90503ddd8b3c02513d6fe84b6b66d6600039d56749f316d012cddd0d3d89cff8ea","ssdeep":"","tlshash":"1ae0d885a1a9c9094a16037959bc71d65123708f158905fc74842518bd4e39b3c51aac","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-25T09:15:20.782457Z","times_seen":8333,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":153,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/de.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/de.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-14f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":335,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51768606d83a265da9e7ee8efbb21edb","sha1":"b22c5b98344da8d3ea54ecb9baab4c5a5a7ebdb4","sha256":"8fcaa96d8835e39fa6a74ff4dc781d908112d46ceb8fb81ff37c433f390a4c8b","sha512":"cec42089404b17430bc0d8c7882cfd6249d4fa7401b538f1899b2d315d639cb6fd28cf33da34d91afc40572f5dd59aac75dee16b0c65aa1abf2e0b93bc779c3d","ssdeep":"","tlshash":"a7e02644e0e98d0a8e2607a88efc71d280a230cc12cc00ed72842528fd4e3eb6845be5","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-25T09:15:20.732113Z","times_seen":8541,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/it.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/it.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-160\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34ec214f5547e19d4e1fe9d0d638f9c7","sha1":"7ef49fd31ffa7a0ea47e8ad0a2fa2121621baae5","sha256":"ebdeb69d61fd3e3b429eafd9b45b51422b87348d932a7fbcd668975437650fdd","sha512":"95f427b45f9af6fbc409cba7617a3a653ea21bb15bc722a442edc8f9a492914e0eb0e25d113403eff378c7ab9078d3bcd38e9e7cd7bc9c987e8b0da621e2b477","ssdeep":"","tlshash":"96e02084a5a9c9098b16437959bc71da512370cf15cc05fd75c43518bd4d3df3c51a6c","first_seen":"2023-05-10T09:01:08Z","last_seen":"2026-07-25T06:05:26.047327Z","times_seen":7883,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":183,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/uploads/2024/02/003.jpeg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/uploads/2024/02/003.jpeg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 21388\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nETag: \"671e3766-538c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21388,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 600x353, components 3","md5":"3b0d34cff005448c5d76a48ecf58218d","sha1":"9d4643d96524a80b0bfc1c448b22ef058ce37e0b","sha256":"4550a1b80fc28a8b9682cdd6d9ef0de2fb3ba07e83598a022fc39db211cf346c","sha512":"5b7d20346913cb0d94a8251572b210454916970ace8cecc71d721f719c3ac48d86b0a3f26f7e24bf02d6ce5e498b19e8999c53eef74ed14f384a152fbcce5e32","ssdeep":"384:yKhSRe/5PnXTbpyLbTdJDesW3inWzCsVpzop1h1pzmzOnJ5TYGg:yKhie/lXTYfTP6sW3U3N1EzOn3Fg","tlshash":"33a2e16daa03734bd6f39c34183ca43eb170907f20285dabf9389786db194f4466a6d5","first_seen":"2025-10-18T16:31:10.311296Z","last_seen":"2026-06-06T10:26:14.934842Z","times_seen":15,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":335,"dns":0,"connect":0,"send":0,"wait":46,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-3509\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-26T00:22:50.316973Z","times_seen":908609,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/fxbot-registration-form/assets/js/optin-form.js?ver=2.0.16","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/js/optin-form.js?ver=2.0.16 HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-76af\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30383,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"696c51dcd9631f02d28d39fadefdd67d","sha1":"11fc826e34f795901c8a7ec0f7ef4831ad2b6022","sha256":"52937687c44d798fb8cd512609692b035f37fdbce19e7eddb747f0c0f48e32d2","sha512":"81318958054db7112264af3f1b9fe9e86e574afecb6ef6d5518f678327643bf43ad3e19c45ede7ed5f88425bb072bfebe25541fdebbb0a25e5a7ce7e7798f942","ssdeep":"384:cWhSGmTKVbNmP6nd/lRMNRHVOCgLd5pOF/hC/s2nfukVx2T+28PKqxnYClSWq1Ca:l+smy/lmqJhYCwaZoRL","tlshash":"bed24118591500e11a7377feefda6246fbb951b768408241be6ca6842fb0c4123f6fec","first_seen":"2025-01-08T10:56:37.379199Z","last_seen":"2026-07-01T00:07:48.417396Z","times_seen":303,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/fi.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/fi.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 249\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nETag: \"671e3766-f9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":249,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d1724c02c151d1f44b22d5c89e199c54","sha1":"fbb67ed0796f19c50d9354ffa54a0103d33049b7","sha256":"0d9fdf20d3b93aa471132ea660f36e3331fc137bb628121caeec33e905a2a33b","sha512":"b25f8b249311ea474d847f05738c744e4b3590a79c6859db8b7cef67f7e50c234ac86b2eedd86778cfebe26fce6f376b93e202a0ebf7b519700a87b56302a741","ssdeep":"","tlshash":"8bd05e9690b96a044902476a8dec76da6026a0e6668d01fdb0811525f6893df78a36a8","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-07-24T04:48:10.52699Z","times_seen":2544,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":154,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumbot.app/wp-content/plugins/sitepress-multilingual-cms/res/flags/el.svg","fqdn":"ethereumbot.app","domain":"ethereumbot.app","tld":"app"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumbot.app/","date":"2025-10-18T16:39:33.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumbot.app","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 02:33:40 GMT","end":"Sat, 27 Dec 2025 02:33:39 GMT"},"fingerprint":{"sha1":"5B:12:28:9F:CC:22:09:0A:E7:EA:2E:BF:7A:44:08:E3:15:DC:C6:3B","sha256":"7E:FF:19:63:D2:95:8B:CC:48:45:EA:86:6B:33:D6:55:39:F5:24:D2:34:4D:BE:4C:4F:41:46:9F:08:E3:05:34"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/el.svg HTTP/1.1\r\nHost: ethereumbot.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumbot.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 16:39:33 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 27 Oct 2024 12:51:50 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"671e3766-1fd\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":509,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad2d06f8e09051f574083a3d00b0d3c4","sha1":"278327ff2ba9f9ff2075e69635576298e083a56f","sha256":"855ef79130c430a08f89dad91b7206b3d31b42a1b509000029c60b9336856e45","sha512":"741f41770f7a55e36f6b436b2518986a01a587236f08461c94bfd30a92004c6736b4844a99b46ab6363a95779d9470bc8b374e539a5858c6baae661eccbf884f","ssdeep":"","tlshash":"caf0599496e588c80f2f4e75c97c76d1103224cd6048c8aca0b43819f9053ff11a16be","first_seen":"2023-05-07T18:02:32Z","last_seen":"2026-07-24T04:48:10.529301Z","times_seen":2610,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-18","alert":"Phishing Block","trigger":"ethereumbot.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ethereumbot.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}