{"report_id":"60267fec-09c6-4aea-b029-f0dceb6e2ea5","version":6,"status":"done","tags":[],"date":"2026-02-02T14:44:16Z","url":{"schema":"http","addr":"ethereumcormax.com","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":0,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"ethereumcormax.com/","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"title":"Ethereum Cormax 5000 Official App site - Powered by Ethereum 15X Cormax, 50.","dom":{"size":363,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (363), with no line terminators","md5":"b5d1b46c3ebbc3ee5bce2fb8398106ad","sha1":"173c6dc9894cde11de8f7170b9c9c5bb15593017","sha256":"e800878194cc8979e66ee26b793ef8dc0b33c09d70b4f422947e8823d22401c4","sha512":"b223f574d2f020a21d186aa8ceab293f453baefd172efba2b677f2daf5e161bed98fc69cbcb4ac91cab766ce3530867239ff60b55f18369403a52f3b77e14f83","ssdeep":"","tlshash":"d5e020ea1d75c83476b4068b64f2e3dc153065607711ea0541dddc3a9f10fd74c93d58","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ethereumcormax.com","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":0,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-09T14:44:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-01T22:17:46.954894Z","alert_count":0,"request_count":1,"received_data":22043,"sent_data":513,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ethereumcormax.com","ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-03-14","domain_rank":0,"first_seen":"2026-02-02T12:24:10.277345Z","last_seen":"2026-02-02T12:24:10.277346Z","alert_count":390,"request_count":65,"received_data":1117893,"sent_data":32034,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Mailcheck","description":"Mailcheck is a JavaScript library designed to address the issue of misspelled email addresses during user input.","website":"https://github.com/mailcheck/mailcheck","common_platform_enumeration":"","icon":"Mailcheck.png","categories":["JavaScript libraries"]},{"name":"WPML:4.7.2","description":"WPML plugin makes it possible to build and run fully multilingual WordPress sites.","website":"https://wpml.org/","common_platform_enumeration":"","icon":"WPML.svg","categories":["WordPress plugins","Translation"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"GeneratePress GP Premium","description":"GP Premium is a premium add-on plugin for the GeneratePress WordPress theme.","website":"https://docs.generatepress.com/article/installing-gp-premium/","common_platform_enumeration":"","icon":"generatepress.png","categories":["WordPress plugins"]},{"name":"GeneratePress","description":"GeneratePress is a lightweight WordPress theme that focuses on speed, stability, and accessibility","website":"https://generatepress.com","common_platform_enumeration":"","icon":"generatepress.png","categories":["WordPress themes"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-01T22:14:44.580478Z","alert_count":0,"request_count":3,"received_data":148101,"sent_data":1674,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/gp-premium/general/js/smooth-scroll.min.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca1e68e1ae2dbb2206d21481576bbb45","sha1":"eecac929830764dba8b0734241090f2403671fa8","sha256":"ce43697d26defc72fa5aa7e3d7f1296cd19ba9a67cad0e2557aacc7702454f4d","sha512":"1544aed0f5def1ef73206a17cf7f540ad8b4d58a5e9b84d0c16639d8a4500b534c940184c310ecc9d4d458edbfa933ed1d0f542c7dc2ee67446029c7e48b21cd","ssdeep":"96:99BBG3KIUhniQscmPS8qeBxJmSjfijAzpFnIFW6fI2WsnSSORdgAL:NB7p6dmiFN61WsnSSqn","tlshash":"5ae1a6ea35607473caeb42b6a22f534677301163344b2054a36ddcdc39b5aa6835bfb8","size":6883,"data":"","first_seen":"2023-11-19T10:25:22Z","last_seen":"2026-06-08T16:13:13.034994Z","times_seen":2591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/fxbot-registration-form/assets/js/optin-form.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3344f9ef0a1c140f85494c830d1ad5d","sha1":"59c16daee5dbc6942fa6d91c28b8aacbe2b0bf51","sha256":"5dda80b2f1d2b87f6e961a0ea006e9e4a5076fd8cca9f77a296965d496094cfb","sha512":"870ef3b96b5176c6772cd2360aa82048a61f0cad509973fd5ea37098edb53b4c89fe1bb0d32867a10d25d52194578ef158e18a007c9594748dd50610716954d4","ssdeep":"384:Ap9nylLGEIbn6R5EbZeSf8xdwTRZ03bX2vwQ+x8wK0cfDGMkO9m3Gje2vEdBjY:ArALL8n6JPfi9mWjdQlY","tlshash":"39d25f1859a700a11ab379fe6fdf2242767490a73848cd44be4ca3846f94d6127f5fec","size":29537,"data":"","first_seen":"2024-10-04T11:14:09.138798Z","last_seen":"2026-06-06T05:06:17.095036Z","times_seen":402,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/fxbot-registration-form/assets/js/intlTelInput.min.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d7765bae213b8cf43ba5f06960055ec","sha1":"b97311bed465062adfe3b0f20f363441be2d4881","sha256":"e889e4e37ac5bce51552e6432402bad41853158bd662f41bbc50acceaff5a1f6","sha512":"a8d97281baf2c7924da3a90de1f08bd44f2b090fd36a0930c0dac7d58b85f80463a35abfeac55205f8c7ae872c28af0a0bd04c1a6aaaf1232a4b8b446020b9df","ssdeep":"768:0sqD7GzOoS+D45YMJR3QWG6UdC8OxgtmKg3vTpzaDvCYHJ:CfHQWodCjgtmKgNzazCU","tlshash":"78d2099973551237a89aa0a1687f16472ebf30015a84cc9cb87ecdcc1feced9a1b5734","size":29500,"data":"","first_seen":"2023-05-02T01:14:21Z","last_seen":"2026-06-07T01:05:18.949166Z","times_seen":575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"125da0749932d9ddfa3767638383abf9","sha1":"69475f56fbfaf7859ebad33ac1be371b36b200cc","sha256":"e7f3fe59be4fbb3d95650bb24f407f1f792eba6eefec0d970d5d7b2bde669b64","sha512":"b79295099f7b09d8fb8a03a8f1e8664814cc5a73c07c695a49e623b15e1bc153769cecba4b9e37f39d74b246962cf5aa16364df982a34426163e5c2c4c768f18","ssdeep":"","tlshash":"33c012281082183bee0232451504170724704d8814074d8d02d5dc00cde1c094042e06","size":177,"data":"","first_seen":"2023-03-07T12:02:32Z","last_seen":"2026-06-07T05:51:53.205713Z","times_seen":4257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"f25b4bd043a21d3c0b789db7c0dcb4ef","sha1":"41689d5a09ef28debdf3b0dad39d8ae3601d014c","sha256":"6ae447e40363a7e50cf54c15d7da56196dfe7b6d1c9f53d5498b2744410d6ab1","sha512":"09c7960815a282a0eacb94254dc8532d2cf761ff1deab9b9c658032e6d3192f33428e758e3848b3e942e304b55180ff91301d350001578331fb62e2b9da727d3","ssdeep":"","tlshash":"21b0121d06024991c0d612ba1542020001fe901d9039c76cbb3c439c3f421ae6fd18a7","size":104,"data":"","first_seen":"2023-10-22T16:22:44Z","last_seen":"2026-06-06T05:06:17.119651Z","times_seen":721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/themes/generatepress/assets/js/back-to-top.min.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fc35421139ef9851bc72d3edb90cfba","sha1":"0091cadf005c865d7c4ef093fac9d35566fd1e48","sha256":"3310986e26439bd35318188bd35b0c326bd3334e6699ca0469fd4f0b7d497098","sha512":"0fda88fda5b8a67c7b750712da3543e4572cb89565284cf1cbffb1ec0927f21626ff78d6fe9fa4ac13ce9f780ddc0c36ca46fedeb1c2e7f754573d7acddc7432","ssdeep":"","tlshash":"0401d0fd1190553514fb8695739fbf41393120a686039411812ccca0f5a8ce7f912bc7","size":737,"data":"","first_seen":"2024-09-02T00:59:07Z","last_seen":"2026-06-08T16:17:23.316365Z","times_seen":4371,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3606e4db5e156a1b086bcfeb3b2d9b4","sha1":"23220c5385d52aa1226568fa61390fae99b9c707","sha256":"e923165e0466e69b1e37ea031843f07029a2b4ce2f7aa133f807f020fea53217","sha512":"400a8d14e0e971e0f3077e6044426bb9f8ab3e542169a3ae71b4c046ab461921b2d2f62b402708311f8905f69c4c9cf13e081a624ab2fa8da666ad67e3a24b28","ssdeep":"","tlshash":"56d012183bdc462c053573153bfee2553d3575497082944e4784f4741de4e63ec688b7","size":290,"data":"","first_seen":"2025-03-05T15:00:38.97335Z","last_seen":"2026-06-08T15:23:12.218576Z","times_seen":17903,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/fxbot-registration-form/assets/js/registration-form.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b726f5f5ebbabd8a23da41ddb777bc2","sha1":"1e496c70f38413337b092caa4ec7b32bc040c8c5","sha256":"888eb75cb6a5a676d4781b6061383dce54ccb4d23cdbbb636a0dab22a79cb5f4","sha512":"867b6dc7df0c373a281fbada54084e301bc5e719839ae144778007c1d87afa89e83805a813bbad4cc9acb3464932c8e37a934ebee31967e7387ee52d58377ef4","ssdeep":"384:PpKML27MoYj1dgLYikUDyks/DckDOFHL5VCAdwTRZ03eSf8e2vwQ3jETKGp+eWC7:PfL27MWLB8/DcKOZfG9mujB6QltY","tlshash":"0f3362585da700b15ab36afe6fdf2202727490477848cd447eaca3841f88d9627f4fe9","size":52663,"data":"","first_seen":"2024-10-04T11:14:09.137195Z","last_seen":"2026-06-02T22:41:54.980991Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-includes/js/jquery/jquery.min.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-08T16:34:56.476764Z","times_seen":895671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e16ffdf86b233890ae2b8222ab57814","sha1":"d60106368d2e640c92eb67527192911c4993feb8","sha256":"fdb4d0170e36bf46e6d8da00ba33f0bd2a1857f4d2713eaa13031a37bea405fa","sha512":"e1429ba70682bd4a9f59f3c0bdd96c483c061a18f025d03c493929ec0780cc12e60b8d877eac526f2d6455fde0d272ddebef10e50334e7be1e1ef692a7ce170f","ssdeep":"","tlshash":"19f0811905130fd1c8f252fd6bd6252580b7a08ef439a52a721083443f9aaac33a2bc7","size":604,"data":"","first_seen":"2025-06-13T23:08:31.057182Z","last_seen":"2026-03-14T08:46:57.258554Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b78b28b396646badfc6017235ee4be9","sha1":"18103240bf0cb760cdf7febc628b56b8fca44319","sha256":"215f517010a20f2f4c55d34dd3c574568bd0fb83662f0b915ddb6561f97c3904","sha512":"6b82e20e99e8a57178afd50be19a2d5ecbf7062879808d851b3b5aa2b0a8a629ef06413f19dc9a6cd7a22d23e5d67e133fb70ff8030e0f6d6a494260d0085739","ssdeep":"","tlshash":"a9d0123a6b562b320997a7a266efb7413b6306b564c105135c75c8892f34dc981754ca","size":260,"data":"","first_seen":"2023-03-07T01:03:19Z","last_seen":"2026-06-08T14:02:17.585177Z","times_seen":8313,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/themes/generatepress/assets/js/menu.min.