{"report_id":"60a5651f-d281-47f6-9efc-99aeb0229019","version":6,"status":"done","tags":[],"date":"2026-05-16T18:29:21Z","url":{"schema":"http","addr":"ethereumusd.net","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ethereumusd.net/","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"title":"ETHEREUMUSD - PLATAFORMA OFICIAL - 🤑 - ETHEREUMUSD.COM","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ethereumusd.net","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-20T18:29:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"vn2countbi.top","ip":{"addr":"104.21.8.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-07","domain_rank":0,"first_seen":"2026-05-16T18:28:57.541252Z","last_seen":"2026-05-16T18:28:57.541252Z","alert_count":0,"request_count":4,"received_data":13455,"sent_data":1950,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-05-11T06:49:28.089446Z","alert_count":0,"request_count":2,"received_data":1024057,"sent_data":946,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ethereumusd.net","ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-13","domain_rank":0,"first_seen":"2026-05-16T18:29:23.08162Z","last_seen":"2026-05-16T18:29:23.08162Z","alert_count":19,"request_count":19,"received_data":321850,"sent_data":9067,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-05-10T22:35:57.417067Z","alert_count":0,"request_count":2,"received_data":218071,"sent_data":1019,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-10T22:41:13.190184Z","alert_count":0,"request_count":4,"received_data":336317,"sent_data":1784,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"papi.vn2bijump.com","ip":{"addr":"172.67.155.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-07","domain_rank":0,"first_seen":"2026-05-16T18:28:57.539791Z","last_seen":"2026-05-16T18:28:57.539791Z","alert_count":0,"request_count":1,"received_data":937,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.3.7","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-10T22:20:44.526759Z","alert_count":0,"request_count":1,"received_data":15848,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"c1.vn2bijump.com","ip":{"addr":"104.21.82.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-07","domain_rank":0,"first_seen":"2026-05-16T18:28:57.536779Z","last_seen":"2026-05-16T18:28:57.536779Z","alert_count":0,"request_count":1,"received_data":918,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.7","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/?plugins=typography,forms,aspect-ratio,line-clamp","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6ff41f534ea7db5cca13f0a6c99e797","sha1":"4e68adb7f6501329cc30bdff0f6ec3ab27ec1d19","sha256":"dc8a726179f17dd97e2b3b54ca3e296fa1d2625fef306e626415d88151830b65","sha512":"b3b46841f55f637d537e9f25133eab71fae2d58cbb4399309c8a60b14f7998eb05b19fb41384dbcae2d57ad1d0f7a68beb3e1aa1afa337b555b3149aaa1628a2","ssdeep":"6144:whg5Cjcfn5vuN/YVy61LL5OjeCteMPLfdBDbTbSCyXsFO0s:kg5CjcfkN/YVy61LLCe83nn+uFO0s","tlshash":"efb43ba97356b13647eba1e850ab1402f37d9928900c84acf79dc4ea3de4d4950bbf3d","size":511274,"data":"","first_seen":"2026-04-25T23:04:45.1437Z","last_seen":"2026-05-17T00:36:18.844592Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","size":154597,"data":"","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-05-17T07:38:22.739762Z","times_seen":20089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vn2countbi.top/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"vn2countbi.top","domain":"vn2countbi.top","tld":"top"},"ip":{"addr":"104.21.8.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"516ca67380287bda42833b3c1acf9c74","sha1":"b632f77cd9bd89b2d0f985e7ed2c2ff8bb5174c9","sha256":"0b1682605117a65469d252ba0f32e8b9aded53dbd788197c904e139de463f992","sha512":"c11827343c93be623162470ede22c1439b2f5233d4be39b4d01abd3a29d947c87099fcf777f9b5a3f512354a77c1ebd6e18159c49d78fb8f57e860aafd3846e3","ssdeep":"96:YwMXvSyLfekD8eY8LFnICm4F3sA/S6Gg1lUzCs/:tMNDDPICn3sA2gzUzV","tlshash":"21b1a5de7a01b5b994b9953b962f3206723b2577680c04007435ddc52e2cfeb63b2d9e","size":5115,"data":"","first_seen":"2025-05-11T10:37:33.481295Z","last_seen":"2026-05-17T00:36:18.839951Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/static/js/global.js","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cceb4f593faae39575c2373f7d859d50","sha1":"1460b97e0e037bcdf104c2a3c637ae12d469eb64","sha256":"29d84bee45e4bc5905e572cbbe5bf3e24cc66617a0b7b79b2a0b2ec8540a4019","sha512":"0599cb65bd8b9c6dc446585072de7f522881d3b034a5c091fe1767242458eb8bcc65fe41663c309652cb4b37de7ecbfe583f86e4ea46ed6a2557bb0098e3eade","ssdeep":"192:ls6M136s845r+BZaEPanCF5TqVl6aatb3yQCIoVt0YvzRZCSd6nfDdQ9J46wWxWE:ls6M136sP1+BgEPan+VWlna0rdZCSd6Q","tlshash":"793219883f21309c095129f37bba9909f23d4d8278c7c8c9e12d295fef5a31eb576648","size":11216,"data":"","first_seen":"2026-05-16T18:29:03.240555Z","last_seen":"2026-05-16T18:29:48.491586Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7846d85b0158fe92c83576486596653e","sha1":"d6157baff07b934bd7ba8d724e854a64d068fc34","sha256":"46a13523c9cda60aef773384dafff10b855a47bb9f0cb33ca9ce5f64f1c4ca20","sha512":"a4ce7ca0f52329eb4c4028ebc6fe8aaa40a4be6ee28ee4d1801a66098964c90fa4663081953d33b89c32e3cfc122fe87a11a4bbb2dd53ac04473c391d00d6d34","ssdeep":"","tlshash":"45f0261a666520718133f839096fb20055320087582fec3ab88c0ac85f1e26c85f6f95","size":456,"data":"","first_seen":"2026-05-16T18:29:26.343599Z","last_seen":"2026-05-16T18:29:48.528048Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"510cdbdc9dbc2dba092a964a02b50295","sha1":"4f0cafb3ef367c112ec648d704c985894e189ae8","sha256":"aead707784006f1d5584da245e2f1015907ccda2ca17d26b64a04d23a60597e2","sha512":"d3907b22e53271d946bc792a648411d29f53de707b18e84f9f80d6fe968ef9836dd68d2cdca53fa92ce23afe45ab8b364cfff380be6b9ecf4f7fbc03a548b880","ssdeep":"","tlshash":"eff0223a7c76253000ebf97ddb8f2186226c74877306d089391cca494fd7a0480658c5","size":499,"data":"","first_seen":"2026-05-16T18:29:26.345185Z","last_seen":"2026-05-16T18:29:48.530275Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@8/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"24fd8f796609d79fcb7b6e5ae754433b","sha1":"f4dc8d46086739c58121185b2d0f4e190710f11b","sha256":"f645b12f27c4e9c1210d5725cfa894b86464372e7b1becbe47126a5fe82f9ade","sha512":"87956ffa7fb3d1e467949a14956319e0f2d0bf825f68256d814f53b518cd62e365b52e500aa8b80f87999f8524cd966e1b6a78541cf760896c07b036355adbc3","ssdeep":"3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:RJLC4dkEUYnafpl9v8cIWybV4y+oGMMC","tlshash":"c3e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","size":143706,"data":"","first_seen":"2023-03-13T12:29:47Z","last_seen":"2026-05-17T06:52:30.645225Z","times_seen":12699,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vn2countbi.top/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"vn2countbi.top","domain":"vn2countbi.top","tld":"top"},"ip":{"addr":"104.21.8.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"516ca67380287bda42833b3c1acf9c74","sha1":"b632f77cd9bd89b2d0f985e7ed2c2ff8bb5174c9","sha256":"0b1682605117a65469d252ba0f32e8b9aded53dbd788197c904e139de463f992","sha512":"c11827343c93be623162470ede22c1439b2f5233d4be39b4d01abd3a29d947c87099fcf777f9b5a3f512354a77c1ebd6e18159c49d78fb8f57e860aafd3846e3","ssdeep":"96:YwMXvSyLfekD8eY8LFnICm4F3sA/S6Gg1lUzCs/:tMNDDPICn3sA2gzUzV","tlshash":"21b1a5de7a01b5b994b9953b962f3206723b2577680c04007435ddc52e2cfeb63b2d9e","size":5115,"data":"","first_seen":"2025-05-11T10:37:33.481295Z","last_seen":"2026-05-17T00:36:18.839951Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b415ed6a5114145b078b70c3a92e49d7","sha1":"16f6e98f0a2417fa821450d83f092dbc8f9aea41","sha256":"ffa4813ea5be196fbfff89e55d7e98d6747d756961d20b1027a28aef57631fa0","sha512":"b13d44342abb6b343629adc87bf4d223795c62c04952de576bd495f8008b8bfe778b8dd3901ae58357a46f6fa4d19e9840e6a7dd275790d1646348c2629aea4b","ssdeep":"","tlshash":"20b09234a018b24c44383000132b3307b4320816508427023602c553b832e878720f99","size":117,"data":"","first_seen":"2023-03-07T13:23:40Z","last_seen":"2026-05-17T06:10:40.825127Z","times_seen":3701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"vn2countbi.top/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"vn2countbi.top","domain":"vn2countbi.top","tld":"top"},"ip":{"addr":"104.21.8.