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"67148b2ff82038d0faf6385f182c5644","sha1":"7452d643e468caf6db8ecf07618f1cb7ff3f7651","sha256":"5af760e4297b064a2150dcd5f63d748a06dfa8b618c9e9d43a87c4ac74fa3974","sha512":"24cb8e3c4f17abc7cf1ba96407ac1eda4e6c5d7c669ac213024a9b428e19cef574cefdb06c4dd28c013f1f8d3c775fb8f98c5a15c142783ba0f25b46f0c6e7ad","ssdeep":"192:iQqHlWQZgROnqWgpkgJMhqDi92FY+alT/fnGtxTbvm:bqHngROnvgJUqDi9cNYTnGvTbvm","tlshash":"6ee112fa964412bb04ef29ca74e6e5c07b7568fdea0184302579c84d1fe8dc202e6bf5","size":7333,"data":"","first_seen":"2024-08-31T11:00:29Z","last_seen":"2026-06-08T16:45:48.19178Z","times_seen":14881,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-08T16:34:56.510304Z","times_seen":825532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"26909cfee4ad69861654476cc84ae9a5","sha1":"71f267bfb81a8ea66aa934dd29833965d7df1c88","sha256":"84f28dd8d2ffccd5f1667989378ef32f97e118058f8306bf4cdff127698e7468","sha512":"eeab0542d3bf14f67c87671615e886afe659decd40b0fab964b6e55a21f48da57eacf9b56e31a1c8bc7502cae3eaa4e378a372607c861cf5d2a20a98bc3c0e80","ssdeep":"","tlshash":"f1b0120a901b449200ec1306c6863d577730004240216c50cae9de144488f3539ef160","size":105,"data":"","first_seen":"2023-12-29T10:54:45Z","last_seen":"2026-06-07T06:47:46.052181Z","times_seen":1587,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"83c9ea86dfd80d6ade73ba46b45fa3cd","sha1":"744eace95c549ce265fd8b1b06540168c197e75a","sha256":"036d48665143fe3646556da1ba054956b6794269223a9e8adee5b58761c82352","sha512":"b265281edabe18ea65240e64c0ec40cbcfaacba53b4872c5d10302ba0d6e8067a7da820a9da668dc4267530be9ecf171403faa5eddee7dffb5ef5e8c041f52f6","ssdeep":"","tlshash":"09d09766097588303398010ba0b3d3d4213120603721aa0180cccc2baa20ec304a2868","size":236,"data":"","first_seen":"2025-06-13T23:08:31.059101Z","last_seen":"2026-03-14T16:55:09.145461Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"e891393f0be3a6ffaa3923b307180e7e","sha1":"bc0a7332b9846a5762a71b9b9811c1a8b19df194","sha256":"2d1778345d3607ceb641cc5f21b0a2c045fa70052361ac91a17c39b2c9d96f71","sha512":"12674ec69eecfa043bcf9ee8529e5ec274a1bb55e068a2ae64a91d6362997f7e532325c77785b1bc980f42592cadbed487549bae0a5298077cb1cf9c02ff589f","ssdeep":"","tlshash":"eeb09b6c51439a33c19266445384d423e07509dc420d881ff195d0dc6945da31ccd457","size":127,"data":"","first_seen":"2023-03-07T01:03:19Z","last_seen":"2026-06-07T05:38:34.235217Z","times_seen":4517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"bec9c700df243a74235f459eeaa0d9cb","sha1":"47c8b6aff8817c560284ab7f629d1fb9903a4391","sha256":"b419ddf3962f2f32b55824f2bc29e97b342f8df820c6913c9f58e91cb1608df8","sha512":"a07708e0fa26478c89c7e1e0a70398aaf01c3df35e81c8c61bd3558190feea7f9eb5641a7c25cd695a7973fd3b49b2ded69c4666e4dedb31161cf5df4ec82805","ssdeep":"","tlshash":"cc900471d405443145d74d0035c04014f5fcd414c5cfc511fdd5d545d351c00447d140","size":46,"data":"","first_seen":"2023-03-07T01:07:33Z","last_seen":"2026-06-07T01:46:08.518264Z","times_seen":2001,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/generateblocks-pro/dist/accordion.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f0dca1f568a14abda31066cd3e1130b","sha1":"d7b6e8221ca9adfb8f6c430b71637f2578622e8e","sha256":"06d9907bf48800dd230dd600f47257042d833bba131a47cc047ed4293c0fe903","sha512":"fe71e1d0c92e5a2a46ccdadd5f467f28353a8b23e71daac747ae4f4ac4c807e88199a3a616ee1f3d3bdac6d3931b55b5285d571ddae5be6334bfa4d16dcfb5fb","ssdeep":"","tlshash":"8e51f020885c2f7314d3bdd552a29f9d397920f5f50e44583a39e80e236ea402dfb3e5","size":3108,"data":"","first_seen":"2025-03-09T06:57:25.109128Z","last_seen":"2026-06-07T12:12:16.434014Z","times_seen":304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/fxbot-registration-form/assets/js/utils.min.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"12855fe710661551c42e95a9c9290600","sha1":"72c56f9f3584405934289059ccd5ed678ddcb00c","sha256":"df0797876b146528f534dc356f34fd6408384ca47baae6ecdfcdf0463294f142","sha512":"70cfb09e51c3e5423473cd6332be0e45ce739f57d2356da4e6abbcec6402f98385e29809d91c8294fd5fbd9662c8cd3c79e577da01d736fc1ee08341a3c3001c","ssdeep":"3072:yxJ0MDz3ojrs3OwPl0n04Xl31AfO+2x1+w+Whnz6RNC7sSUrVjHoLOTpCAtQ594F:yxJRDY9lx1+w+WwugV","tlshash":"8c34ceebda3c9736a1d97b35968eb3cd5a8cbc93c848567826c3b54f53788e0706c205","size":245226,"data":"","first_seen":"2023-03-08T11:47:53Z","last_seen":"2026-06-07T04:32:14.180939Z","times_seen":622,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"6706eb6a8952f07bff3cebfdd40a5fc3","sha1":"822ebf174d6a2fc7a8b1b699dd703254358eef6e","sha256":"417a88e55af6144b6e3304a48140f4becc191f230998038267143dbd4a1f5f14","sha512":"47dedf4e87120eeff718fb89394568e7955fdea424d4b330b049b31cec8b9269f44d866bb28087269d880ba63e66f5703ae843139dc49dd158446b1d6f6d33a2","ssdeep":"","tlshash":"801100763b2a5534dac5808b31bee7a93d3260317b02a045c26cdc289d18e8714efcbe","size":921,"data":"","first_seen":"2025-06-13T23:08:31.062122Z","last_seen":"2026-03-14T16:55:09.155231Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/fxbot-registration-form/assets/js/mailcheck.min.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4950423c548a646372ae58f7bbe67d1f","sha1":"f54943150a9cc3db37bba49e9abb8f1206b8b12b","sha256":"ab69f8053e420d7f3c043b55a1bfebd9981ccf92c21b4fd823031ab51967323a","sha512":"d5a096ca163c2767e6740c62681b3b6b0ac6f0e8bf2dc782beb956f81272d5ff49eb05d45231ab2e932a1c49602cca77a6be1f7c645b0f14d74111a4605e7d99","ssdeep":"","tlshash":"cf814051a2a12ca599b060dd388fb445a47aec252b8cecf8f654aca15e3471070fbced","size":4015,"data":"","first_seen":"2023-03-07T12:02:36Z","last_seen":"2026-06-07T01:05:18.949837Z","times_seen":644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/disclaimer-popup-image/js/disclaimer-popup.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a0bb645842026c096992e0ff3befe74","sha1":"1a6de875cae614cd8931e71e24688377d84b8f38","sha256":"70f37367a704e4b2a2413eb64252afc0bcee3599a0fb3177b59342da5205fca1","sha512":"f37a5c717936ebeb2f09097fb7894a24afe1878d84a2d0f62df2b49c0569c7965b81bca611e4e2d6d6131cd435f254c79e1572e62b11bbd86db91e205ac47f38","ssdeep":"","tlshash":"2831b84839e3162051abba7e2b874b44783010033118d958fd2c87a1afa0c5698ff6ef","size":1741,"data":"","first_seen":"2025-10-17T08:17:18.850106Z","last_seen":"2026-02-11T20:36:48.993657Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Inter%3A100%2C200%2C300%2Cregular%2C500%2C600%2C700%2C800%2C900\u0026display=auto","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css?family=Inter%3A100%2C200%2C300%2Cregular%2C500%2C600%2C700%2C800%2C900\u0026display=auto HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 02 Feb 2026 14:43:54 GMT\r\ndate: Mon, 02 Feb 2026 14:43:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21357,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"787a45188d51c7f3cdb55e9c60662eae","sha1":"38b7694ca27373bddda317155327ac89c4422f6b","sha256":"8d333d46730f094bf6a18804144c2c2cc72578202ec607775e99f31c95714c91","sha512":"a933834658c26193f0910a4a50ef0875758d2f68082e334eef2cab48b746a4a15160d222e03dd54b605f56618f48ab05d7246aef02501154b1a0e0e2090cc41f","ssdeep":"192:W7Nm797K7O3t737xY7rNl8RO3MixzANineO33lxopNP6TO3Kkxx2NkdIO3tPx+PR:Whm5W4tDyN/mkYVOKczmIIpO+k","tlshash":"92a26b92002be40067931dc363cf7e39aece5088a086d5796bfd1dc99cead66537436e","first_seen":"2025-09-10T23:38:39.81453Z","last_seen":"2026-06-08T14:48:03.854416Z","times_seen":2824,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":143,"dns":0,"connect":7,"send":0,"wait":22,"receive":0,"ssl":178},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/en.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/en.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-50a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1290,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf165af749d574a25a1a29f31b0ed692","sha1":"fd1663941236e3105b46f020e0e23913452b2585","sha256":"4c5edc0c143fffe3bfed4126d2b3527e6e21c57499af43f9577b45c6eb93e598","sha512":"4475c426f875becb9e1e5453c165ed5d60f78f6f33d0ebc646a8e9deaccd4b2e7d5a7f56b7648a30db234451909763ee04c2b46a2a5bf79c3259c621ae0d863e","ssdeep":"","tlshash":"0621ddd2495459c08d8a037c9f1f6bdb72335cce3a584af832d53a165d90bb7341ad85","first_seen":"2023-05-07T18:02:32Z","last_seen":"2026-06-08T16:07:22.040008Z","times_seen":8305,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":295,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/sv.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/sv.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-178\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":376,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d7b2e74f61e873c0fb690155956025e","sha1":"b515a34c1884d45ef9a2b7f3ebdf731a0613e1c8","sha256":"4a271da0e5fbcda6d2d15092d8a564e8ef3d36ad507215563ac2faa0e8833001","sha512":"e2ccfb1f70a37129ea1a51b5e143e103904df03d6dfd5966f169d13222bd87a2d54b1ec21ac28ef3ce09c1d853f07c16eae7190c263c0e250506ecb8abdff54b","ssdeep":"","tlshash":"97e068d0902ec60a9e1507b95fbc70ca4232b08e298e00fc70c12528f49e7cf2810bb9","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-06-07T06:17:54.761269Z","times_seen":5231,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":211,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/tr.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/tr.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-208\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":520,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7af14a6fd5253f05724502662d478fac","sha1":"df6f03167492046dd2f02e3e005e66201f80ceb9","sha256":"f101fe5cf7c2fe25bb1d2c7efcacb8acb52c90561497576f2f16be8a5d628315","sha512":"a1b4e0fca3d92adf4b6bd1473bfaceb5d1877c682378f84bd862e54927c9bea34b0781cb4e1cc5d44ce637887ac93a30465496e63b94169ac15cd1c155396802","ssdeep":"","tlshash":"c2f0c0d91a78c4ddbf4647314d3db0d92639209f399900b830c96529ea6a24b2401904","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-06-08T05:43:28.810906Z","times_seen":5151,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":206,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/disclaimer-popup-image/js/disclaimer-popup.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/disclaimer-popup-image/js/disclaimer-popup.js HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-6cd\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1741,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"4a0bb645842026c096992e0ff3befe74","sha1":"1a6de875cae614cd8931e71e24688377d84b8f38","sha256":"70f37367a704e4b2a2413eb64252afc0bcee3599a0fb3177b59342da5205fca1","sha512":"f37a5c717936ebeb2f09097fb7894a24afe1878d84a2d0f62df2b49c0569c7965b81bca611e4e2d6d6131cd435f254c79e1572e62b11bbd86db91e205ac47f38","ssdeep":"","tlshash":"2831b84839e3162051abba7e2b874b44783010033118d958fd2c87a1afa0c5698ff6ef","first_seen":"2025-10-17T08:17:18.850106Z","last_seen":"2026-02-11T20:36:48.993657Z","times_seen":5,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/da.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/da.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-16a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":362,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4d7abcf4c21c729ea9aab45faa1912a","sha1":"6ecbf40cb392204b8c7af284352108b500111969","sha256":"33815e73a3d07b3ae77cec1fdc77a285646e4e730136632f0ff5de6f8697c98c","sha512":"6d928963ac9562306e34f006030ddb4430cf81f3e37d8a5d805f90d5cc89659457e9f98257a2ec971205cf044387b7c3e87847c85bf7760ecfa2b667bdab3230","ssdeep":"","tlshash":"f6e0c09260ae8a0d4e1543205a3c70e2526770cf218e04fcf0c13e28fd667ab3800f5c","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-07T07:55:40.060019Z","times_seen":5110,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":288,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/fi.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/fi.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 249\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nETag: \"68a1d1a3-f9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":249,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d1724c02c151d1f44b22d5c89e199c54","sha1":"fbb67ed0796f19c50d9354ffa54a0103d33049b7","sha256":"0d9fdf20d3b93aa471132ea660f36e3331fc137bb628121caeec33e905a2a33b","sha512":"b25f8b249311ea474d847f05738c744e4b3590a79c6859db8b7cef67f7e50c234ac86b2eedd86778cfebe26fce6f376b93e202a0ebf7b519700a87b56302a741","ssdeep":"","tlshash":"8bd05e9690b96a044902476a8dec76da6026a0e6668d01fdb0811525f6893df78a36a8","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-07T07:55:40.077745Z","times_seen":2189,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":313,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/de.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/de.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-14f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":335,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51768606d83a265da9e7ee8efbb21edb","sha1":"b22c5b98344da8d3ea54ecb9baab4c5a5a7ebdb4","sha256":"8fcaa96d8835e39fa6a74ff4dc781d908112d46ceb8fb81ff37c433f390a4c8b","sha512":"cec42089404b17430bc0d8c7882cfd6249d4fa7401b538f1899b2d315d639cb6fd28cf33da34d91afc40572f5dd59aac75dee16b0c65aa1abf2e0b93bc779c3d","ssdeep":"","tlshash":"a7e02644e0e98d0a8e2607a88efc71d280a230cc12cc00ed72842528fd4e3eb6845be5","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-08T14:45:31.469069Z","times_seen":7912,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":144,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/pt-br.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/pt-br.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-c17\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3095,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0c3ab5184e7b7429a458164488ad3704","sha1":"6d5780433cbbd4b3a6f25c791a8ba59bc726f862","sha256":"414878d5f95d09d4b5e65cdcdda185c7be3c775ba366add3b36d31479707b926","sha512":"1e2faead2b533933f5f266bcd4dd70c35e4a6e1f856d06679898a592cf860c7b26a514ea3366d41f12e78581b7ce8a40543725fbe1dcdc8b69d172a813316c56","ssdeep":"","tlshash":"655176997458238ca48eb76dc7fffdd1034e34a6308086a5dbef63e8584a291fd6a114","first_seen":"2023-05-10T09:01:08Z","last_seen":"2026-06-07T05:51:53.102599Z","times_seen":791,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":210,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/uploads/2025/03/krakenimages-376KN_ISplE-unsplash.webp","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/krakenimages-376KN_ISplE-unsplash.webp HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/webp\r\nContent-Length: 49194\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nETag: \"68a1d1a3-c02a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49194,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f0a0e3e1c3d403c706b5b022f9833ea9","sha1":"9d498a5d09e3128bb9d99099c8294838695bd3bb","sha256":"19bf48523d23ac400643361d54e07a6fa32d01eaa60a99710670c922ef824b37","sha512":"35e74ab3ac360f4aa0e6758017cfc8397e355fadfcaaeb70b582049981ee7ca5b0caa3f7a93dce67fc2362abd76b6662ed41c7ea05b9918fed5d05f0db63e586","ssdeep":"768:wCssdwo98W5tjcxNHYkFvdQLMYULFzB2CwVjCt5Bm2Ei1545u6WWB:oQCHlsjwFVxwVutHEIeuvWB","tlshash":"d123027076a16a40d6392f350e808d1728be867762c3e143e17519f3cae709e57ee3a9","first_seen":"2025-06-13T23:08:30.999404Z","last_seen":"2026-03-14T16:55:09.087258Z","times_seen":43,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":381,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/hu.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/hu.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-167\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":359,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3621c5eb449691cbe1d3bc8757c831a1","sha1":"e7e3674fe42359cc9a376e543d7548418071aea0","sha256":"2c1380bd6fb1a88cabcae439eaf960d4dffa929a74cfe3d44f7552084fc1150b","sha512":"7c66bd80019b994685400d020e37d38ba3c45ee3cec449b83bf8a2e8d08d346e03d6245e81f9b868eab42325782107cbf837f3c057efb2c83a5151b22b1104c7","ssdeep":"","tlshash":"61e0d8caa9e9c90e9a1947694eed71da416270cd21cc01fd71843528fd4d3ef2411764","first_seen":"2023-05-29T23:05:28Z","last_seen":"2026-06-07T01:22:48.646871Z","times_seen":4981,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":143,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/ja.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/ja.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-165\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":357,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b072ff9b575b2c9db1f40db4a8603ea1","sha1":"56c055fa39d04fdfbf8ca59c3186b982e301bbf2","sha256":"3cff261749f98b839faf4cbd34b7748daf28ed5d9377f3cb9929d6cc506665a2","sha512":"9a42eab5c883210142df99507c2cb0d4a2b8bba9cc91d87440039f0cb340d010b5137066ae28269ceb59e23b5901528506b4f3af4b49eec1ab405f1629a76a4a","ssdeep":"","tlshash":"a0e0c060a0ecc94c4e098b640b7c70d041a670dd268b01fc748c2668e98ebc77811a7c","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-07T01:48:05.864333Z","times_seen":2326,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":140,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/pl.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/pl.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-136\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":310,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"73699780fe17013ad360d5441cba044d","sha1":"3e37c78fdc79aada415a05c2275c0fdf9664f062","sha256":"e03d57c0f7db7d4dc8eb6a2bc359f3a40591b490130bcfa06fba08d514fbdb07","sha512":"94ef034160ec61a32cd5ce34621c993aa3a14f0fd5d60adb807f7c3c116060d45956297c0213950824c0886292669cfb2aec40c110e32e43049ba733490f6e4b","ssdeep":"","tlshash":"c2e0c2d5a4a9ce4e4e1407758ebcb1e9917270df218d04fc71c52a29fd1e38b2811e99","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-08T06:21:11.24608Z","times_seen":5464,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":248,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/generateblocks-pro/dist/accordion.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/generateblocks-pro/dist/accordion.js HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-c24\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3108,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3108), with no line terminators","md5":"0f0dca1f568a14abda31066cd3e1130b","sha1":"d7b6e8221ca9adfb8f6c430b71637f2578622e8e","sha256":"06d9907bf48800dd230dd600f47257042d833bba131a47cc047ed4293c0fe903","sha512":"fe71e1d0c92e5a2a46ccdadd5f467f28353a8b23e71daac747ae4f4ac4c807e88199a3a616ee1f3d3bdac6d3931b55b5285d571ddae5be6334bfa4d16dcfb5fb","ssdeep":"","tlshash":"8e51f020885c2f7314d3bdd552a29f9d397920f5f50e44583a39e80e236ea402dfb3e5","first_seen":"2025-03-09T06:57:25.109128Z","last_seen":"2026-06-07T12:12:16.434014Z","times_seen":304,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/uploads/disclaimer-images/disclaimer_en_desktop.png?","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/uploads/disclaimer-images/disclaimer_en_desktop.png? HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 69627\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nETag: \"68a1d1a3-10ffb\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69627,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 450, 8-bit/color