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:01.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vn2countbi.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 03:27:11 GMT","end":"Thu, 06 Aug 2026 03:27:10 GMT"},"fingerprint":{"sha1":"83:2E:EC:01:5E:05:49:9D:7A:7E:DA:74:82:F9:7B:06:47:B6:3E:78","sha256":"AA:49:B3:CD:E0:80:D9:44:2E:B8:85:1A:38:9F:50:2F:6A:8D:F7:B7:B6:23:78:1B:49:CD:71:F5:A6:66:55:05"}}},"request":{"raw":"GET /js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js HTTP/1.1\r\nHost: vn2countbi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:01 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nage: 26\r\nlast-modified: Sat, 16 May 2026 18:28:35 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lQD7ULdDmBcnKkMhGGk17BQnz8LjJcUFeO6cYijTzj57eSyCLwK2SDcfUJrF%2BNlmcwYlD8%2BfJjFQDgC9PZKni5NiiS3B4qjLxkDDcT%2FDtSw2tCs8jZ6lxyoNWZPGRtOvyQ%3D%3D\"}]}\r\ncf-ray: 9fcc720e5bdadfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5115,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5115), with no line terminators","md5":"516ca67380287bda42833b3c1acf9c74","sha1":"b632f77cd9bd89b2d0f985e7ed2c2ff8bb5174c9","sha256":"0b1682605117a65469d252ba0f32e8b9aded53dbd788197c904e139de463f992","sha512":"c11827343c93be623162470ede22c1439b2f5233d4be39b4d01abd3a29d947c87099fcf777f9b5a3f512354a77c1ebd6e18159c49d78fb8f57e860aafd3846e3","ssdeep":"96:YwMXvSyLfekD8eY8LFnICm4F3sA/S6Gg1lUzCs/:tMNDDPICn3sA2gzUzV","tlshash":"21b1a5de7a01b5b994b9953b962f3206723b2577680c04007435ddc52e2cfeb63b2d9e","first_seen":"2025-05-11T10:37:33.481295Z","last_seen":"2026-05-17T00:36:18.839951Z","times_seen":219,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:01.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ethereumusd.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 16 May 2026 18:29:01 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 126828\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"620188b3-1ef6c\"\r\nlast-modified: Mon, 07 Feb 2022 21:01:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 746094\r\nexpires: Thu, 06 May 2027 18:29:01 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fgona4PjVu10kqf9ziP71reteI73CMmIfT%2FG1Vid%2BkC6Qpn4fIp8B9uW%2Bv7NRkThxK2OaH3iLWrrb2g0NCvlMCpEUBYshPwJojCMcJK8zfb5lMx0iGpINBEXYvzCkjvZZAfrWAyB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: 9fcc720ee96d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126828,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 126828, version 768.256","md5":"297973a488f688271dd223d542ba2697","sha1":"ed99d812e4c88826335f93acede3fad85c90fb54","sha256":"1b099f88c06ed0869872561c157f0ec9cbe133a0939d9ece4ee1e1f54bd4683d","sha512":"83c802972d9fee9dd7e3c0de42d8636c504e65ff20e43406bb446cc95a16acaa21789a03f0e2006148abfe47100bbd0c66aa4cf98f11e9b0220f1dcdb5204f46","ssdeep":"3072:caEaIjBfXHk79vCMuMZhQqmiutWxJfU52qiAx+SMfd:caEaIf3kxa5aaVMaHAScd","tlshash":"9dc3120ef3299411c6f0af104c63d6d627617389ffd548c767993e768aac9e70c28ea0","first_seen":"2023-04-10T14:50:44Z","last_seen":"2026-05-17T07:42:55.824Z","times_seen":8925,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":19,"dns":1,"connect":0,"send":0,"wait":6,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:00.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 16 May 2026 18:29:00 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 15248\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"620188b3-3b90\"\r\nlast-modified: Mon, 07 Feb 2022 21:01:39 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 656171\r\nexpires: Thu, 06 May 2027 18:29:00 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nDpcA7Zc%2Bs4dL2IqsGVvww%2B3nq61waXBA6ElivaXprR%2FNxWD8yv7JdH9U58tQspHDcjW1qjJHF3KmgvkqyEhYg3%2FzEZzRMMwD0fP%2BpDRNE2yA2LhetKxcZPadTR4JuRTMdRSqwoi\"}]}\r\ncf-ray: 9fcc72056cefb51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89220,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65317)","md5":"dfb8fc36e102730fddf78b5494eb0035","sha1":"b513d9a39af2ee145f12c1ba03f9982960c47029","sha256":"8d321d88cb97fdedc3189506c25de9292c6e73a60ebaab496243346c6404480e","sha512":"f6eb006b5d0844ed078689e9c80215a63af294fbe80f088f52229d5a4e6ddcfca8958d5c39de03484d066beae2e00b93ae83d1e5a42f5d4f710baa8e3e7cc57a","ssdeep":"1536:iUMVM6MVMkMVM9MVMNMVMispxd1zJJ29Nll3IV7UHsR+z:Dd1NY95IV7UMR+z","tlshash":"8a93a9e9e04c05d56732c44baf99b37ca5b6f73cd5810da9f02f580c19d26a822c6f7a","first_seen":"2023-04-06T16:57:15Z","last_seen":"2026-05-17T07:42:55.821073Z","times_seen":10699,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":9,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/?plugins=typography,forms,aspect-ratio,line-clamp","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:00.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET /?plugins=typography,forms,aspect-ratio,line-clamp HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 16 May 2026 18:29:00 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17?plugins=typography@0.5.16,forms@0.5.10,aspect-ratio@0.4.2,line-clamp@0.4.4\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::7pwkx-1778955877253-9fe3c81e4a45\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 262\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EctS8GdUAfoSUQo7eY8tnbgLbbU%2F3GbrWgdzzk6mSCzAtfzH9%2BpsWJ3u5zlI41HVtzs5nV1vNmDqIM%2F2%2BLd8vsQrdTuiKkatwuytPas%2Fo3dAtmDlVgheujpIllTEXE%2FHNBTPCDc%3D\"}]}\r\ncf-ray: 9fcc72057eb15684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":511274,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T07:14:59.945201Z","times_seen":15320232,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":7,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:00.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"4816-00NTceTFOXSCfuleSHYg+tVGAkA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 16 May 2026 18:29:00 GMT\r\nage: 21218\r\nx-served-by: cache-fra-etou8220067-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4774\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18454,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (18199)","md5":"6408a7c2033ed72b31f850268bfa9a0a","sha1":"d3435371e4c53974827ee95e487620fad5460240","sha256":"74ca6aae5468dbc924790c3b4d219a089b90a34bad53a0f7ca3a73e73b6f5ab8","sha512":"b74b551224b5abe662f4380393eab59b8f9481d8aff978af27d66d0e4b4b6eaaa4271f0aedb97c6298b3245915136f52dbc15135b46c04841b8214ea9397cbf4","ssdeep":"192:CzmUJbiKne5JTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxbpy:CSUbe5JndKW+Sa0ni24tnWfz4eNi","tlshash":"ce8256a45350182753274f374bb1cbb9e97444c20f9389ae91c0ee58d7facb9132f2a9","first_seen":"2025-06-28T16:11:53.618794Z","last_seen":"2026-05-17T07:20:55.866263Z","times_seen":19728,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":77,"dns":11,"connect":26,"send":0,"wait":56,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/static/images/d79ff9b75d34640908ce92981c9c60d924cadff5.png","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:01.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumusd.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 11:59:53 GMT","end":"Tue, 11 Aug 2026 11:59:52 GMT"},"fingerprint":{"sha1":"C1:F6:52:6C:35:42:E4:65:C9:33:E9:E8:C2:C1:56:F2:95:EA:93:43","sha256":"CA:35:71:0A:26:4E:FF:61:FA:B5:69:BA:FB:E1:83:67:61:30:23:05:08:C3:E1:57:68:BB:E2:B4:82:88:F0:1E"}}},"request":{"raw":"GET /static/images/d79ff9b75d34640908ce92981c9c60d924cadff5.png HTTP/1.1\r\nHost: ethereumusd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 May 2026 13:31:08 GMT\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a047d1c-9745\"\r\nexpires: Mon, 15 Jun 2026 18:29:01 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a4rLqbRaW8gdqRYWuWbw8oDXzfQnPuot%2BQjWuJRLorlu4g6MCbgjF8ABsVLQORbtiisV1gPCg7z6ivFJIlsSEbJSG3Os%2BwvF2d4%2FgBRikimHIjMZ6hJiqqh5rsrIaxEBsTQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncf-ray: 9fcc720cea9a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38725,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 162, 8-bit colormap, non-interlaced","md5":"19211d6f123f8734158a3968ba3a8964","sha1":"91a7a71df7cf073d4cf4f5e08df2c776c25c36db","sha256":"f28cea041b9ba3501983a967eee2022247fe6a017bd693a8c0f6465fac32235e","sha512":"e957769f8efe376e3cbef296c377d42d0f949d96ff83dda2c5660eee211e69ef14c08724a47fc608e09ad947faffcc40331c3622434cde2d70b5b46f7198bc72","ssdeep":"768:KWPyK2zmdP8vtWqgtVZzJ0QDS5gojC8icrnmUsUbvkrvrMaoLEvarirzp/F4:URy5AgXt+RNtigmUsvvrO23NF4","tlshash":"fb03e257caecb34026edf6348882cc890d77324625fbb818b46bda75e6dd8735424f25","first_seen":"2026-05-16T18:29:03.237073Z","last_seen":"2026-05-16T18:29:48.477161Z","times_seen":4,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vn2countbi.top/api/event","fqdn":"vn2countbi.top","domain":"vn2countbi.top","tld":"top"},"ip":{"addr":"104.21.8.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:01.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vn2countbi.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 03:27:11 GMT","end":"Thu, 06 Aug 2026 03:27:10 GMT"},"fingerprint":{"sha1":"83:2E:EC:01:5E:05:49:9D:7A:7E:DA:74:82:F9:7B:06:47:B6:3E:78","sha256":"AA:49:B3:CD:E0:80:D9:44:2E:B8:85:1A:38:9F:50:2F:6A:8D:F7:B7:B6:23:78:1B:49:CD:71:F5:A6:66:55:05"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: vn2countbi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ethereumusd.net/\r\nContent-Type: text/plain\r\nContent-Length: 97\r\nOrigin: https://ethereumusd.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":97,"data":"{\"n\":\"pageview\",\"v\":3,\"u\":\"https://ethereumusd.net/\",\"d\":\"ethereumusd.net\",\"r\":null,\"p\":{},\"h\":1}"}},"response":{"raw":"HTTP/3 202 Accepted\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:02 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GLAfL5g8JZbIBiQABHqB\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2B5citJHiLZMlxCOZufoz3qc0VpSj7VOMIwHRDXbA5D2f%2FNr50%2F3A5HbT08Su49IPefwTC7Gk%2BMIk%2Fc4Wdc5ENYfMwfYzdJJl277L45N1Zx6S0ats7i50sID48j69Ayn3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcc720f5c06dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-05-17T07:16:41.411708Z","times_seen":412808,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/static/images/9533d04643143133fe1623c6ef30f50d2c6f9c95.webp","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:01.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumusd.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 11:59:53 GMT","end":"Tue, 11 Aug 2026 11:59:52 GMT"},"fingerprint":{"sha1":"C1:F6:52:6C:35:42:E4:65:C9:33:E9:E8:C2:C1:56:F2:95:EA:93:43","sha256":"CA:35:71:0A:26:4E:FF:61:FA:B5:69:BA:FB:E1:83:67:61:30:23:05:08:C3:E1:57:68:BB:E2:B4:82:88:F0:1E"}}},"request":{"raw":"GET /static/images/9533d04643143133fe1623c6ef30f50d2c6f9c95.webp HTTP/1.1\r\nHost: ethereumusd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4990\r\nlast-modified: Wed, 13 May 2026 13:32:28 GMT\r\npriority: u=4,i=?0\r\netag: \"6a047d6c-137e\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yXV42mtRGkbPkFpQrzRJDYDxkfBVtQEx1Cy8%2FgAOy4FfR1Lwcp3QlJRnaWsE%2FGzIf8G0JVP7gnId50ZzYDhm8jUljQJAMHeJmcCqQkQ7URg68hmVbV2Ypjd47l1x8w9ZjlY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcc720f5b3a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4990,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fc01aae5854818436bc958fea98064c9","sha1":"10a8bc3c8f87a5ce1ccc95beaa94809c7cbe5743","sha256":"da0fd2d3cecbfce197e313ec586ef06fb4f46c79ff91de2a7902da99b088083f","sha512":"8ff5971449ea1689ee4a1caaa299447563e88e5a12f3a181ff7d4261428fd19d67856df897c8a6f67cf08fc8e36bdba305bbd29662705f492e490d3c3d037dcc","ssdeep":"96:FIs6eeXHAeKRMKZ++rGl5bjh7P22yXYYwR/QBpsxmNsVxLGE5gDpi8ILrzw:V6eeXgeKp+xZP3yXYtECmNsrL158pib","tlshash":"62a17d9c238ca254f6512fba4c22574f715900f8f4d2175812528678d775c7af8f2978","first_seen":"2026-05-16T18:29:26.292238Z","last_seen":"2026-05-16T18:29:48.502446Z","times_seen":2,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"papi.vn2bijump.com/getDomainId.php?token=xxtJ96PkdSff8pPJHa\u0026domain=ethereumusd.net","fqdn":"papi.vn2bijump.com","domain":"vn2bijump.com","tld":"com"},"ip":{"addr":"172.67.155.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:02.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vn2bijump.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 03:22:37 GMT","end":"Thu, 06 Aug 2026 03:22:36 GMT"},"fingerprint":{"sha1":"C8:3F:71:EF:9C:71:8A:C7:CC:CE:4C:17:CA:2C:08:24:31:2E:9E:F4","sha256":"DA:E6:A2:2D:97:74:D2:CD:4C:EF:4A:39:32:93:AC:2D:39:2C:6A:F3:DA:46:6D:D7:19:3E:F2:5E:07:45:22:2E"}}},"request":{"raw":"GET /getDomainId.php?token=xxtJ96PkdSff8pPJHa\u0026domain=ethereumusd.net HTTP/1.1\r\nHost: papi.vn2bijump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ethereumusd.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 16 May 2026 18:29:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/8.3.7\r\nset-cookie: PHPSESSID=7mtc1n3l2mmj8vsla5c412u1ug; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5O6aZ0Nf2GFig%2FIhFC2WZ9y09OVPkwy6X4h54EpBwVdC4PICwQfKsZXa4hdbm7Lx7LAFo0w2MYXKmiidAGAuuGsbEgy96T2HJLMFT6GMRseitCnaNsl1TA07T9kRsmFTL0seHqA%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9fcc72100bf1712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.7","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b9842df5397246c9c1d9d4b9d38af4e9","sha1":"789ec626b061482448f3e58c3403e68cea1166ac","sha256":"ead85e832f58436b29fb256a58ff271e7ddb4df4f9480838a9ffbd0224ffa451","sha512":"1eb84765f5545c641ce471bba889b3e7dbd113da11083fead4a97e1fa4ac6f352d73abfc94da73e9d90a8d4b7eb7dfef6d1478792a6daa03273fc152d36d6d85","ssdeep":"","tlshash":"b6800020283c20238222002e202f22c000282c882c880f008c0e0a2a032e0a20200233","first_seen":"2026-05-16T18:29:26.296179Z","last_seen":"2026-05-16T18:29:48.496398Z","times_seen":2,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":19,"dns":1,"connect":3,"send":0,"wait":198,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:00.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"25be5-n7vuhWVYfwo6iXqEBF16IW76OmQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 16 May 2026 18:29:00 GMT\r\nage: 17354\r\nx-served-by: cache-fra-eddf8230082-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 44022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154597,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65281)","md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-05-17T07:38:22.739762Z","times_seen":20089,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":73,"dns":10,"connect":26,"send":0,"wait":48,"receive":11,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/static/images/e860ebda54f0a03ab68b4138f29c90ba97cc01fd.webp","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:01.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumusd.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 11:59:53 GMT","end":"Tue, 11 Aug 2026 11:59:52 GMT"},"fingerprint":{"sha1":"C1:F6:52:6C:35:42:E4:65:C9:33:E9:E8:C2:C1:56:F2:95:EA:93:43","sha256":"CA:35:71:0A:26:4E:FF:61:FA:B5:69:BA:FB:E1:83:67:61:30:23:05:08:C3:E1:57:68:BB:E2:B4:82:88:F0:1E"}}},"request":{"raw":"GET /static/images/e860ebda54f0a03ab68b4138f29c90ba97cc01fd.webp HTTP/1.1\r\nHost: ethereumusd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1080\r\nlast-modified: Wed, 13 May 2026 13:32:28 GMT\r\npriority: u=4,i=?0\r\netag: \"6a047d6c-438\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oeuzNbJV7cLPTn%2FfNzr6skBK9C8XToxA%2BrSQnOScR467opLFvrCLVuoydMHtfOQ0OoGvVFUFinwKJ2JoNFxvOnhB3eSt1J7dihMjxn9t%2BRCEE%2FU%2F9RdYdFxbP%2BZ%2FSaXue8Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcc720f5b3d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"53dcaa6bf50e95ec3b1a9d3eee33c38a","sha1":"6d61c75dc95dc04312bd4347249cecae6ef1a731","sha256":"135759bf96286ec5722ac1fcd8e69d18f51064d340008a7a061c0302b64e94db","sha512":"a6bec3676457758b5f06f2f636f14dc178f2448148dff8ef62e3884d65d42d58b721a967f2a3c664025b4453807d1d509fa2544645572b9c37b91d0c19e3ae7f","ssdeep":"","tlshash":"2e11fcd11ab8b85ae952a5b697139cc03e7184eafdbd2ae817c1c92c3593453d1af880","first_seen":"2026-05-16T18:29:03.252799Z","last_seen":"2026-05-16T18:29:48.519749Z","times_seen":4,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/static/images/6c5ca79baa8a1e48f141be28662a0fc53fa33f88.png","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:01.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumusd.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 11:59:53 GMT","end":"Tue, 11 Aug 2026 11:59:52 GMT"},"fingerprint":{"sha1":"C1:F6:52:6C:35:42:E4:65:C9:33:E9:E8:C2:C1:56:F2:95:EA:93:43","sha256":"CA:35:71:0A:26:4E:FF:61:FA:B5:69:BA:FB:E1:83:67:61:30:23:05:08:C3:E1:57:68:BB:E2:B4:82:88:F0:1E"}}},"request":{"raw":"GET /static/images/6c5ca79baa8a1e48f141be28662a0fc53fa33f88.png HTTP/1.1\r\nHost: ethereumusd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 May 2026 13:32:28 GMT\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a047d6c-728\"\r\nexpires: Mon, 15 Jun 2026 18:29:02 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=93KuznaQOlze6ovZC7UnGXSuHl4wedz84t9rsUaAtmgx2gpPI%2B8Z9FUk8GTBvobDw%2B3pWqDScoALtE9TCcf9qsFzgbqR7BVpwnZAIDC9xCpZJO7O9nwKQrDVa05nxKfSHHo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncf-ray: 9fcc720f6b3f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1832,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"fbe7f2f6b3f7c7be23a31fe55326edbb","sha1":"cac0ff2571587afc25c8ae88c4d43c519dda0f29","sha256":"c8f3cac328a933eb811e8ac32d1f5efcce6ea7f93d909c4b76f3d046f464400d","sha512":"375ea04678f7a117cbad73f76d9e0f3349e3918b6ce0f6c14b2d53ad551434200406d5ea3074c01d0ceb6e4f8c7e7a84793426840478bb0fe718cc3cf5a49871","ssdeep":"","tlshash":"1c3107d83ab088be94ce2867317aa86536c9549acd91b301604dce700b37c3b85ee4b3","first_seen":"2026-05-16T18:29:03.215479Z","last_seen":"2026-05-16T18:29:48.471335Z","times_seen":4,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/static/images/93f9aff086b596579c2654283da77d0fe0fc6b58.png","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:12.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumusd.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 11:59:53 GMT","end":"Tue, 11 Aug 2026 11:59:52 GMT"},"fingerprint":{"sha1":"C1:F6:52:6C:35:42:E4:65:C9:33:E9:E8:C2:C1:56:F2:95:EA:93:43","sha256":"CA:35:71:0A:26:4E:FF:61:FA:B5:69:BA:FB:E1:83:67:61:30:23:05:08:C3:E1:57:68:BB:E2:B4:82:88:F0:1E"}}},"request":{"raw":"GET /static/images/93f9aff086b596579c2654283da77d0fe0fc6b58.png HTTP/1.1\r\nHost: ethereumusd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 183\r\nlast-modified: Wed, 13 May 2026 13:31:32 GMT\r\npriority: u=4,i=?0\r\netag: \"6a047d34-b7\"\r\nexpires: Mon, 15 Jun 2026 18:29:12 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vVWLrYitHFtplAcPzQkh1efSv3Nuonab6yajaFhzS650MJ5qiW%2F9YZhSOvVb3LAtHZL0IH40I40JddnzNkjHdKL6%2FdXgmllS6h3UvVBTOdSoeKifRGNNX%2FT1khx2Nlq6De8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcc72529f110731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":183,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"36b8767d1ce1c3a5aa02024ff19b81f5","sha1":"0663c946cae534f0170a8ed3163296c0675ab4d4","sha256":"47af969c04a568a4ec162c72f354281c5c59b206e4a1c5d70ffc5ea15b03d7ce","sha512":"b93c83dce5b460b0fa55891de9932803d3faf93765e45f03664235f4376a3019fb744ad69aca9b824580ae17671aadf4646344114b1926ed224c04ad886fe1fb","ssdeep":"","tlshash":"12c0c0ca6641ddb6e61526f2972108c0e8cb0b300020484900d2d6024e60a8010fe350","first_seen":"2026-05-16T18:29:26.302941Z","last_seen":"2026-05-16T18:29:48.474399Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:00.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 16 May 2026 18:29:00 GMT\r\ndate: Sat, 16 May 2026 18:29:00 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15162,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cd46912baf19b9fe32c8e6a6320bcaf9","sha1":"08ee007e9656ed41ffbabdb06701a3895bfa0094","sha256":"92a04c9ec1ae41b88f1eda4e7c4d74ffea87294a25c63c0fcdd7472dd82f1035","sha512":"33912fabd74bd7afee0c49ddd4b89161dfc7939fabb2ac6a75b9a5b4fd3e745fcdb6a4dda2ba6ddef3c9177f4ac972ff43239bc2f1af456c7530e7b981510b9e","ssdeep":"192:wNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kc:8KYXuM0p2+g7r","tlshash":"3f628892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T14:17:01.635764Z","last_seen":"2026-05-17T06:50:26.198182Z","times_seen":3680,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":152,"dns":0,"connect":20,"send":0,"wait":31,"receive":0,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/static/images/d1df0224eacc0706e674140a369ba7b20a46a202.png","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:01.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumusd.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 11:59:53 GMT","end":"Tue, 11 Aug 2026 11:59:52 GMT"},"fingerprint":{"sha1":"C1:F6:52:6C:35:42:E4:65:C9:33:E9:E8:C2:C1:56:F2:95:EA:93:43","sha256":"CA:35:71:0A:26:4E:FF:61:FA:B5:69:BA:FB:E1:83:67:61:30:23:05:08:C3:E1:57:68:BB:E2:B4:82:88:F0:1E"}}},"request":{"raw":"GET /static/images/d1df0224eacc0706e674140a369ba7b20a46a202.png HTTP/1.1\r\nHost: ethereumusd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1009\r\nlast-modified: Wed, 13 May 2026 13:32:28 GMT\r\npriority: u=4,i=?0\r\netag: \"6a047d6c-3f1\"\r\nexpires: Mon, 15 Jun 2026 18:29:02 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IroR%2BesURuzGovuDZmBIo0Ixj%2BztHc%2B2FCO%2F6CNZPnXImUKEkREMSANVQLUM1z0KGTiQ%2F3UPlSc%2FwW2WYgijUcY14poBS8ES0onSnYaeo0kJXVue1hVFeTUP2e4PneZgofY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcc720f5b3b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1009,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 158 x 158, 8-bit colormap, non-interlaced","md5":"2b3edc519b2ad67994240723fb9e80cb","sha1":"a62ceae4dad4a2e755d0ffb3768d208c15fbe04e","sha256":"a7d335895aef79bceeb8e9aad50a54ad25f4b46eb7206a68ad8bbd5a0f20eb1e","sha512":"0681a49b4940ad2f58572970869114a1e28a653b578c044a0d8905cc8e536df13407cb2102a9987caa1156cbdffeadfc00a4437b76af42ac4ae61d9714177dc3","ssdeep":"","tlshash":"3011c8cb3700981b5b971b379595c8e491eb653920957b4086a0b43c53096b0c8f1d39","first_seen":"2026-05-16T18:29:26.308817Z","last_seen":"2026-05-16T18:29:48.507487Z","times_seen":2,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c1.vn2bijump.com/?ch=DEFAULT\u0026status=1","fqdn":"c1.vn2bijump.com","domain":"vn2bijump.com","tld":"com"},"ip":{"addr":"104.21.82.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:02.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vn2bijump.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 03:22:37 GMT","end":"Thu, 06 Aug 2026 03:22:36 GMT"},"fingerprint":{"sha1":"C8:3F:71:EF:9C:71:8A:C7:CC:CE:4C:17:CA:2C:08:24:31:2E:9E:F4","sha256":"DA:E6:A2:2D:97:74:D2:CD:4C:EF:4A:39:32:93:AC:2D:39:2C:6A:F3:DA:46:6D:D7:19:3E:F2:5E:07:45:22:2E"}}},"request":{"raw":"HEAD /?ch=DEFAULT\u0026status=1 HTTP/1.1\r\nHost: c1.vn2bijump.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ethereumusd.net/\r\nOrigin: https://ethereumusd.