RGB, non-interlaced","md5":"a6b1fc109bc7d1c74ea1139eb4376122","sha1":"7036277e3f95c975a673492246e9fd9d4e2b0b50","sha256":"773058969bd342ec737feb7875cd30d8b32857bed326ff3ef2166ef0cda74b53","sha512":"797ba4e140467f6a678d5b90df7b70f9f640b70958724f655cee9a3ea6625c709d75c3a4c2e6f99f0a01e60aa77f797e7018b7e3bc4cb7c5bb90bbf87a6f54e0","ssdeep":"1536:3Ugp7rRzrZz8Z84tKBBIITRXIeUZYqmd+ri:3vppRYZ84t4BvTJIeUMSi","tlshash":"cd63f1db486feccf1954f1306e1e187105bf13b18c8a4972a311eb2aada545bd0caed5","first_seen":"2025-06-13T23:08:30.980165Z","last_seen":"2026-03-14T16:55:09.124257Z","times_seen":43,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":208,"dns":0,"connect":0,"send":0,"wait":31,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-102\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":258,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"886011711ae972cd8472eef5eba5c298","sha1":"6e52e59dfcbe911b4ab1a69036e1e3b930030c7e","sha256":"4b9257e3e9c959214ddfab833a69a021ae6557403efe76afcbee259621175274","sha512":"5e17e37f001b253f9d78cfb212966299d30f99494a36580447d2a420a19c32f0d7c629e3081b9a7a8c5d63ac263a47fd907ad24c9642a66558c790d2f4b6b4d6","ssdeep":"","tlshash":"c2d05e50cad26638e812a055188843712bc01f28cf9297036e1b2b2fd81636bd8b34b0","first_seen":"2023-04-06T22:11:30Z","last_seen":"2026-06-08T16:13:12.974924Z","times_seen":19108,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":19,"dns":0,"connect":18,"send":0,"wait":44,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-122\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":290,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"f3606e4db5e156a1b086bcfeb3b2d9b4","sha1":"23220c5385d52aa1226568fa61390fae99b9c707","sha256":"e923165e0466e69b1e37ea031843f07029a2b4ce2f7aa133f807f020fea53217","sha512":"400a8d14e0e971e0f3077e6044426bb9f8ab3e542169a3ae71b4c046ab461921b2d2f62b402708311f8905f69c4c9cf13e081a624ab2fa8da666ad67e3a24b28","ssdeep":"","tlshash":"56d012183bdc462c053573153bfee2553d3575497082944e4784f4741de4e63ec688b7","first_seen":"2025-03-05T15:00:38.97335Z","last_seen":"2026-06-08T15:23:12.218576Z","times_seen":17903,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/is.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/is.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-1c1\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":449,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0950fb9089c4f9e32fb53b8fdaaad61","sha1":"0a946bcdfa19977da80126e7e213e262344c4f29","sha256":"b34f812ef46d9c15b14560edcd00d6f5a1a77a381dcb8e1414650f18dc963402","sha512":"5c10b956eb874f5dc01bb5d844ad9ccdc77ecdbb2222836bbac8debca42e899b98ad0384bdc4652e56c5e739fd6d89aaa3585856febe43c5f97e28205c17c64b","ssdeep":"","tlshash":"aff055a8e4a485c98f180739dafcb0d90132309e129904fdb0c13f1dbe0d79b2424aac","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T05:06:17.077865Z","times_seen":438,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":142,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/no.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/no.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-1c2\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":450,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d239e3431bdf290fb60f3ef98373fd05","sha1":"55ce2a571994789df85b7a51460220bdd282cc9c","sha256":"20a3b291b4d0d16bd2024c875924764f540ec2eebdc806a2852be000a6106035","sha512":"436d8977bd5e1a46ce8b8e2088d1c5c38c754bd6b43f3755d4f9d7d5839dbe043db4357bd03a3e97e9f76fdc5671f5c899f268d7a76c43dab9048595f0871371","ssdeep":"","tlshash":"20f055a8e4a885c98f180739dafcb0d90132309e129904fdb0c13f1dbe0d79b2424aac","first_seen":"2024-08-19T12:43:40.784537Z","last_seen":"2026-06-06T05:06:17.083573Z","times_seen":346,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":165,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/ro.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/ro.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-160\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3459066e38308492a7ac98271d7b034","sha1":"bdc08d8b6b3a4ab7eef55fb2b73028001f045581","sha256":"3244688e345eb37de4069b23d32d91b59ecb2c28a14e38aaa4e02678f5d0bb7c","sha512":"5e68e1f9adf42375f8432dfc1a5b8a5f91849b2e3fdaa7ac1de0fb111cce8d61daf0330cca3137ae1ee66e20ba12c7e135114bb565b5f711cc730f8db4e20f81","ssdeep":"","tlshash":"00e0d88595a9c9094a1603795abc70d65123708e158905fc74c42514bd4e79b3c51aac","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-07T01:22:48.591423Z","times_seen":4991,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":190,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:54.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ethereumcormax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 15:23:48 GMT\r\nexpires: Sun, 31 Jan 2027 15:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 170406\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T16:37:02.816763Z","times_seen":206265,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":20,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/uploads/2025/03/cropped-logo-32x32.png","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:54.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/cropped-logo-32x32.png HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nCookie: wp-wpml_current_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 797\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nETag: \"68a1d1a3-31d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":797,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"1a97400915f2ee665ec54f7b7d3c6128","sha1":"ff5edb223472d9ba4d5509e3e9f18fc88362bb23","sha256":"b71b6e8a28ea44a4ef8e96ccbc8c8d0b7a6fe9aecdb0b2febd229606837bb1b9","sha512":"350a10f8a9c71b7686b53b324a0297af030cf0d2481cb3a863507a740b04edead3f2fad9688ecf8507c11a7342cec80487aed65bbc6069e0e4bed8dd93212add","ssdeep":"","tlshash":"cf01c5a2e1a21156e31a8bf5cc050a38e8c7cd11e032facca525d473c647aa8f04e10b","first_seen":"2025-06-13T23:08:31.031828Z","last_seen":"2026-03-14T16:55:09.08252Z","times_seen":43,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/disclaimer-popup-image/css/disclaimer-popup.css","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/disclaimer-popup-image/css/disclaimer-popup.css HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-67f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1663,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a053c1affa1e62142b339371cd97d159","sha1":"565741e7d18e642d09c06f33445e3a5dffdb2880","sha256":"651032308439ad6396b844db2abc82103ee1586e16cc1fde3cad319fb9727161","sha512":"9719b8d3f586c64d7145edc48bb295cb04e487e4bdb9a92b3eb8f0b75f8cfbcfb90b9ba1c065e59834b272afbe69781bd41bd3d6a56785265dc777f37d494cc6","ssdeep":"","tlshash":"4431905616e33505f51981689ff6cb07311c90c3614addb83e98614ccf88bf8d8657de","first_seen":"2026-02-02T12:24:16.468392Z","last_seen":"2026-02-02T14:44:18.996233Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":19,"dns":1,"connect":17,"send":0,"wait":35,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/hr.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/hr.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-97c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2428,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23ea3f2c9b976eb82c1556881543ec7a","sha1":"df83b819176d4e3e12e59345ed1bf94c59f01d37","sha256":"888b95081206a0c3488cb21d3e8b0b4fb98491f80931f39587dced1b04700e96","sha512":"0aef763a990c73e9cdfe0882de104968403bd25274fcea85ccb46c8003e6414dfdcd7b43ad6f315c3a7207380c0a4f6a6d95334cc1a8517fb29180af06fd5042","ssdeep":"","tlshash":"c741f0cb7ad0b468cc9fe7acdf0b70e1231750ee7b7704e45559672a2302a8e5a14fa0","first_seen":"2023-05-10T09:01:08Z","last_seen":"2026-06-08T08:05:43.385779Z","times_seen":529,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":259,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/fxbot-registration-form/assets/images/regSuccess.png","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/images/regSuccess.png HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 4251\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nETag: \"68a1d1a3-109b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"4cd1d4874ebef5120e63efa1c66278dc","sha1":"3648f90f2ccc2e8ded42794dc0c0a363fc945527","sha256":"caae22c3dadc5664eff10a1e3d0a5959bfea87d28f52f03ca4f3d7ebf560e5de","sha512":"783589d822d0061de8cba5d2f0ee536652658ed258c3c280e7f5c6185b27afd27341ead4b9ea332f7de2542d1199cf4c48e45a3dab23989f1bcaac947c85f691","ssdeep":"96:MV1y7p9Ua3aCNlllyBf33Pf3h03Pf3+238J+tjzrs2f4Qk5O5DN33a4t4dUNxWcE:FAOaCNlllyBn+W23W+tjXs2f4X5O5DNI","tlshash":"2291c6ac40ecd767e9430d7497fa612edf6eeab31474c123ad94b6fa8b54240d012536","first_seen":"2023-04-30T21:53:58Z","last_seen":"2026-06-06T05:06:17.071565Z","times_seen":750,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":352,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:54.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ethereumcormax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 15:23:48 GMT\r\nexpires: Sun, 31 Jan 2027 15:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 170406\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T16:37:02.816763Z","times_seen":206265,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":148,"dns":0,"connect":0,"send":0,"wait":22,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/fxbot-registration-form/assets/js/intlTelInput.min.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/js/intlTelInput.min.js HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-7362\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29538,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26958)","md5":"0d7765bae213b8cf43ba5f06960055ec","sha1":"b97311bed465062adfe3b0f20f363441be2d4881","sha256":"e889e4e37ac5bce51552e6432402bad41853158bd662f41bbc50acceaff5a1f6","sha512":"a8d97281baf2c7924da3a90de1f08bd44f2b090fd36a0930c0dac7d58b85f80463a35abfeac55205f8c7ae872c28af0a0bd04c1a6aaaf1232a4b8b446020b9df","ssdeep":"768:0sqD7GzOoS+D45YMJR3QWG6UdC8OxgtmKg3vTpzaDvCYHJ:CfHQWodCjgtmKgNzazCU","tlshash":"78d2099973551237a89aa0a1687f16472ebf30015a84cc9cb87ecdcc1feced9a1b5734","first_seen":"2023-05-02T01:14:21Z","last_seen":"2026-06-07T01:05:18.949166Z","times_seen":575,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/cs.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/cs.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-176\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":374,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0fe0a2e4225eee5dd8a3c73a5ab5a312","sha1":"c930c1341640bee697cf50053721ddfd750dae2e","sha256":"2a3a7fa3da584643cbac6234aa452705982f50454ed0a259d8c8cd6a9c2fa8c8","sha512":"92390117a5b345c7f9123d5d06839d95959664b32e621961e0d28a353ee515df51a446563354cf9f3911acbd0032a0fb61b1ca356250262157aae05dc907fe8e","ssdeep":"","tlshash":"80e06889a0e88e094e1803b60efcb0d5612330ee208d02ecb0c06619e9197cb2808ee8","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-07T07:55:40.047098Z","times_seen":5070,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":322,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/nl.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/nl.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-163\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1932756ac7767c2f33986237417d8731","sha1":"84a604da4f8df24af728a73685c4cc2cad9de962","sha256":"8ca8a2dc879e29edd00a08bffc8d825f67d0988e55538d52e43861bb3af22f83","sha512":"9138b8b056aa4c5a5e0179ba58175ec8b98b2aa66b2a9f0bf17e2defed3b441f9f0d5d91a463bb45ed6f002c6e81d85730338890c3990a604677ded0bfdff8e9","ssdeep":"","tlshash":"d4e0d886a4e989095a1947694eec71d6406270ce218d01fd70853529fe4d3db2451aa8","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-08T14:45:31.52974Z","times_seen":6133,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":340,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/fr.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/fr.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-160\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e9efcfc75d8fdee9370032dc72e78bcf","sha1":"77d974568d91216054eee046c19c99f71cccb9be","sha256":"a7d195ab974d9555702eede5af18287b5767efcea5fc6dadf529e114dc6fb568","sha512":"12e0fd3eafb13d648d46f86cb8eeeea05e4acccceb2510abb4c888e07284de90503ddd8b3c02513d6fe84b6b66d6600039d56749f316d012cddd0d3d89cff8ea","ssdeep":"","tlshash":"1ae0d885a1a9c9094a16037959bc71d65123708f158905fc74842518bd4e39b3c51aac","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-08T14:45:31.562824Z","times_seen":7827,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":145,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-includes/js/jquery/jquery.min.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-15601\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-08T16:34:56.476764Z","times_seen":895671,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":37,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/ko.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/ko.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-67c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1660,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7deaaa44e02b9aea9fc1a7f8a70cfe34","sha1":"d2f42c97768727cf6f006ebc8671eb14d7f0edc3","sha256":"a920bc55182702e5ceb09b5750c765d2e0f4aee817a969f221e900e930fcb0de","sha512":"01a5e05b5dc523b0bf761debd10f716ad5f08421b429f9d30f82c838a6d56b49784ada89bad0fb3272b80e66186b987e84c7cbdae6458935407920bd53d986bd","ssdeep":"","tlshash":"4a31dec7333a55ba4c8bcfacd77835c0161d24f8152ae2fce588021a36f399e9905e50","first_seen":"2023-05-10T09:01:08Z","last_seen":"2026-06-08T16:07:21.99755Z","times_seen":601,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":183,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/lv.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/lv.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-12b\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":299,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bebccff3aeba51647f0dce95d6551d53","sha1":"b257a531d6b251909e3174a7820c24d19b54559f","sha256":"5e92000c8341f0ea10f5677f62c071202b412f252a361d79a0d4a7fa09910aca","sha512":"9599f34e6940dda7e11bfa46b8a095081c7706264686e31a4e72528b37d9a55d21997aa72ff26f3e8c1143fb9b889697a92fd0947a399b515c40b9facfb45822","ssdeep":"","tlshash":"36e0c291a8a9c70e5e5843648f7cb5d9413670cf618d05fcb5c4396da88a78b6890a78","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-07T01:22:48.674077Z","times_seen":508,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":182,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/themes/generatepress/assets/js/menu.min.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/js/menu.min.js HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-1ca5\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7333,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7333), with no line terminators","md5":"67148b2ff82038d0faf6385f182c5644","sha1":"7452d643e468caf6db8ecf07618f1cb7ff3f7651","sha256":"5af760e4297b064a2150dcd5f63d748a06dfa8b618c9e9d43a87c4ac74fa3974","sha512":"24cb8e3c4f17abc7cf1ba96407ac1eda4e6c5d7c669ac213024a9b428e19cef574cefdb06c4dd28c013f1f8d3c775fb8f98c5a15c142783ba0f25b46f0c6e7ad","ssdeep":"192:iQqHlWQZgROnqWgpkgJMhqDi92FY+alT/fnGtxTbvm:bqHngROnvgJUqDi9cNYTnGvTbvm","tlshash":"6ee112fa964412bb04ef29ca74e6e5c07b7568fdea0184302579c84d1fe8dc202e6bf5","first_seen":"2024-08-31T11:00:29Z","last_seen":"2026-06-08T16:45:48.19178Z","times_seen":14881,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:54.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ethereumcormax.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 15:23:48 GMT\r\nexpires: Sun, 31 Jan 2027 15:23:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 170406\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-08T16:37:02.816763Z","times_seen":206265,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":151,"dns":1,"connect":7,"send":0,"wait":10,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-includes/css/dist/block-library/style.min.css","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-1c012\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":114706,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59458)","md5":"8c9f31823282e4e056eb0aa7fac262a9","sha1":"dc3b1a37381e079fda8db59c1a9469852cd18b80","sha256":"3bb38d0f302677ff4104564454f60f495133579d6e6dfb722b3de850df596502","sha512":"39f239c875550bf9a31254eed1f0358ea3c6309d9fcbf6005d8852843eaf60bc20b8626d169f810a6c71b7dcdb769b8512314b89ba1fdeea2cb3089be9d21ae0","ssdeep":"3072:HaeJuf7Qg5MG7H+qehvP0x2pUk44Q03Pm:Qf7Qg5MG7H+qehvP0x2pUk4T0O","tlshash":"2fb3625417b4dcf935ffa73a5e4ee258a103aa41c68a67e7e066d190618ca490cf3f0f","first_seen":"2024-11-13T05:08:51.610493Z","last_seen":"2026-06-08T15:03:43.741961Z","times_seen":32067,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/uploads/2025/03/logo.png","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/logo.png HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 30064\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nETag: \"68a1d1a3-7570\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30064,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit colormap, non-interlaced","md5":"abcaad76f364726190d390d27a78caf4","sha1":"c24cc6e6e10b3be3fb91cfe1ec3420b19b58f413","sha256":"a9377a950a5c2598d88267244d11940675ab62290b49d1459bf853b9d8c152ba","sha512":"f95b66d1b95f60bad8ef3ccd9bffaabfc111c76996ac77aec285a000a44eb1438c4ee5f4a7fda4612bec2e3fd6b3d7090606d9ee0a041474fe68bc5d2c715367","ssdeep":"384:P3HRsdSTuOgi27o1h8uzCx+2bbAL/nges17prMElyiP4WVgwRamnSKVwsH4iOYLB:P6S727oix+w0zngB7x6iPLHpYiOsGSp","tlshash":"34d2d0117344a65eed3af3301b61c8d6f6dade90856e0f2fc1549f4a09bb24906fdc46","first_seen":"2025-06-13T23:08:30.986544Z","last_seen":"2026-03-14T16:55:09.141677Z","times_seen":43,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":295,"dns":0,"connect":0,"send":0,"wait":32,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/sk.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/sk.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-665\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1637,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ed3cf547a2f8579e45330fde3095537","sha1":"dfc6023844bb5a110c3d9219c82dd326940ae055","sha256":"c1b338efd99956c2ae0c62fcf559b2d956fa11f71751985d62c9942b061dad6a","sha512":"4ed0e6912bfa55a7bee5b4f6318c3878bff3bf23d5a220225b5e19d207d7f55bd816f06dfb8daf8a5eb4c2e266d0fcce8f40d0f797c81d97a2517e5eba2a3be4","ssdeep":"","tlshash":"193176c55178aa4849c7a76fde7cb8959015a0fd21f940fd7a4a470c956caceaf00cb4","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T23:35:00.234827Z","times_seen":4978,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":177,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/fxbot-registration-form/assets/vocabulary/en.json","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:54.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/vocabulary/en.json HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nCookie: wp-wpml_current_language=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-867\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2151,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"974c06c22e80fbf8fc59a64946494b43","sha1":"6f25ac4d1108e81458e684ff3cd2fdbd8ac32786","sha256":"1e4455cdccea0ee7e1e5d9e13c5b2be8b964c3012341201f22092952036489a7","sha512":"d8374ac71bcba7cca5bc8707297280283110adb04814c30e369d0e7a1c3c3a1a77487bb4b7090aa485ead581de29abdc3b94d987784caf37b580d158e2f7f814","ssdeep":"","tlshash":"0a41e115ca058d6b0a81009ab8a9365773a5509b8d9d381dbb28136e0fded6f22772bc","first_seen":"2024-01-29T05:49:51Z","last_seen":"2026-06-07T01:05:18.970737Z","times_seen":390,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/fxbot-registration-form/assets/js/registration-form.