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 16 May 2026 18:29:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.7\r\nset-cookie: PHPSESSID=673uicl9oa5nlpa7f652fna69j; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6MFbv2ANox1QtBT17jdmXuwG16AktqVG8kaZVAKScqoXT2WrsdBNi1bkAA0Bhxrr7gmz133Z9MgkRaaFzAIZ2Ps59%2FcRlx6spN774tUyAzfMUQyZntHaAOvPyB%2BeLUgyN5XY\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9fcc72100e0056a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.7","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-17T07:14:59.945201Z","times_seen":15320232,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":295,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/static/images/ee2372855acb982ccb06fbef9ceffbbed15d86d2.png","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:14.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumusd.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 11:59:53 GMT","end":"Tue, 11 Aug 2026 11:59:52 GMT"},"fingerprint":{"sha1":"C1:F6:52:6C:35:42:E4:65:C9:33:E9:E8:C2:C1:56:F2:95:EA:93:43","sha256":"CA:35:71:0A:26:4E:FF:61:FA:B5:69:BA:FB:E1:83:67:61:30:23:05:08:C3:E1:57:68:BB:E2:B4:82:88:F0:1E"}}},"request":{"raw":"GET /static/images/ee2372855acb982ccb06fbef9ceffbbed15d86d2.png HTTP/1.1\r\nHost: ethereumusd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 376\r\nlast-modified: Wed, 13 May 2026 13:31:32 GMT\r\npriority: u=4,i=?0\r\netag: \"6a047d34-178\"\r\nexpires: Mon, 15 Jun 2026 18:29:14 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BWuuYw%2BqMrpF1BVQsEFQrAcVsRMGjSXz6CUUVKpGOb%2Bz3tnhoqezEjDySpTHniMZL3MfXn2749oB%2BDKW6pFUPkvPvgycsfNIgqj3hYml9IBmQygwvb9M8dv3A8E2hs4jaWw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcc725d590d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":376,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"9dc824640c5c4eb7009e6cd9c6b9bc20","sha1":"0e8206e6c0e96e05dbf7ad45254cb4a622f58fbf","sha256":"0f460216fd61ccd2cdee7794cf844d16a15642cf7c204ebdb1cd3b3e77a6afe5","sha512":"741e0f8b6730fc023753ea8eed79b594de58243ea640e216c0bf41abff5be247f4417d007cdc163cf6b7acef2d7c9d60ab8160150acdf121d2e26d59b75d050b","ssdeep":"","tlshash":"74e0f1eb17509cfb86102621164b24b9cfd705211028060854c65ab1154f6ff2628e86","first_seen":"2026-05-16T18:29:26.311007Z","last_seen":"2026-05-16T18:29:48.499132Z","times_seen":2,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/static/images/aa2a169707985c98490feb07c56ff15a8429d210.png","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:15.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumusd.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 11:59:53 GMT","end":"Tue, 11 Aug 2026 11:59:52 GMT"},"fingerprint":{"sha1":"C1:F6:52:6C:35:42:E4:65:C9:33:E9:E8:C2:C1:56:F2:95:EA:93:43","sha256":"CA:35:71:0A:26:4E:FF:61:FA:B5:69:BA:FB:E1:83:67:61:30:23:05:08:C3:E1:57:68:BB:E2:B4:82:88:F0:1E"}}},"request":{"raw":"GET /static/images/aa2a169707985c98490feb07c56ff15a8429d210.png HTTP/1.1\r\nHost: ethereumusd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 May 2026 13:31:32 GMT\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a047d34-117c\"\r\nexpires: Mon, 15 Jun 2026 18:29:16 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BPjmxMrBDzfJxMSjVM6QtdcOeH5L8IFBoLBgRHRqDbgYOFh8Qtg2vHZiUgX2olaMEKaqQp6Jr%2B7%2F5KzpxNfwxCrRw%2B1svtSIKI1BVWrdSVQOJgtITwEKg%2FGrggNz%2FjRiaX0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncf-ray: 9fcc72668a5b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4476,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"317da49f7965e8217bd4a11b3d4cca20","sha1":"f6ba58b511f73eaf80ab6624e28b8ff68a0e5ae6","sha256":"cb9cdc2eabf32ac17cdc1487d8f9d9eac037bb9e789a99b77caa9d1afb980d07","sha512":"a7221a0419d457d28e0e4f4ed5dec9e6eaa18dea80f50c55fb95a396ba280666fe294495be0a6c4009acdeee4ccf39be3ff40c8c33c6fa83da4bfbe8d1988091","ssdeep":"96:X6bjY0oDBSkZXE2yTDrhKM61nSLEYlCM0RtWbABNhX+TaRKZmboRM:XwYLSkBcrKCEcB0Cb+huTwKwcRM","tlshash":"13919e665388ccfa277c282ca568a56a4453dbfbcc5f1310ed52f4cc92d4028325edbb","first_seen":"2026-05-16T18:29:26.313308Z","last_seen":"2026-05-16T18:29:48.508455Z","times_seen":2,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":410,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-16T18:28:59.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumusd.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 11:59:53 GMT","end":"Tue, 11 Aug 2026 11:59:52 GMT"},"fingerprint":{"sha1":"C1:F6:52:6C:35:42:E4:65:C9:33:E9:E8:C2:C1:56:F2:95:EA:93:43","sha256":"CA:35:71:0A:26:4E:FF:61:FA:B5:69:BA:FB:E1:83:67:61:30:23:05:08:C3:E1:57:68:BB:E2:B4:82:88:F0:1E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ethereumusd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 16 May 2026 18:29:00 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 14 May 2026 10:08:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FUrRkHjBPtIC3QM8g5POLpcUa242oINL8JxOzxjxh4JyoZEtN1lmqcZti13czCLhAn1kgetrTpZ7sNeBg1BjuJ%2FMW9LrPGfBZ5Jk6GMGI7JuaIvVu2N%2Bc3ppWCHP6HSxWf4%3D\"}]}\r\ncache-control: max-age=36000\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncontent-encoding: br\r\ncf-ray: 9fcc72004e1d5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":178857,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (408)","md5":"1ec94fb410c51f03ee6e0e27a203b1dd","sha1":"10d682218760be9ce915dea21045c8a008eafd01","sha256":"0850e188f7bc059fef16d60e0540e0a26a1cca5938832382bcd8cd074eed3f67","sha512":"8030955bf4dcd46c3b0050d3c17c55dbe93ff602d7ec47b9496417697abd7dabaa1226a368b29c66607511232f29b7952cd4f6fa756e419ac150b80d58793651","ssdeep":"3072:geIkbvZ1aga5pS3Dtrys5IorpcFdcUoYp7c1xjRS:geqc1a","tlshash":"e504d86023f128f601a78ab465e95b0eee9df317d5a3c94876fc02626fd3ca6dd43604","first_seen":"2026-05-16T18:29:26.320155Z","last_seen":"2026-05-16T18:29:48.511051Z","times_seen":2,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":567,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17?plugins=typography@0.5.16,forms@0.5.10,aspect-ratio@0.4.2,line-clamp@0.4.4","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:00.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET /3.4.17?plugins=typography@0.5.16,forms@0.5.10,aspect-ratio@0.4.2,line-clamp@0.4.4 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ethereumusd.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 16 May 2026 18:29:00 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::9nk5l-1778775078402-6600160397cc\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 181061\r\nlast-modified: Fri, 15 May 2026 01:38:10 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Yu7Jtk57Hr8DvYzAvgTk48Fgm%2FIlt0PUdr72uAGXp8s8wBJuu97EJAzL84NJDQWXUvBS716WXmqVSB%2FYU%2FkyWDFF9n8tahbzq660YcDBtDxHFPCLJMRxWQJdmOtD9IPOcDQsgo%3D\"}]}\r\ncf-ray: 9fcc7205df475684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":511274,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52873)","md5":"a6ff41f534ea7db5cca13f0a6c99e797","sha1":"4e68adb7f6501329cc30bdff0f6ec3ab27ec1d19","sha256":"dc8a726179f17dd97e2b3b54ca3e296fa1d2625fef306e626415d88151830b65","sha512":"b3b46841f55f637d537e9f25133eab71fae2d58cbb4399309c8a60b14f7998eb05b19fb41384dbcae2d57ad1d0f7a68beb3e1aa1afa337b555b3149aaa1628a2","ssdeep":"6144:whg5Cjcfn5vuN/YVy61LL5OjeCteMPLfdBDbTbSCyXsFO0s:kg5CjcfkN/YVy61LLCe83nn+uFO0s","tlshash":"efb43ba97356b13647eba1e850ab1402f37d9928900c84acf79dc4ea3de4d4950bbf3d","first_seen":"2026-04-25T23:04:45.1437Z","last_seen":"2026-05-17T00:36:18.844592Z","times_seen":6,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vn2countbi.top/api/event","fqdn":"vn2countbi.top","domain":"vn2countbi.top","tld":"top"},"ip":{"addr":"104.21.8.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:01.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vn2countbi.