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/js/registration-form.js HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-cdb7\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52663,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"2b726f5f5ebbabd8a23da41ddb777bc2","sha1":"1e496c70f38413337b092caa4ec7b32bc040c8c5","sha256":"888eb75cb6a5a676d4781b6061383dce54ccb4d23cdbbb636a0dab22a79cb5f4","sha512":"867b6dc7df0c373a281fbada54084e301bc5e719839ae144778007c1d87afa89e83805a813bbad4cc9acb3464932c8e37a934ebee31967e7387ee52d58377ef4","ssdeep":"384:PpKML27MoYj1dgLYikUDyks/DckDOFHL5VCAdwTRZ03eSf8e2vwQ3jETKGp+eWC7:PfL27MWLB8/DcKOZfG9mujB6QltY","tlshash":"0f3362585da700b15ab36afe6fdf2202727490477848cd447eaca3841f88d9627f4fe9","first_seen":"2024-10-04T11:14:09.137195Z","last_seen":"2026-06-02T22:41:54.980991Z","times_seen":179,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/fxbot-registration-form/api.php/1/api/user/auth/geo-data","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:54.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/api.php/1/api/user/auth/geo-data HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nCookie: wp-wpml_current_language=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.33\r\nVary: Accept-Encoding, Accept\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Set-Token, X-Pagination-Total-Count, Date, X-History-Filter-Hash, Fxbot-Referer\r\nx-request-id: e04b1de99a34264033cbbf0834dcf51a9625d882870ea9772115fe0587aede6b\r\nset-cookie: SERVERID=w01-8888; path=/\r\ncache-control: private\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Np3WSAYoXmaNitduBSvxE7TcB%2BaEPa%2Blpkdx0F8XulJOfz3OQ4AHmmwcjQQtQOOZ0LseQ0gNac5yNp0QYQUsOAtn1b9D1GDhiDGAZdSp\"}]}\r\ncf-ray: 9c7a76aa1e7260e5-AMS\r\nalt-svc: h3=\":443\"; ma=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":142,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"ba6605f8ce4a76fdd292485f5db4c1a2","sha1":"246227e28c0a14aaabf929c7e98c665d793e9e74","sha256":"2c669cf713927c358adc95b5cec9769ea622db31736068a1d1f56428dc6ae530","sha512":"f19721df8dea725299aefd4e4eeeae390e75227b60eab6860c6e4cb8e237a0086da0d7afc316339aee2b7cb9c6cd70db0071559d873ffed11a4ebfb5fc186182","ssdeep":"","tlshash":"eac02b2813fccc045d8bc08a888e331b23af8013c309ec89c8cc8b9ed4ca1e6602104b","first_seen":"2024-01-09T11:21:34Z","last_seen":"2026-06-07T01:05:18.953238Z","times_seen":682,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/fxbot-registration-form/assets/css/intlTelInput.min.css","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/css/intlTelInput.min.css HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-5ea5\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24229,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"89ce447c1755a488d17bec881196adf3","sha1":"1c0dd6b8549bf7023e9f302bc2490944aa5d998e","sha256":"5ae1a7abb598b54b3dc3529b788bbee60faf9e68296b4d04154072cb8eec56f2","sha512":"0216a585ef34e8923b1cee34f23c95de74ed69a2494852799ef7bdaf1ec6d48cab49319bfd1ffd41283724ba4f29d21c644645acf3b6a4e46290abcbded9712b","ssdeep":"384:KTg9F7FFmjTSBhPQ66n1hwzshHH7L7y9x26GC529PygQp:d9F7FFmjPJnM","tlshash":"8eb2fd778bb33c65f91bd1a129f906623b375c47b01a4a2ef2963dbc5f420e025f2981","first_seen":"2023-05-02T01:14:21Z","last_seen":"2026-06-06T05:06:17.097587Z","times_seen":495,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":21,"dns":1,"connect":20,"send":0,"wait":37,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/generateblocks-pro/dist/accordion-style.css","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/generateblocks-pro/dist/accordion-style.css HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-38a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":906,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (905)","md5":"1aee45d855a985c9e7f0a75cdca8b668","sha1":"dc2bfd5e5a3ebcbce0014a67a639fcfb0f86f822","sha256":"407b8f582796d089f8f161716fc42a40fcb880cfbedd08449b28abbcdd61f2f8","sha512":"7f1f17b89867e5a550e18d9eeda9d6f1ea2546af8132d9ac2319c92f10c80ea40a94cfc4237e79f3a70eb7af5c8cf357069005e065a73ae09b6e6e3f3a7500ea","ssdeep":"","tlshash":"95118b255abd2e535096ed4103c4df2e103be4f0ea9c394d3700f56977e3b045eea669","first_seen":"2025-10-17T08:17:18.859086Z","last_seen":"2026-02-11T20:36:49.032394Z","times_seen":5,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/fxbot-registration-form/assets/js/mailcheck.min.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/js/mailcheck.min.js HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-faf\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4015,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4014)","md5":"4950423c548a646372ae58f7bbe67d1f","sha1":"f54943150a9cc3db37bba49e9abb8f1206b8b12b","sha256":"ab69f8053e420d7f3c043b55a1bfebd9981ccf92c21b4fd823031ab51967323a","sha512":"d5a096ca163c2767e6740c62681b3b6b0ac6f0e8bf2dc782beb956f81272d5ff49eb05d45231ab2e932a1c49602cca77a6be1f7c645b0f14d74111a4605e7d99","ssdeep":"","tlshash":"cf814051a2a12ca599b060dd388fb445a47aec252b8cecf8f654aca15e3471070fbced","first_seen":"2023-03-07T12:02:36Z","last_seen":"2026-06-07T01:05:18.949837Z","times_seen":644,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/zh-hant.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/zh-hant.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-261\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":609,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a3bce36139bdbeeb26d9847b105692d0","sha1":"b89a8460c0b7f3b038e3202038ad706ade7e73eb","sha256":"b023af9d9a9bde7e7f6136b1ba2fbcc5807af1c5f6dac17b383c29a8692f851c","sha512":"5d62a9fbe7eeb9812c535c0425233505068bf02f84ca5477c2b833b008584e0aecc1c06419d0c59a372952a90618770e8fc28fb1dfc60d3c878f9b236ca217a6","ssdeep":"","tlshash":"c6f002c96525d4444b560befde2df0c5011f70da5a6863d8308a1f1ca05a7d77004e64","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-07T01:48:05.897203Z","times_seen":872,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":349,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/uploads/2025/03/annie-spratt-QckxruozjRg-unsplash.webp","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:54.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/annie-spratt-QckxruozjRg-unsplash.webp HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/webp\r\nContent-Length: 47460\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nETag: \"68a1d1a3-b964\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47460,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f8e36ebe94374015a8c1ab78eb1b54a9","sha1":"a8e35bc47990282e3dc96421a2d76d97704288bd","sha256":"e0114b8acbece38ceb9098a2a6f4a0ca88c55315b97cfe89eb95a7f703d2ca1a","sha512":"4edab3a25ee74b73b001def5f8ba863043d2a2002176971647378c52cd4a5547b3cb6ad5d28386558fd4b830006dfe9ca05056711df277846ac8d7403ada734b","ssdeep":"768:1aeHOEFm17vmDvXgf696lFkeQTJgZRAOk3pbnF6W/EpFVVn5T0eysnRmJarKb3eF:Jhe7uTgC9+iZTJj7p56WETD8A+ZIpB","tlshash":"61230147a2152b4ff684e57c17a4e5c3a4628add2bbc531952c0c1bfa26cbe53a1c4cf","first_seen":"2025-06-13T23:08:31.038453Z","last_seen":"2026-03-14T16:55:09.098025Z","times_seen":43,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":33,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/fxbot-registration-form/assets/vocabulary/en.json","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:54.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/vocabulary/en.json HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nCookie: wp-wpml_current_language=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-867\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2151,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"974c06c22e80fbf8fc59a64946494b43","sha1":"6f25ac4d1108e81458e684ff3cd2fdbd8ac32786","sha256":"1e4455cdccea0ee7e1e5d9e13c5b2be8b964c3012341201f22092952036489a7","sha512":"d8374ac71bcba7cca5bc8707297280283110adb04814c30e369d0e7a1c3c3a1a77487bb4b7090aa485ead581de29abdc3b94d987784caf37b580d158e2f7f814","ssdeep":"","tlshash":"0a41e115ca058d6b0a81009ab8a9365773a5509b8d9d381dbb28136e0fded6f22772bc","first_seen":"2024-01-29T05:49:51Z","last_seen":"2026-06-07T01:05:18.970737Z","times_seen":390,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:54.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: wp-wpml_current_language=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-06-08T16:36:21.180388Z","times_seen":524128,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/gp-premium/general/js/smooth-scroll.min.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/gp-premium/general/js/smooth-scroll.min.js HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-1ae3\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6883,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6883), with no line terminators","md5":"ca1e68e1ae2dbb2206d21481576bbb45","sha1":"eecac929830764dba8b0734241090f2403671fa8","sha256":"ce43697d26defc72fa5aa7e3d7f1296cd19ba9a67cad0e2557aacc7702454f4d","sha512":"1544aed0f5def1ef73206a17cf7f540ad8b4d58a5e9b84d0c16639d8a4500b534c940184c310ecc9d4d458edbfa933ed1d0f542c7dc2ee67446029c7e48b21cd","ssdeep":"96:99BBG3KIUhniQscmPS8qeBxJmSjfijAzpFnIFW6fI2WsnSSORdgAL:NB7p6dmiFN61WsnSSqn","tlshash":"5ae1a6ea35607473caeb42b6a22f534677301163344b2054a36ddcdc39b5aa6835bfb8","first_seen":"2023-11-19T10:25:22Z","last_seen":"2026-06-08T16:13:13.034994Z","times_seen":2591,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-02T14:43:53.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-2173d\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Mailcheck","description":"Mailcheck is a JavaScript library designed to address the issue of misspelled email addresses during user input.","website":"https://github.com/mailcheck/mailcheck","common_platform_enumeration":"","icon":"Mailcheck.png","categories":["JavaScript libraries"]},{"name":"WPML:4.7.2","description":"WPML plugin makes it possible to build and run fully multilingual WordPress sites.","website":"https://wpml.org/","common_platform_enumeration":"","icon":"WPML.svg","categories":["WordPress plugins","Translation"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"GeneratePress GP Premium","description":"GP Premium is a premium add-on plugin for the GeneratePress WordPress theme.","website":"https://docs.generatepress.com/article/installing-gp-premium/","common_platform_enumeration":"","icon":"generatepress.png","categories":["WordPress plugins"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"GeneratePress","description":"GeneratePress is a lightweight WordPress theme that focuses on speed, stability, and accessibility","website":"https://generatepress.com","common_platform_enumeration":"","icon":"generatepress.png","categories":["WordPress themes"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":137021,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (36994)","md5":"18491aacc95eeee40218fe222f7f2921","sha1":"dbfc99459ae667e582321c246646ef10a12916e2","sha256":"98e174f518698c11a4c638d6e5028313144bd9a870a12146e8aff77110e8f89c","sha512":"e622527b6b1501b0c81a197a1294c0e388b90cfea3c9a4f6913277d6f64a86f97c4901b2cb403ccb30a1b684dec0562acdcc0bbcc06d1000ea760e813c5aea60","ssdeep":"1536:D3QoappjAKy5lDlkjBRLBBPhCkOgovAfuGt4zzAocBkGx/a:DAnHMlkjBRLBBIeGjMocBkwa","tlshash":"88d3c7726648117e611b00e6929bb31d73939949cf0e93d2fbfc9245c7e5ee126b3708","first_seen":"2026-02-02T12:24:16.448854Z","last_seen":"2026-02-02T14:44:19.019758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":55,"dns":1,"connect":18,"send":0,"wait":54,"receive":1,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/themes/generatepress/assets/css/main.min.css","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/css/main.min.css HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-4c38\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19512,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19512), with no line terminators","md5":"b7e067012db6249774c29e4c56b4f2c0","sha1":"7523574074e98d492a8da515f0daf7446cc504e0","sha256":"c839222ec3a5037179749a843610820436bf575a591a3e0b45404f1970a2cc56","sha512":"c77b609b39ddf4ab8b6a89aba1b8daa2e8824312b1032eed8270c82167794dd438ec9878dc5e5e19853565f3f95c24315e3f164b5919cbed8c772e84f7078bba","ssdeep":"384:sk1JAWvwWZ34igipTh3dGr5PL3NatuylxQp9svaQW4M+ght5NsKa4TqSD6CE:hAWvwWZ34igipTh3dGr5PL3NatuylxQo","tlshash":"3f9209a2aaf1242cb177831ffbd0e16c3565d522d30b95dab897d700c9cab67026379c","first_seen":"2024-08-28T15:41:57Z","last_seen":"2026-06-08T15:56:53.809992Z","times_seen":13363,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":17,"dns":0,"connect":25,"send":0,"wait":31,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-3509\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-08T16:34:56.510304Z","times_seen":825532,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/bg.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/bg.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-14f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":335,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fbae98f9ecb2c7a0d7bbadd4cda16c54","sha1":"0799313019185c31326cca8c6af85520f0ef05db","sha256":"a5531f87b36975a82c97748b5405c1f3d6d1fa7fa3f78843aea4b67903b76e7b","sha512":"9248648b0e11d1ae8bcc0837db0cb9399a0c4f684cd99bdb44672d1dc765cb0f9ebc66e224330618bc268772f03734c64029ec76b7687bbed8af7175960dc805","ssdeep":"","tlshash":"dbe02644e0e88e0b8a2143a88efc71c680a230cd12cc04ed72842928fd0d3df6885a96","first_seen":"2023-05-09T23:58:22Z","last_seen":"2026-06-07T07:55:40.024925Z","times_seen":550,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":347,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/et.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/et.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-14f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":335,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"97eaf9e3e1e5795116e411e3408c8ad5","sha1":"62d0a947b1ddc561aaa6b0db15a115cc38263e86","sha256":"361ceeb485933d4e9e5374bab0acf83404a5b7f634e6ee3bc61a3f125cea19af","sha512":"7964a7957eccd6b2216577e2a6d2ea461afca48b532181afc1933289e6e7f3ff6b776c141bfbbd1139825f21c5a71896709511e35f9a50514d617f0808fd55c0","ssdeep":"","tlshash":"d4e02641e0f98d0a4e1507a88efc71d290a230cd218d01fd72442928fd4e3df6885795","first_seen":"2023-05-10T09:01:08Z","last_seen":"2026-06-07T07:15:52.230088Z","times_seen":541,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":316,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/it.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/it.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-160\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":352,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34ec214f5547e19d4e1fe9d0d638f9c7","sha1":"7ef49fd31ffa7a0ea47e8ad0a2fa2121621baae5","sha256":"ebdeb69d61fd3e3b429eafd9b45b51422b87348d932a7fbcd668975437650fdd","sha512":"95f427b45f9af6fbc409cba7617a3a653ea21bb15bc722a442edc8f9a492914e0eb0e25d113403eff378c7ab9078d3bcd38e9e7cd7bc9c987e8b0da621e2b477","ssdeep":"","tlshash":"96e02084a5a9c9098b16437959bc71da512370cf15cc05fd75c43518bd4d3df3c51a6c","first_seen":"2023-05-10T09:01:08Z","last_seen":"2026-06-07T08:16:14.310364Z","times_seen":7430,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":141,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/lt.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/lt.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-163\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86458cbb859c05bf3fc54af01e50856b","sha1":"9b0769e31e63686d55f311f9b0064ac1dd7f3f67","sha256":"acd3a6a8487a79e9c9a0cdf7cd61f9f066e6c4aaa71050f93885562db997521e","sha512":"e1616165f9259593c62b921c9ba70d2db47aa5f1d8924855408084fb43b31356f52ee68128cc8df8d54dfc4f0baec8b928fa836a8b2250af31847a140db817e3","ssdeep":"","tlshash":"8be026c4a86a8a4f8e1107758ebc70e99172b0ce218c08fc71c11529fc0f39f3801f99","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-06-06T05:06:17.104948Z","times_seen":524,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":181,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/fxbot-registration-form/assets/css/widget.css","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/css/widget.css HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-25d2\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9682,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"512efd7e0899c2d76142be9291dc5076","sha1":"a658aca82a67d3926423238ffcb69a260528f8e3","sha256":"4ac954753b86ba49e8ab62cafdc9be5c705014f90d75bbba83b0f787b712f5f5","sha512":"5b51e0918688f9231e875fecd8c3a6de4793f18e6af77ec15437777a891283b34e8a9a354d6d1ff341b8b9573e1b2387aeba61bef924984e263caba27f2a66af","ssdeep":"192:I79a8jC9oCfXsRlS+HS8WsRlS+HS8A4BFGf9sOB9R7pmqWxn6:IZTjC9TuGf9HB9R7pmhxn6","tlshash":"19121095aab40101324b846cb1d757e5632ee0c2d40ecdfebb9470dd8f8c5da52bbb88","first_seen":"2025-06-03T10:56:31.66373Z","last_seen":"2026-06-02T22:41:54.990037Z","times_seen":104,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":19,"dns":0,"connect":19,"send":0,"wait":44,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/uploads/2025/03/document-8.png","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/document-8.png HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 2004\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nETag: \"68a1d1a3-7d4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2004,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 95 x 104, 8-bit/color RGBA, non-interlaced","md5":"c3698c65861a0e8fb5108c6875efbe03","sha1":"3eacbb59b184d9b8e6856c648ad9c60175941f0f","sha256":"b8e52a4776121d62c87940768ab2faa2c76253671e944819501fdb1777e84701","sha512":"dffab3c5cc5cfd954134d0fe92c99e1b1a21ade64b2c92e8dc7463aa0cc6690638761bfad43fdaa2dcb441036da1f83279e79417dbad0e0468bb45af6b590497","ssdeep":"","tlshash":"ac410ac86e213841b6ef350a16750a147a3a3360784d1675ecb7274e8da3c55f69b6f0","first_seen":"2025-06-13T23:08:31.019206Z","last_seen":"2026-03-14T16:55:09.088177Z","times_seen":43,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":325,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/uploads/2025/03/cropped-logo-192x192.png","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:54.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/cropped-logo-192x192.png HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nCookie: wp-wpml_current_language=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 5311\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nETag: \"68a1d1a3-14bf\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5311,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"77f0a961d6708dbc6bba3e0f6c9c3976","sha1":"476c26155510bf5eef54c9a96e6a978120dfbe2a","sha256":"4fd28f88040bc63dda59c34d496687a908f0ed8ba959c02baa12bc5f2f438ca7","sha512":"e298f357b5666fef2036e720477173053fd58eb66f590cbf08e234aa03a910d53656360f0d1dc5b363306bf86b5a663e790456f34f6e654911d50b7fb1bd1693","ssdeep":"96:1jJDpoXGQYk8LsbF8TSvizykwIzJRo3JBDi1HY6sKKq0C8aBZT7Sm:1jPo78kF8evYwINRNNKqx","tlshash":"b9b17fc0a17edf9029f21540a192449e70a71d225bda019f42d683f5caf03dffbc4c12","first_seen":"2025-06-13T23:08:30.98534Z","last_seen":"2026-03-14T16:55:09.117625Z","times_seen":43,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/themes/generatepress-child/style.css","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/themes/generatepress-child/style.css HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-1228\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4648,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (1038)","md5":"71867c67b6745c2789e97c944f29d19f","sha1":"8beac07e53ce7ac130ede8cc5cfff179a5384333","sha256":"2d359ca1d47cb2322d13276c04669f916a96a0ece3419be4edfc85d3841c27c0","sha512":"5fe0ca9513177a7f317bcbda804466e1a1f697fbc57cfbe5dbcb483ed987a65fdf120f411a8b9084940086633ab4e588c6c5c53702366c48f23008370a4c165c","ssdeep":"96:VG0fj7kuhsjdEpUqAfNBNBsjPGWXMushHPeveteweZxaFPe8repmOHQYJ5L55hez:VG0f3kuhsjdEpfA8cWWAFQ28Kp1KsDYf","tlshash":"d0a15252e3b4a671253a113bbb80d72423fe804ac20d9ed178fce20d57c97a65e93b0d","first_seen":"2026-02-02T12:24:16.47331Z","last_seen":"2026-02-02T14:44:19.027091Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/el.