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 03:27:11 GMT","end":"Thu, 06 Aug 2026 03:27:10 GMT"},"fingerprint":{"sha1":"83:2E:EC:01:5E:05:49:9D:7A:7E:DA:74:82:F9:7B:06:47:B6:3E:78","sha256":"AA:49:B3:CD:E0:80:D9:44:2E:B8:85:1A:38:9F:50:2F:6A:8D:F7:B7:B6:23:78:1B:49:CD:71:F5:A6:66:55:05"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: vn2countbi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ethereumusd.net/\r\nContent-Type: text/plain\r\nContent-Length: 88\r\nOrigin: https://ethereumusd.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":88,"data":"{\"n\":\"pageview\",\"v\":3,\"u\":\"https://ethereumusd.net/\",\"d\":\"vn-all\",\"r\":null,\"p\":{},\"h\":1}"}},"response":{"raw":"HTTP/3 202 Accepted\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:02 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GLAfL6c2i9FTkSgABHqh\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HUZotOPykeB0GfJT%2BXWdG5qsN%2FK%2FzJfSME4EDHWXAJpQO8JWZKNdkNkK80kMWRO4oQ%2BoFNJveJWu8LfcqObTOtUymvFvJDABmW3d%2FysQRzRBtJ4vje4YMIwybliPf5XP5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fcc720f7c0cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-05-17T07:16:41.411708Z","times_seen":412808,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/static/images/55611760d94f48fa0a4fe9e7277747f6a3325032.png","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:17.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumusd.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 11:59:53 GMT","end":"Tue, 11 Aug 2026 11:59:52 GMT"},"fingerprint":{"sha1":"C1:F6:52:6C:35:42:E4:65:C9:33:E9:E8:C2:C1:56:F2:95:EA:93:43","sha256":"CA:35:71:0A:26:4E:FF:61:FA:B5:69:BA:FB:E1:83:67:61:30:23:05:08:C3:E1:57:68:BB:E2:B4:82:88:F0:1E"}}},"request":{"raw":"GET /static/images/55611760d94f48fa0a4fe9e7277747f6a3325032.png HTTP/1.1\r\nHost: ethereumusd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 May 2026 13:31:32 GMT\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a047d34-54a\"\r\nexpires: Mon, 15 Jun 2026 18:29:17 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2FZ2Zu7HXS%2BBCxnQK1g8gsUQvOHsg5JS8F8NkJdtRmDIMATxSecy1rF%2F3ZfRiBbd%2F4Jj88NZSETiQfQVaxLcLq5WWyZCgFxEOPM%2BhtNaDZp74b71J%2FiA5nDWHsiRVtw5Lyc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncf-ray: 9fcc726fac300731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"e77c1318378190551bcbd0dddf1d33a8","sha1":"0a11ae2c5942fdc78beacb3e692ca5c967d50887","sha256":"6edbd6271ab2129d2241a1bbd980aba129d04937f85c5a62f0ee6ce6338056f1","sha512":"f22d3d6304e8f2bb16066801d323be7ec1f21b625385b3b9adebf791e3000535b79a340a48f57fb76bdaed821ffffa9603bb7a3e8f23db9ff756808b169aeaa5","ssdeep":"","tlshash":"a521fef0434e73dab37259a5ca4d1d196f6b531f370611c91074636c06bc8d8514df15","first_seen":"2026-05-16T18:29:26.327838Z","last_seen":"2026-05-16T18:29:48.471952Z","times_seen":2,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@8/swiper-bundle.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:00.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@8/swiper-bundle.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 8.4.7\r\nx-jsd-version-type: version\r\netag: W/\"406d-rwCOh5O6dcNGNg6U6W482jFM4n8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 16 May 2026 18:29:00 GMT\r\nage: 6402\r\nx-served-by: cache-fra-etou8220174-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4570\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16493,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (16237)","md5":"04720c60bc020cbba92785dd4029f7d2","sha1":"af008e8793ba75c346360e94e96e3cda314ce27f","sha256":"322d15d99efb792c941a5202fa8fc7ee9e932847227383ff9605163338a08eac","sha512":"37622c5ae2ac0586221cd61d684b8ae1e691274a277d41be71d66296775868c12150642afcc72c154ef9ab737e8db2543579ba3be2b9d8346b2be6d2a411a3d3","ssdeep":"192:i2mUJbiKneTT4bHZ+SKqnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:iTUbeTMbHZ+knh2AVfHfA4XYz","tlshash":"f57223681340282753274f374b71cbb9ddb444d24b93896e91c0ee88d7b6cb9236f6e9","first_seen":"2023-04-05T08:09:54Z","last_seen":"2026-05-17T06:52:30.613801Z","times_seen":10965,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":72,"dns":11,"connect":26,"send":0,"wait":27,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/static/images/7dd4dc1987509b11633bd0e11159ea8246cdce69.webp","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:01.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumusd.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 11:59:53 GMT","end":"Tue, 11 Aug 2026 11:59:52 GMT"},"fingerprint":{"sha1":"C1:F6:52:6C:35:42:E4:65:C9:33:E9:E8:C2:C1:56:F2:95:EA:93:43","sha256":"CA:35:71:0A:26:4E:FF:61:FA:B5:69:BA:FB:E1:83:67:61:30:23:05:08:C3:E1:57:68:BB:E2:B4:82:88:F0:1E"}}},"request":{"raw":"GET /static/images/7dd4dc1987509b11633bd0e11159ea8246cdce69.webp HTTP/1.1\r\nHost: ethereumusd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4746\r\nlast-modified: Wed, 13 May 2026 13:32:28 GMT\r\npriority: u=4,i=?0\r\netag: \"6a047d6c-128a\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nP8EWmzVU7mwfV3RQIxQAFOzRX4hv2MuJghuFIYSTndIqfZATF4Is%2Fu9csYPG81ZkPe433NAp%2BDBddUcN%2BpMdkHcn1emkXlqJbk6QARcJXHC0qR7ltx7FyS7swoZFsT4910%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcc720f5b380731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4746,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f624afd8f972b38027141792513a6f17","sha1":"a1e87befcacfe9b14ec971b191ab7dab25cbda1f","sha256":"3cf236d1a268e46725bed01fc7b8bb9e5bb30e8888c12b0ba7fcab69c95d7fc1","sha512":"4a96119dd92ed0997d59e3322f36ff86bd2f3203576dfe53f61906cefa7d74a7d207e2a38d11668c5a02f4f58ee1e1b9ce80d3fefc987b2c7658d5e7ab22afae","ssdeep":"96:EI2f0ncb4rKrdoUx0p/sjOcZRvYHlHOw8K07lwBpb90btRkKOrWs1HbRV586f:EIVncm780BsjOcZBolHDmiL9atRkKmRx","tlshash":"77a1aec7b479a04f2b6df139811b632969bead78852abd44c853533a0cd0b46079ccc6","first_seen":"2026-05-16T18:29:26.33183Z","last_seen":"2026-05-16T18:29:48.500739Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/static/images/7957d3657e33383be1e16a893832bf356a7d0663.png","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:01.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumusd.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 11:59:53 GMT","end":"Tue, 11 Aug 2026 11:59:52 GMT"},"fingerprint":{"sha1":"C1:F6:52:6C:35:42:E4:65:C9:33:E9:E8:C2:C1:56:F2:95:EA:93:43","sha256":"CA:35:71:0A:26:4E:FF:61:FA:B5:69:BA:FB:E1:83:67:61:30:23:05:08:C3:E1:57:68:BB:E2:B4:82:88:F0:1E"}}},"request":{"raw":"GET /static/images/7957d3657e33383be1e16a893832bf356a7d0663.png HTTP/1.1\r\nHost: ethereumusd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 May 2026 13:32:28 GMT\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a047d6c-46e\"\r\nexpires: Mon, 15 Jun 2026 18:29:02 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gM52WtNTRngCyXL1IOX8sdZ1QQ6XeDcx4%2BPmOkFpbyh6lhDPssmJzBBOjEMG6AFRAfvtAZvResyNvLzq%2Fe9r7T8TLwpbTzG7%2BfVTzi2C93u20slquLdupMHneqp8giiGhUw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncf-ray: 9fcc720f5b390731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1134,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"b603e01f8c5ca77a0a5fc0df2797b697","sha1":"05633ce873bf1ad62b3c03775441f98b151ed796","sha256":"dd4d98fc74211b6fbc353a60a467e7cf07d860b7512c742c3f24a9a0eb55d843","sha512":"d9d61a7fa0386a653123658b083ed0aaccaa310a2311e5cf5dd64b2bed5ff777700f956cd0ccef56d8906570df74588defba6f5fd1e55ea67175b16f43440714","ssdeep":"","tlshash":"fe219699892ddd7cd2a8163159ac442cd498e864c5a53d9488bdd30fca6c9cd9193631","first_seen":"2026-05-16T18:29:03.232866Z","last_seen":"2026-05-16T18:29:48.518451Z","times_seen":4,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/static/images/a55858801045b8b01fd567b1d03acfc0747c5c72.png","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:11.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumusd.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 11:59:53 GMT","end":"Tue, 11 Aug 2026 11:59:52 GMT"},"fingerprint":{"sha1":"C1:F6:52:6C:35:42:E4:65:C9:33:E9:E8:C2:C1:56:F2:95:EA:93:43","sha256":"CA:35:71:0A:26:4E:FF:61:FA:B5:69:BA:FB:E1:83:67:61:30:23:05:08:C3:E1:57:68:BB:E2:B4:82:88:F0:1E"}}},"request":{"raw":"GET /static/images/a55858801045b8b01fd567b1d03acfc0747c5c72.png HTTP/1.1\r\nHost: ethereumusd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 556\r\nlast-modified: Wed, 13 May 2026 13:31:32 GMT\r\npriority: u=4,i=?0\r\netag: \"6a047d34-22c\"\r\nexpires: Mon, 15 Jun 2026 18:29:11 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c1%2FwxXqGmQwR5CNSxKzY2gdHsHOzbXuuFJ0Byu6YtB7OhMFpB3JSfbOYdgnq%2FofdIA0VcOO2QPEib7YLf05bWoqyILsTCgtGpDxUQstT2UaJDO%2FSkSDG4DVZTbQo7mQ7yys%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcc7249fd8e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":556,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"819b7dac5010b1f5d2ea8189709aec10","sha1":"4e405be0aaae5a19f86693ce30a5de8b1bed98b3","sha256":"1d0bc60851ced937081dbfb29e0d8fc39eb7519632ee7688ce8444cba7593a20","sha512":"87d32c54cc765bee40a452f1f3dc52b1baec867fcb7414ca6886692e3459a04d3f29b93482b687183b90d2c2869ffcb8d3a3ac6f3d312fb19710975008b84544","ssdeep":"","tlshash":"59f026d7f3c50cf7d335d9579411e644ecfb0f654a854d561f5ec1691443804d276213","first_seen":"2026-05-16T18:29:26.335333Z","last_seen":"2026-05-16T18:29:48.520666Z","times_seen":2,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":404,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/static/images/logo.png","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:00.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumusd.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 11:59:53 GMT","end":"Tue, 11 Aug 2026 11:59:52 GMT"},"fingerprint":{"sha1":"C1:F6:52:6C:35:42:E4:65:C9:33:E9:E8:C2:C1:56:F2:95:EA:93:43","sha256":"CA:35:71:0A:26:4E:FF:61:FA:B5:69:BA:FB:E1:83:67:61:30:23:05:08:C3:E1:57:68:BB:E2:B4:82:88:F0:1E"}}},"request":{"raw":"GET /static/images/logo.png HTTP/1.1\r\nHost: ethereumusd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 May 2026 13:39:06 GMT\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a047efa-14a2\"\r\nexpires: Mon, 15 Jun 2026 18:29:00 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R6%2FMb2Hm4ceyHdK5kTAd7yFRhhKXVHXt2qKASbSDzeAgSLdmtdspSHFQfz3V0iqvYgVZTNFYZdnRSOiectxQ%2BJlrRbVDiZZrooz51%2BOMezhQvMsoZFWE%2FA8nu%2FWPe6W9beA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncf-ray: 9fcc720548a00731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5282,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit/color RGB, non-interlaced","md5":"0a4db9365002d14676e4c0384337db73","sha1":"6f9d4d42ced8e059e55ba5300d1fa5674fe5cef7","sha256":"e8dbe91084660bb1dcb3ceb0834a53c71a308630f90f58bda04f0b843ca0d5c2","sha512":"9ea5dbb1d58d4125f16403a885117499f55f18baa99cbaac407c829d0fb55fa385738b24ee66af01bdb95ddbbf40c2150cd65a24308f8d8163bed173c61814a3","ssdeep":"96:dSpVzAOevgT70DKy5yCV2pLH+tyumTponP9Lqi459uto5ArPW87dZ4dv3yAzm:dSUqEDDy42pLenAOn8ROH+87eyV","tlshash":"c4b17eaed96df792760056067fa30855cabd8c90d549db62e0e03222d843e401f5c42f","first_seen":"2026-05-16T18:29:03.272912Z","last_seen":"2026-05-16T18:29:48.483835Z","times_seen":4,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/static/js/global.js","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:00.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumusd.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 11:59:53 GMT","end":"Tue, 11 Aug 2026 11:59:52 GMT"},"fingerprint":{"sha1":"C1:F6:52:6C:35:42:E4:65:C9:33:E9:E8:C2:C1:56:F2:95:EA:93:43","sha256":"CA:35:71:0A:26:4E:FF:61:FA:B5:69:BA:FB:E1:83:67:61:30:23:05:08:C3:E1:57:68:BB:E2:B4:82:88:F0:1E"}}},"request":{"raw":"GET /static/js/global.js HTTP/1.1\r\nHost: ethereumusd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 10:35:32 GMT\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a05a574-2bd0\"\r\nexpires: Sun, 17 May 2026 06:29:00 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PjHXViDScNCAdUU8PvzFDe%2BMw6Hn%2BfU8aAwzSHJRqRt6SR42kSq3X5%2BK9NTnph%2F1sYOrNY%2FUy6aFPNB5X6OWQ8swx3DINqksCqqUghKoiQJ6tWgRhPrS6ZG2Qe527gSeaoE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncf-ray: 9fcc7205c8b10731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11197), with no line terminators","md5":"cceb4f593faae39575c2373f7d859d50","sha1":"1460b97e0e037bcdf104c2a3c637ae12d469eb64","sha256":"29d84bee45e4bc5905e572cbbe5bf3e24cc66617a0b7b79b2a0b2ec8540a4019","sha512":"0599cb65bd8b9c6dc446585072de7f522881d3b034a5c091fe1767242458eb8bcc65fe41663c309652cb4b37de7ecbfe583f86e4ea46ed6a2557bb0098e3eade","ssdeep":"192:ls6M136s845r+BZaEPanCF5TqVl6aatb3yQCIoVt0YvzRZCSd6nfDdQ9J46wWxWE:ls6M136sP1+BgEPan+VWlna0rdZCSd6Q","tlshash":"793219883f21309c095129f37bba9909f23d4d8278c7c8c9e12d295fef5a31eb576648","first_seen":"2026-05-16T18:29:03.240555Z","last_seen":"2026-05-16T18:29:48.491586Z","times_seen":4,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@8/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:00.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@8/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 8.4.7\r\nx-jsd-version-type: version\r\netag: W/\"2315a-9NyNRghnOcWBIRhbLQ9OGQcQ8Rs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 16 May 2026 18:29:00 GMT\r\nage: 19842\r\nx-served-by: cache-fra-etou8220199-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 40660\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143706,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65280)","md5":"24fd8f796609d79fcb7b6e5ae754433b","sha1":"f4dc8d46086739c58121185b2d0f4e190710f11b","sha256":"f645b12f27c4e9c1210d5725cfa894b86464372e7b1becbe47126a5fe82f9ade","sha512":"87956ffa7fb3d1e467949a14956319e0f2d0bf825f68256d814f53b518cd62e365b52e500aa8b80f87999f8524cd966e1b6a78541cf760896c07b036355adbc3","ssdeep":"3072:RJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:RJLC4dkEUYnafpl9v8cIWybV4y+oGMMC","tlshash":"c3e3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2023-03-13T12:29:47Z","last_seen":"2026-05-17T06:52:30.645225Z","times_seen":12699,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":27,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/static/images/e2b2d12d167cf8acdac80172439cbfd2870e6bc8.png","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:01.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumusd.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 11:59:53 GMT","end":"Tue, 11 Aug 2026 11:59:52 GMT"},"fingerprint":{"sha1":"C1:F6:52:6C:35:42:E4:65:C9:33:E9:E8:C2:C1:56:F2:95:EA:93:43","sha256":"CA:35:71:0A:26:4E:FF:61:FA:B5:69:BA:FB:E1:83:67:61:30:23:05:08:C3:E1:57:68:BB:E2:B4:82:88:F0:1E"}}},"request":{"raw":"GET /static/images/e2b2d12d167cf8acdac80172439cbfd2870e6bc8.png HTTP/1.1\r\nHost: ethereumusd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 May 2026 13:31:08 GMT\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a047d1c-80b2\"\r\nexpires: Mon, 15 Jun 2026 18:29:01 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pykhk4GOvMEaaJ1ePj56wBwonEO0JinhpFAvIrIxjTVH0fvuO1cagIQP1lj4pJcqF2%2BNUtMmlMvck1ZUTqazjTqCPY%2F%2FlDl0ZE%2BMY5SpYcKMLSUDWA0VlfVqSWXwiJAm0j8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncf-ray: 9fcc720cea990731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32946,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 162, 8-bit colormap, non-interlaced","md5":"3fd66ebfc4329abec3af0e5f595ebb86","sha1":"ecb0a630a050a15ff6997d805b366ac72b9a9d5b","sha256":"e63f868e1dae675c797b1df51942682307a31496eb31ee256e1e5c7cb492ef35","sha512":"86516654ff0cd81ab75fbe164296668d4538743b80c7b736b18ddcba3cb0c78931a8ca0d0253fffdb6d3baf7cb7783722a74a73f2c0724ab5ba719f7c1b1e670","ssdeep":"768:QPvnr2aBFtvd2zeRV7TAJkJ3k8lde6SZaKTnZMu2TAUW:QHrB1F2CjTgkJ3kEe6SZp7l","tlshash":"b7e2f1673e92f97612f329cd6ac008cc81336a9f6833931570ed86e056bd19e536b746","first_seen":"2026-05-16T18:29:26.339088Z","last_seen":"2026-05-16T18:29:48.473655Z","times_seen":2,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":452,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/static/images/97d5a4478460f093bf5e171102876d8930a21070.png","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:18.