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/el.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-1fd\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":509,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad2d06f8e09051f574083a3d00b0d3c4","sha1":"278327ff2ba9f9ff2075e69635576298e083a56f","sha256":"855ef79130c430a08f89dad91b7206b3d31b42a1b509000029c60b9336856e45","sha512":"741f41770f7a55e36f6b436b2518986a01a587236f08461c94bfd30a92004c6736b4844a99b46ab6363a95779d9470bc8b374e539a5858c6baae661eccbf884f","ssdeep":"","tlshash":"caf0599496e588c80f2f4e75c97c76d1103224cd6048c8aca0b43819f9053ff11a16be","first_seen":"2023-05-07T18:02:32Z","last_seen":"2026-06-08T14:45:31.484492Z","times_seen":2329,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":284,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/es.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/es.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-2ca\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":714,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82a1bb6b96ec71df6247971da6e35155","sha1":"bb5be7dedff6612e4c8cb7c8019563c547238897","sha256":"8fc508fdb3ef11a4e38f9123f1ae903962ca14841cefd7b98ed5550d50d2f1bb","sha512":"dc54baf3110ea3a0512a272b5dac1bd1b24e50ecc32e9944436708791394a98fae1220f440ed1615c7d5e6f05d761190f3720105c9bf5f63300ff940cbb2738e","ssdeep":"","tlshash":"9b019cd4ba6c498c9e15837d0b6c70d1a20e20bc31cf40e8b98c8164b26a3ebe943d50","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-06-08T14:45:31.563386Z","times_seen":8262,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":251,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/uploads/2025/03/btc-8.png","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/uploads/2025/03/btc-8.png HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 1653\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nETag: \"68a1d1a3-675\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 105, 8-bit/color RGBA, non-interlaced","md5":"efeda2fe7f51257fb44aa8b7feac623a","sha1":"0082fa9f392e596e818dcf49ac8b3858f2e20711","sha256":"934a655dbe5c826d709b09891203047c125e9d347da669adc608be79b179d510","sha512":"2329267ffb586eb3b48d762f744d6fe9d49b86f142cdc993013dc9133591ec09fc500cd838cd78a8647e29c3ebff06e1b0f06f5d47a209c4a933bb5af2bba828","ssdeep":"","tlshash":"fe31ead745f11c2c525f1af985b822e6763d36ee208424964c2c537e9d0d864ff97b12","first_seen":"2025-06-13T23:08:30.976508Z","last_seen":"2026-03-14T16:55:09.073431Z","times_seen":43,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":369,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/themes/generatepress/assets/js/back-to-top.min.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/js/back-to-top.min.js HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-2e1\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":737,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (737), with no line terminators","md5":"5fc35421139ef9851bc72d3edb90cfba","sha1":"0091cadf005c865d7c4ef093fac9d35566fd1e48","sha256":"3310986e26439bd35318188bd35b0c326bd3334e6699ca0469fd4f0b7d497098","sha512":"0fda88fda5b8a67c7b750712da3543e4572cb89565284cf1cbffb1ec0927f21626ff78d6fe9fa4ac13ce9f780ddc0c36ca46fedeb1c2e7f754573d7acddc7432","ssdeep":"","tlshash":"0401d0fd1190553514fb8695739fbf41393120a686039411812ccca0f5a8ce7f912bc7","first_seen":"2024-09-02T00:59:07Z","last_seen":"2026-06-08T16:17:23.316365Z","times_seen":4371,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/fxbot-registration-form/assets/js/optin-form.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/js/optin-form.js HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-7361\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29537,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"d3344f9ef0a1c140f85494c830d1ad5d","sha1":"59c16daee5dbc6942fa6d91c28b8aacbe2b0bf51","sha256":"5dda80b2f1d2b87f6e961a0ea006e9e4a5076fd8cca9f77a296965d496094cfb","sha512":"870ef3b96b5176c6772cd2360aa82048a61f0cad509973fd5ea37098edb53b4c89fe1bb0d32867a10d25d52194578ef158e18a007c9594748dd50610716954d4","ssdeep":"384:Ap9nylLGEIbn6R5EbZeSf8xdwTRZ03bX2vwQ+x8wK0cfDGMkO9m3Gje2vEdBjY:ArALL8n6JPfi9mWjdQlY","tlshash":"39d25f1859a700a11ab379fe6fdf2242767490a73848cd44be4ca3846f94d6127f5fec","first_seen":"2024-10-04T11:14:09.138798Z","last_seen":"2026-06-06T05:06:17.095036Z","times_seen":402,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/ru.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/ru.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-163\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42103243a1d4c3f2e823e99f3c00aaa4","sha1":"1d95a227efb867c8b3dfa2902ea8a803f3fd3519","sha256":"0a720bc83f72d17849bd213570ed808ae6b430fa5f3d50dc7fdb32413f7ade01","sha512":"752fcf59700e20bed16831a684eef542a1fd525d73078c97894a6e7b3e2009296af1f4b31f2da100aa8403b3aebf3fff464cd8c1c6330a3b6da36796e2b70cd7","ssdeep":"","tlshash":"39e0d886a4e989095a1947694eec71d6406270ce218d01fd70853529fe4d3db2451aa8","first_seen":"2023-05-24T00:34:39Z","last_seen":"2026-06-07T21:47:39.561745Z","times_seen":5291,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":179,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/sitepress-multilingual-cms/res/flags/th.svg","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/th.svg HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-16f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"756f64249f1f943e61bff54780b49cd8","sha1":"e4beba68e98c966f57a6cca0e40915ba60500e23","sha256":"cf1c5911962ac51db0ff4e36a6a91f5ff42c1ba40246ada4067b3b5a846f21b4","sha512":"d8d34a3b82cba3a38c9f4025440e7177ca7ad6347bdff81f1691e88ff0f7e8a58fe3491e2d53e9d433cf685af00af37193c07afd2799fa12aefb54d53ff30498","ssdeep":"","tlshash":"c2e0d8c6a869890e1e140f754dbc75ed5136b0cf214d41fcb1c12629aa4a39f2541a68","first_seen":"2023-05-07T18:03:13Z","last_seen":"2026-06-06T05:06:17.10336Z","times_seen":4180,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":209,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/fxbot-registration-form/assets/images/flags.png","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:54.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/images/flags.png HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/wp-content/plugins/fxbot-registration-form/assets/css/intlTelInput.min.css\r\nCookie: wp-wpml_current_language=en; SERVERID=w01-8888\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:54 GMT\r\nContent-Type: image/png\r\nContent-Length: 70857\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nETag: \"68a1d1a3-114c9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced","md5":"416250f60d785a2e02f17e054d2e4e44","sha1":"21572c9751e5a3dc20395befa0fcb349c32c4811","sha256":"0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55","sha512":"cf1e7acf47464f00d206e9149475e22b8ea5a31727fa16344cd151384d850b83ece5e9abe4ac62861dba0dc3d3410955611d94665b60e2faa0c3d7a3d7c88404","ssdeep":"1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr","tlshash":"9763019797adf1d82a92274bef801109ae6c2b3d5d7c1da372cf1d532ae12c306c8586","first_seen":"2023-04-05T15:31:12Z","last_seen":"2026-06-08T14:57:41.111374Z","times_seen":24087,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumcormax.com/wp-content/plugins/fxbot-registration-form/assets/js/utils.min.js","fqdn":"ethereumcormax.com","domain":"ethereumcormax.com","tld":"com"},"ip":{"addr":"212.92.105.101","port":443,"asn":43350,"as":"NForce Entertainment B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumcormax.com/","date":"2026-02-02T14:43:53.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumcormax.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 19:55:40 GMT","end":"Sat, 02 May 2026 19:55:39 GMT"},"fingerprint":{"sha1":"65:74:A2:A6:70:51:8D:A2:6A:49:2A:D3:3E:79:1A:1E:FC:EF:47:29","sha256":"DC:06:24:FB:0B:22:11:8C:0B:F7:2A:A7:09:56:15:19:1E:88:D6:75:AD:4A:B6:36:B2:00:9F:3A:4A:CB:67:8A"}}},"request":{"raw":"GET /wp-content/plugins/fxbot-registration-form/assets/js/utils.min.js HTTP/1.1\r\nHost: ethereumcormax.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumcormax.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 02 Feb 2026 14:43:53 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Sun, 17 Aug 2025 12:57:07 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"68a1d1a3-3bdea\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":245226,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1654)","md5":"12855fe710661551c42e95a9c9290600","sha1":"72c56f9f3584405934289059ccd5ed678ddcb00c","sha256":"df0797876b146528f534dc356f34fd6408384ca47baae6ecdfcdf0463294f142","sha512":"70cfb09e51c3e5423473cd6332be0e45ce739f57d2356da4e6abbcec6402f98385e29809d91c8294fd5fbd9662c8cd3c79e577da01d736fc1ee08341a3c3001c","ssdeep":"3072:yxJ0MDz3ojrs3OwPl0n04Xl31AfO+2x1+w+Whnz6RNC7sSUrVjHoLOTpCAtQ594F:yxJRDY9lx1+w+WwugV","tlshash":"8c34ceebda3c9736a1d97b35968eb3cd5a8cbc93c848567826c3b54f53788e0706c205","first_seen":"2023-03-08T11:47:53Z","last_seen":"2026-06-07T04:32:14.180939Z","times_seen":622,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":65,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-02","alert":"Phishing Block","trigger":"ethereumcormax.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"ethereumcormax.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}