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumusd.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 11:59:53 GMT","end":"Tue, 11 Aug 2026 11:59:52 GMT"},"fingerprint":{"sha1":"C1:F6:52:6C:35:42:E4:65:C9:33:E9:E8:C2:C1:56:F2:95:EA:93:43","sha256":"CA:35:71:0A:26:4E:FF:61:FA:B5:69:BA:FB:E1:83:67:61:30:23:05:08:C3:E1:57:68:BB:E2:B4:82:88:F0:1E"}}},"request":{"raw":"GET /static/images/97d5a4478460f093bf5e171102876d8930a21070.png HTTP/1.1\r\nHost: ethereumusd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 463\r\nlast-modified: Wed, 13 May 2026 13:31:32 GMT\r\npriority: u=4,i=?0\r\netag: \"6a047d34-1cf\"\r\nexpires: Mon, 15 Jun 2026 18:29:19 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=toMY6s3gXcQ06BmBRIVZrDZonH3AgClKmOfvMA41Rnjo6ZndwtFFz%2F9EzRMxXSx%2FcuKtMPcTC6HnWwgJWUK7KnQczEcPu4zc5faZEaNTd8nSBROsokY1gJgnBKMVQXRfMwA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcc7278adf50731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":463,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2b4482d7e4d7c9a881bb519858e23177","sha1":"a55fb7cf46dcd5293d6cc8a93c6c9aaea9fc5f94","sha256":"fc350b4097893edba1b77f14018b63da6e70e639d381764cc9f9b2f49b05ae84","sha512":"724b3baf2aa9aec86dfa2c90ddc5d1f4b290ee7617a8fcabdc639bf30d0220249a864a8600fb291eeb1baa12a496d1cfb37cb0d0b205bd46fc64426aed1a960f","ssdeep":"","tlshash":"47f02bc913f45af59f4557e4a1170c30d2f01ff81c73d046279583617927008f55c653","first_seen":"2026-05-16T18:29:26.340645Z","last_seen":"2026-05-16T18:29:48.521841Z","times_seen":2,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":383,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vn2countbi.top/js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js","fqdn":"vn2countbi.top","domain":"vn2countbi.top","tld":"top"},"ip":{"addr":"104.21.8.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:00.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vn2countbi.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 08 May 2026 03:27:11 GMT","end":"Thu, 06 Aug 2026 03:27:10 GMT"},"fingerprint":{"sha1":"83:2E:EC:01:5E:05:49:9D:7A:7E:DA:74:82:F9:7B:06:47:B6:3E:78","sha256":"AA:49:B3:CD:E0:80:D9:44:2E:B8:85:1A:38:9F:50:2F:6A:8D:F7:B7:B6:23:78:1B:49:CD:71:F5:A6:66:55:05"}}},"request":{"raw":"GET /js/script.file-downloads.hash.outbound-links.pageview-props.revenue.tagged-events.js HTTP/1.1\r\nHost: vn2countbi.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 16 May 2026 18:29:00 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nage: 25\r\nlast-modified: Sat, 16 May 2026 18:28:35 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ayej9CEfmdimA7ZKB9T6P6TLvN2BtsIE1uUR85aS1DtkYyaPqw8XIK4btDu08aAqzQGx24VFzIDEwgH5gkJPPLoU%2BH8ib%2Fy6Qa9108U0X6cOOqQK4F%2BJm9mWAwgonC2rGQ%3D%3D\"}]}\r\ncf-ray: 9fcc7205eda9b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5115,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5115), with no line terminators","md5":"516ca67380287bda42833b3c1acf9c74","sha1":"b632f77cd9bd89b2d0f985e7ed2c2ff8bb5174c9","sha256":"0b1682605117a65469d252ba0f32e8b9aded53dbd788197c904e139de463f992","sha512":"c11827343c93be623162470ede22c1439b2f5233d4be39b4d01abd3a29d947c87099fcf777f9b5a3f512354a77c1ebd6e18159c49d78fb8f57e860aafd3846e3","ssdeep":"96:YwMXvSyLfekD8eY8LFnICm4F3sA/S6Gg1lUzCs/:tMNDDPICn3sA2gzUzV","tlshash":"21b1a5de7a01b5b994b9953b962f3206723b2577680c04007435ddc52e2cfeb63b2d9e","first_seen":"2025-05-11T10:37:33.481295Z","last_seen":"2026-05-17T00:36:18.839951Z","times_seen":219,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":17,"dns":1,"connect":4,"send":0,"wait":8,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/static/images/f5ef1a367f32811a41241c18fd890cf830bc2b68.webp","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:01.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumusd.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 11:59:53 GMT","end":"Tue, 11 Aug 2026 11:59:52 GMT"},"fingerprint":{"sha1":"C1:F6:52:6C:35:42:E4:65:C9:33:E9:E8:C2:C1:56:F2:95:EA:93:43","sha256":"CA:35:71:0A:26:4E:FF:61:FA:B5:69:BA:FB:E1:83:67:61:30:23:05:08:C3:E1:57:68:BB:E2:B4:82:88:F0:1E"}}},"request":{"raw":"GET /static/images/f5ef1a367f32811a41241c18fd890cf830bc2b68.webp HTTP/1.1\r\nHost: ethereumusd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:02 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2192\r\nlast-modified: Wed, 13 May 2026 13:32:28 GMT\r\npriority: u=4,i=?0\r\netag: \"6a047d6c-890\"\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Buixg8owZgGces4y7BU3ggn5BSPDi%2FY0TYBVKxqJ9Mes3R%2B6hGGse08hOwfQvHlPZiOTBzHCYBAiVOulrmdS3fwMCjRoWKG4J2qHPM6SZqiYhkrc6FLJB98G0HKdIdplClU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\ncf-ray: 9fcc720f6b3e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2192,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"960368fd28d3ba6235e2bc8cfcc39e6e","sha1":"ef8ddebe61646b76becbe327a768d1060031d746","sha256":"c7e87a8dad06bfeea5dc7346bf64f8cbc8e9772be17c0730a7446da15e06261e","sha512":"8d229fe837d3d49495377fa844c9a3622ee2df795f2e513a8067527c951b3f81836091be270ad8056ab9cfa28d100145456220633ed0d5d752f8a4c293a33360","ssdeep":"","tlshash":"0441078fb97931edb95d2791f29976d008e3308c03c925cd3d135dda850a694c89b875","first_seen":"2026-05-16T18:29:03.228407Z","last_seen":"2026-05-16T18:29:48.470651Z","times_seen":4,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ethereumusd.net/static/images/ico.png","fqdn":"ethereumusd.net","domain":"ethereumusd.net","tld":"net"},"ip":{"addr":"172.67.164.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ethereumusd.net/","date":"2026-05-16T18:29:02.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ethereumusd.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 May 2026 11:59:53 GMT","end":"Tue, 11 Aug 2026 11:59:52 GMT"},"fingerprint":{"sha1":"C1:F6:52:6C:35:42:E4:65:C9:33:E9:E8:C2:C1:56:F2:95:EA:93:43","sha256":"CA:35:71:0A:26:4E:FF:61:FA:B5:69:BA:FB:E1:83:67:61:30:23:05:08:C3:E1:57:68:BB:E2:B4:82:88:F0:1E"}}},"request":{"raw":"GET /static/images/ico.png HTTP/1.1\r\nHost: ethereumusd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ethereumusd.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 16 May 2026 18:29:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 May 2026 13:39:06 GMT\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a047efa-3a53\"\r\nexpires: Mon, 15 Jun 2026 18:29:02 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K5LwU%2BA%2FNVVprfAUTZkFGmg9w1HaDgApC0kuobeKPHlDyw7IaJtBvvgetBd1hC9nBcDBUX8mB%2FRUeJir2vJMbv0DdVIyp9D6vu67tUj%2Fd1s46fBRYauGc4OkoJ98iz2Nas8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncf-ray: 9fcc72126bd10731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14931,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"831551de474531d79758c1b10310bd40","sha1":"e10a8c702095e90a73443a5966e7a7e5d71f0ffb","sha256":"dab4df11f188885b802d87b8b85eabb1ae28c1a94f26151d449a949325c5b156","sha512":"d433e7d76e13f40be387e8e9c8ba819cc313ae3764bfae3cf4879d7a5eac5c6da396c0e029201efdb453c27c3920acbc59de881986b127d6b7f80e6ef30065c8","ssdeep":"384:UhU0roMoJcVZKt0zflLKqa8Wiie4dEvJtePGvDw:aZnN0t0zl+4Wiie4qviO7w","tlshash":"0962d0c65d4bc83de937f02c75d1b9be11c30a945e6cd6f0d852ba8aac912d3441278e","first_seen":"2026-05-16T18:29:03.274925Z","last_seen":"2026-05-16T18:29:48.476376Z","times_seen":4,"resource_available":false,"data":null}},"time_used":595,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":399,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-16","alert":"Sinkholed","trigger":"ethereumusd.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}